Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b442d26c-05ba-47ef-a759-35065391db94/5921f5f4e056a68e6a5ae5f10747e1bdca39f7d8.roa
File:                     5921f5f4e056a68e6a5ae5f10747e1bdca39f7d8.roa (raw, json)
Hash identifier:          b4YIwjFgJrycE3+fM1AHJOXlzA9n8SsKYZrIoBSeBRM=
Subject key identifier:   95:35:01:74:D6:08:B4:6C:01:39:25:BF:43:0B:83:20:51:F0:EE:14
Certificate issuer:       /CN=7fd57ce085f535ff9e974a7714dec8bddaba86d8
Certificate serial:       12EAC3
Authority key identifier: 57:0A:43:96:87:0E:81:8E:1A:87:CB:62:F2:74:98:FB:9D:5D:AB:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fd57ce085f535ff9e974a7714dec8bddaba86d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b442d26c-05ba-47ef-a759-35065391db94/5921f5f4e056a68e6a5ae5f10747e1bdca39f7d8.roa
Signing time:             Fri 13 Oct 2023 17:09:32 +0000
ROA not before:           Thu 12 Oct 2023 17:09:32 +0000
ROA not after:            Mon 13 Oct 2025 17:09:32 +0000
asID:                     269955
IP address blocks:        190.89.44.0/22 maxlen: 24
                          2803:26e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239747 (0x12eac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd57ce085f535ff9e974a7714dec8bddaba86d8
        Validity
            Not Before: Oct 12 17:09:32 2023 GMT
            Not After : Oct 13 17:09:32 2025 GMT
        Subject: CN=5921f5f4e056a68e6a5ae5f10747e1bdca39f7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:30:6d:d7:f9:7a:2a:d3:00:d7:8a:26:7d:
                    00:89:08:ca:c3:d7:10:bc:5a:92:f5:54:03:43:b1:
                    b9:cb:db:52:17:ce:8a:bd:da:67:99:af:e5:99:70:
                    6d:ff:2d:12:ac:17:34:0c:1f:f8:e4:cf:76:62:8b:
                    80:24:e8:5d:56:41:bc:97:84:23:f1:ea:35:df:d6:
                    d2:0e:dc:49:88:fc:b0:78:ab:9c:67:39:98:4b:aa:
                    2d:68:ea:78:30:9e:2f:3d:de:65:35:02:3c:44:94:
                    5a:db:e8:41:27:17:2b:d4:b0:5b:5e:57:6a:ea:77:
                    38:56:ef:0e:62:c7:23:ea:ee:85:87:e7:1b:e5:34:
                    ad:dd:71:b0:82:73:fb:23:dd:35:8f:7c:57:c8:75:
                    51:5d:cf:46:24:14:76:52:3a:9c:24:96:9d:fc:ba:
                    2c:f7:36:32:63:0b:41:14:d3:b3:91:a4:9b:3f:a6:
                    83:2b:40:4f:f7:7a:7a:c2:06:15:71:d8:0f:54:ec:
                    bc:bd:fd:57:7c:da:80:f4:b1:93:b7:ef:52:c4:8e:
                    23:e9:34:a7:86:47:75:ab:1f:7e:57:76:a2:02:bc:
                    7a:ff:a5:1e:19:5a:15:71:d1:d2:aa:38:ee:86:1d:
                    cf:77:57:04:fa:a3:0d:31:12:0c:b2:36:5b:ae:de:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:35:01:74:D6:08:B4:6C:01:39:25:BF:43:0B:83:20:51:F0:EE:14
            X509v3 Authority Key Identifier:
                keyid:57:0A:43:96:87:0E:81:8E:1A:87:CB:62:F2:74:98:FB:9D:5D:AB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fd57ce085f535ff9e974a7714dec8bddaba86d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b442d26c-05ba-47ef-a759-35065391db94/5921f5f4e056a68e6a5ae5f10747e1bdca39f7d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b442d26c-05ba-47ef-a759-35065391db94/7fd57ce085f535ff9e974a7714dec8bddaba86d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.44.0/22
                IPv6:
                  2803:26e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:9b:1e:93:6d:63:01:0a:8e:7b:a5:78:97:ae:06:44:cd:b6:
         6a:f6:44:cc:b2:30:52:ce:37:b1:da:c5:f0:99:30:2e:0b:48:
         5f:4a:94:b5:3e:7c:ce:b4:07:81:d6:43:2d:b2:23:92:c2:98:
         75:6c:08:0c:43:b0:ee:0d:7d:01:e6:b3:53:61:4e:e3:a5:af:
         d1:02:4a:6b:eb:42:09:bd:8c:66:25:ce:02:7b:62:e4:b1:b9:
         3d:16:74:6f:3f:be:57:ed:bf:04:88:5b:fc:ed:02:e4:72:fe:
         b9:ab:fb:25:6f:9a:32:ea:00:ad:ed:07:2c:07:64:83:14:4e:
         5c:e4:1a:a8:6f:39:14:f6:6f:91:fb:a1:30:b5:be:94:2c:0d:
         5c:77:47:d5:9e:60:e3:e1:16:a6:be:30:66:6f:07:6f:b3:71:
         3f:09:e0:40:63:ba:68:69:b0:8b:19:ff:1e:9c:e4:4d:ff:3e:
         ef:40:2b:43:a8:40:51:c0:ea:58:25:6a:14:86:8e:ff:ad:0d:
         ae:7e:f0:3f:1c:5b:06:c1:82:b8:80:26:32:f4:d8:79:c0:79:
         8f:f2:ec:20:98:fd:3e:46:91:1a:c5:c6:56:04:8e:d0:81:fb:
         b5:93:45:8f:0f:56:62:9a:81:34:f3:7e:6d:5f:6c:ed:f3:d3:
         6e:6c:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----