Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/091e818a5821092510d74627ba64efa8ad7d2b4c.roa
File:                     091e818a5821092510d74627ba64efa8ad7d2b4c.roa (raw, json)
Hash identifier:          VB1cc6oer7eRFReRnKXWVnAvb5ALXp9fQBxuip/oxaQ=
Subject key identifier:   8C:62:29:D9:42:81:B5:02:3F:7E:FC:FD:40:A5:65:C2:A9:0B:7F:41
Certificate issuer:       /CN=9e7d975858e57eba8aa9f3546843c2ca4ff98a40
Certificate serial:       23FB15
Authority key identifier: DE:BC:71:7F:74:DB:DD:C0:04:1E:52:07:60:20:BD:59:47:54:E2:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/091e818a5821092510d74627ba64efa8ad7d2b4c.roa
Signing time:             Wed 18 Oct 2023 20:44:22 +0000
ROA not before:           Tue 17 Oct 2023 20:44:21 +0000
ROA not after:            Sat 18 Oct 2025 20:44:21 +0000
asID:                     23383
IP address blocks:        191.103.94.0/23 maxlen: 24
                          190.109.192.0/19 maxlen: 24
                          191.103.64.0/21 maxlen: 24
                          191.103.73.0/24 maxlen: 24
                          191.103.74.0/23 maxlen: 24
                          191.103.76.0/22 maxlen: 24
                          191.103.80.0/22 maxlen: 24
                          191.103.84.0/23 maxlen: 24
                          191.103.87.0/24 maxlen: 24
                          191.103.88.0/23 maxlen: 24
                          2803:3a80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2358037 (0x23fb15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7d975858e57eba8aa9f3546843c2ca4ff98a40
        Validity
            Not Before: Oct 17 20:44:21 2023 GMT
            Not After : Oct 18 20:44:21 2025 GMT
        Subject: CN=091e818a5821092510d74627ba64efa8ad7d2b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:46:eb:29:1b:33:8e:5d:90:03:92:ce:29:
                    ca:9a:46:1b:61:8b:1f:1b:01:da:dc:41:c1:f3:f0:
                    5b:cf:f0:ec:e8:9d:82:ff:3f:70:4f:87:34:6e:8e:
                    19:ef:c7:5a:b3:2f:6e:0a:88:30:e1:53:92:cb:4b:
                    a4:1b:1c:6c:77:2b:9c:a0:cc:9c:3f:2a:68:4b:5f:
                    fc:4c:01:f3:54:85:77:a3:ac:0b:16:25:a5:3c:08:
                    d5:9c:97:4f:1b:06:a2:68:73:8c:12:50:77:8c:e6:
                    44:50:6c:9c:2a:7e:b5:35:86:94:ad:e1:cd:b4:c5:
                    7e:5f:3e:92:18:47:ab:98:11:ce:09:4a:a8:32:59:
                    db:96:cd:62:c0:7c:e2:dc:cf:74:dd:9d:84:82:7e:
                    63:7e:18:63:8e:54:0e:4b:18:b8:ef:48:23:b1:ef:
                    63:99:b7:b5:84:e0:72:49:d2:27:f7:5c:37:c2:db:
                    db:2f:74:f3:0b:73:7c:14:27:9b:64:de:2b:0f:85:
                    c9:1c:be:d9:fd:2c:7b:8b:08:f0:34:9d:d1:f0:e9:
                    c0:cc:3f:7c:d5:78:dc:6c:8c:04:38:fc:92:1b:95:
                    0b:b9:7a:d1:d3:dd:80:83:16:13:3f:52:de:f9:ac:
                    a5:cd:ff:4c:a4:3d:4f:3c:c9:d6:0d:88:24:d9:f9:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:62:29:D9:42:81:B5:02:3F:7E:FC:FD:40:A5:65:C2:A9:0B:7F:41
            X509v3 Authority Key Identifier:
                keyid:DE:BC:71:7F:74:DB:DD:C0:04:1E:52:07:60:20:BD:59:47:54:E2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/091e818a5821092510d74627ba64efa8ad7d2b4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.192.0/19
                  191.103.64.0/21
                  191.103.73.0-191.103.85.255
                  191.103.87.0-191.103.89.255
                  191.103.94.0/23
                IPv6:
                  2803:3a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:1b:1b:9a:1a:02:a8:b4:80:f5:0b:f7:fb:5c:f1:7e:af:ec:
         f0:bc:d2:ac:b1:0f:21:aa:32:77:53:4e:7a:6d:40:63:ec:44:
         5b:8e:e3:a6:50:94:5f:1a:9d:0e:be:e2:85:4a:15:d7:0e:05:
         5f:08:05:18:0b:9c:26:46:50:8d:91:b4:73:f6:57:74:e6:1f:
         54:e3:d5:66:91:b0:d0:65:8e:f0:d6:9e:d6:10:17:68:14:16:
         2b:31:8a:f3:a2:14:9e:64:d3:95:41:97:dc:4a:f7:27:54:8b:
         05:78:da:66:fe:71:e7:1b:9d:d8:59:b3:c7:59:81:d7:9c:b0:
         fb:72:c7:a0:fc:91:84:f7:6e:bd:f2:dd:64:84:b0:7d:cd:35:
         35:d6:fe:01:f0:fb:50:a6:4e:1c:b2:4c:0a:ff:0f:75:97:9e:
         29:43:eb:34:b3:d1:50:1d:09:92:1b:ee:90:e4:f9:60:03:a8:
         ea:15:2c:f9:98:05:73:0f:d9:b3:6b:41:ef:be:86:59:72:b6:
         f5:f1:3f:b8:3d:f2:eb:76:73:f3:8d:92:34:74:bb:ca:e0:73:
         76:0d:41:ad:6a:fa:83:7e:81:5e:0d:ac:d7:8e:e9:f0:df:9b:
         58:26:a1:81:58:7d:84:75:93:a7:49:3f:8c:df:06:2d:d5:40:
         08:c2:c3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----