Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/1548cbcb4b4d1bb72b5eab8c36caf34ac813815a.roa
File:                     1548cbcb4b4d1bb72b5eab8c36caf34ac813815a.roa (raw, json)
Hash identifier:          EKWPrry+N0Tn+BsQcrTKs1PmxXiqO504iKL2Xi1FHj0=
Subject key identifier:   40:57:17:A6:8A:7E:64:2F:87:32:45:21:01:D1:9B:16:72:51:67:E5
Certificate issuer:       /CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
Certificate serial:       15C8E9
Authority key identifier: E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/1548cbcb4b4d1bb72b5eab8c36caf34ac813815a.roa
Signing time:             Wed 02 Mar 2022 14:58:49 +0000
ROA not before:           Thu 12 Aug 2021 03:00:00 +0000
ROA not after:            Sat 12 Aug 2023 03:00:00 +0000
asID:                     23243
IP address blocks:        181.189.128.0/24 maxlen: 24
                          181.189.144.0/21 maxlen: 24
                          181.189.152.0/24 maxlen: 24
                          181.189.154.0/24 maxlen: 24
                          190.111.17.0/24 maxlen: 24
                          190.111.24.0/24 maxlen: 24
                          190.111.29.0/24 maxlen: 24
                          200.94.249.0/24 maxlen: 24
                          200.94.251.0/24 maxlen: 24
                          2803:3a00::/37 maxlen: 48
                          2803:3a00:1800::/37 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1427689 (0x15c8e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
        Validity
            Not Before: Aug 12 03:00:00 2021 GMT
            Not After : Aug 12 03:00:00 2023 GMT
        Subject: CN=1548cbcb4b4d1bb72b5eab8c36caf34ac813815a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fe:a3:39:50:18:b0:30:1f:67:c5:23:f5:e1:
                    31:53:1f:b3:33:76:71:14:da:d2:db:1f:a9:1f:18:
                    4a:9b:6f:a3:d8:c6:e2:82:54:e6:13:42:18:7c:7b:
                    66:06:b9:21:12:9d:9d:4b:d2:1c:5e:cc:8f:ce:cc:
                    72:06:01:35:9a:44:5f:7f:6a:da:bb:27:28:e4:2f:
                    5c:4f:78:8f:06:66:88:38:65:33:d6:f5:a9:41:48:
                    94:12:6d:e1:af:94:b0:f7:d3:08:26:44:54:98:d4:
                    63:63:09:14:60:6c:bc:49:03:91:0b:71:db:44:1d:
                    a9:ab:90:a9:e3:71:ac:ad:c8:04:3f:9f:c8:1a:27:
                    1a:38:82:42:bf:57:21:33:c6:ed:92:2d:c2:fa:f5:
                    cd:9a:b8:1c:ad:47:7b:b6:08:5c:83:ea:94:3f:83:
                    19:1e:40:e9:66:7a:c8:0b:7f:4b:3b:8d:c8:4e:91:
                    eb:6b:05:fd:d0:97:8e:15:85:58:5b:08:5e:42:f5:
                    89:cb:d5:56:be:7f:ab:a2:45:55:a6:95:88:63:ea:
                    2a:09:bd:c6:9b:85:a6:34:1e:40:54:e5:84:9c:2c:
                    60:33:b7:2a:94:20:95:37:39:9d:ab:63:b2:19:6c:
                    d4:46:0e:0d:cd:a9:88:d1:dd:61:d2:b9:7d:fe:4b:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:57:17:A6:8A:7E:64:2F:87:32:45:21:01:D1:9B:16:72:51:67:E5
            X509v3 Authority Key Identifier:
                keyid:E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/1548cbcb4b4d1bb72b5eab8c36caf34ac813815a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9fa677563ca5bfe6068216c74122a5d7cb2db27a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.128.0/24
                  181.189.144.0-181.189.152.255
                  181.189.154.0/24
                  190.111.17.0/24
                  190.111.24.0/24
                  190.111.29.0/24
                  200.94.249.0/24
                  200.94.251.0/24
                IPv6:
                  2803:3a00::/37
                  2803:3a00:1800::/37

    Signature Algorithm: sha256WithRSAEncryption
         5f:f2:7f:b7:54:b4:14:4c:63:87:af:81:88:9a:10:9b:54:8e:
         bc:23:dc:dd:35:4b:51:3d:d8:8d:53:e1:61:47:63:5b:dd:db:
         31:bb:93:e9:36:e1:df:d6:e0:8f:0a:f6:b9:45:77:43:db:7b:
         3c:c1:28:c4:cf:4f:79:cf:d4:ae:53:9f:03:bf:a4:4e:91:35:
         09:fa:18:27:1a:1d:8a:b1:44:c8:df:2b:26:18:17:41:9e:2c:
         46:3d:6e:a7:5b:15:50:dd:02:a4:0b:a3:8a:89:e0:fa:e4:84:
         0e:10:d2:97:4b:41:73:52:85:3c:57:9f:cd:39:c0:ee:96:8d:
         43:e1:0e:e1:8c:15:0c:20:83:1b:dd:39:4d:8a:08:da:ed:ac:
         4d:a3:2c:45:64:9e:4c:62:7b:25:fb:08:10:34:fe:9a:cd:ad:
         13:b0:64:dd:dd:f4:01:22:2f:ab:84:66:c1:85:a5:52:39:84:
         4a:7c:ec:c6:d3:6e:b6:1f:73:66:c1:1d:bb:c5:b6:f9:d8:45:
         9d:95:27:fc:02:3b:49:b8:98:eb:34:94:0a:52:96:39:1d:af:
         e3:8f:28:4f:b9:2b:38:f2:f1:01:74:89:1d:f2:8b:65:ae:d6:
         60:5e:af:d4:8c:25:9c:73:37:42:5c:cd:3f:ce:15:34:9a:cd:
         da:d9:f4:8b
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDFcjpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
YTY3NzU2M2NhNWJmZTYwNjgyMTZjNzQxMjJhNWQ3Y2IyZGIyN2EwHhcNMjEwODEy
MDMwMDAwWhcNMjMwODEyMDMwMDAwWjAzMTEwLwYDVQQDEygxNTQ4Y2JjYjRiNGQx
YmI3MmI1ZWFiOGMzNmNhZjM0YWM4MTM4MTVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhv6jOVAYsDAfZ8Uj9eExUx+zM3ZxFNrS2x+pHxhKm2+j2Mbi
glTmE0IYfHtmBrkhEp2dS9IcXsyPzsxyBgE1mkRff2rauyco5C9cT3iPBmaIOGUz
1vWpQUiUEm3hr5Sw99MIJkRUmNRjYwkUYGy8SQORC3HbRB2pq5Cp43GsrcgEP5/I
GicaOIJCv1chM8btki3C+vXNmrgcrUd7tghcg+qUP4MZHkDpZnrIC39LO43ITpHr
awX90JeOFYVYWwheQvWJy9VWvn+rokVVppWIY+oqCb3Gm4WmNB5AVOWEnCxgM7cq
lCCVNzmdq2OyGWzURg4NzamI0d1h0rl9/ktQ8QIDAQABo4ICpTCCAqEwHQYDVR0O
BBYEFEBXF6aKfmQvhzJFIQHRmxZyUWflMB8GA1UdIwQYMBaAFObQ+/X3VGDwMdgI
uJIHHLi+yqQ5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWZhNjc3
NTYzY2E1YmZlNjA2ODIxNmM3NDEyMmE1ZDdjYjJkYjI3YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmVmOTFlZTEtNDIyNC00YzFjLWFlZTYtNWNlMTM4
NjQxYzQ4LzE1NDhjYmNiNGI0ZDFiYjcyYjVlYWI4YzM2Y2FmMzRhYzgxMzgxNWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZWY5MWVlMS00MjI0LTRjMWMtYWVlNi01Y2Ux
Mzg2NDFjNDgvOWZhNjc3NTYzY2E1YmZlNjA2ODIxNmM3NDEyMmE1ZDdjYjJkYjI3
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBpBggrBgEFBQcBBwEB/wRa
MFgwPgQCAAEwOAMEALW9gDAMAwQEtb2QAwQAtb2YAwQAtb2aAwQAvm8RAwQAvm8Y
AwQAvm8dAwQAyF75AwQAyF77MBYEAgACMBADBgMoAzoAAAMGAygDOgAYMA0GCSqG
SIb3DQEBCwUAA4IBAQBf8n+3VLQUTGOHr4GImhCbVI68I9zdNUtRPdiNU+FhR2Nb
3dsxu5PpNuHf1uCPCva5RXdD23s8wSjEz095z9SuU58Dv6ROkTUJ+hgnGh2KsUTI
3ysmGBdBnixGPW6nWxVQ3QKkC6OKieD65IQOENKXS0FzUoU8V5/NOcDulo1D4Q7h
jBUMIIMb3TlNigja7axNoyxFZJ5MYnsl+wgQNP6aza0TsGTd3fQBIi+rhGbBhaVS
OYRKfOzG0262H3NmwR27xbb52EWdlSf8AjtJuJjrNJQKUpY5Ha/jjyhPuSs48vEB
dIkd8otlrtZgXq/UjCWcczdCXM0/zhU0ms3a2fSL
-----END CERTIFICATE-----