Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/250ae782ed90dc2d1bb388f85d8b9e282c4de08a.roa
File:                     250ae782ed90dc2d1bb388f85d8b9e282c4de08a.roa (raw, json)
Hash identifier:          56ns7SYRX/CV949pdlbpn6IcLH0NFNCFLuK9jrxCBoM=
Subject key identifier:   29:36:A1:A6:A1:38:4A:3D:FC:15:40:67:78:F4:AF:60:EA:94:D0:74
Certificate issuer:       /CN=a421ae9f935de1a361bde176bcfb6a5e99b7b1cd
Certificate serial:       122916
Authority key identifier: E1:8F:1B:93:41:93:82:6A:3D:D3:73:B2:42:3A:BA:D8:DF:9E:3E:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/250ae782ed90dc2d1bb388f85d8b9e282c4de08a.roa
Signing time:             Sun 01 Oct 2023 08:30:00 +0000
ROA not before:           Sat 30 Sep 2023 08:30:00 +0000
ROA not after:            Mon 29 Sep 2025 08:30:00 +0000
asID:                     271864
IP address blocks:        190.113.32.0/22 maxlen: 24
                          190.113.32.0/24 maxlen: 24
                          190.113.33.0/24 maxlen: 24
                          190.113.34.0/24 maxlen: 24
                          190.113.35.0/24 maxlen: 24
                          2803:b410::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1190166 (0x122916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a421ae9f935de1a361bde176bcfb6a5e99b7b1cd
        Validity
            Not Before: Sep 30 08:30:00 2023 GMT
            Not After : Sep 29 08:30:00 2025 GMT
        Subject: CN=250ae782ed90dc2d1bb388f85d8b9e282c4de08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:76:a8:58:02:37:24:4f:d2:c7:0a:32:0e:
                    bc:fe:3f:b8:d4:2a:5a:48:15:7b:c9:f4:0f:7c:0b:
                    2f:f8:04:d1:82:0f:b4:ba:d3:25:0d:58:fa:d3:1e:
                    b6:28:d1:a9:b3:c9:d0:84:aa:e6:87:83:69:9e:16:
                    cc:4c:6e:6a:f0:5f:6a:3f:cd:2f:92:f7:28:ca:73:
                    dc:b0:f9:7c:4e:83:1c:5b:ee:5f:33:bb:77:b7:de:
                    ff:c4:f5:50:4d:50:49:7d:58:d2:0e:b7:00:be:18:
                    c8:9a:cd:c9:a7:4b:b6:aa:cf:5c:7a:02:88:a5:92:
                    aa:fe:d7:93:ad:e9:38:7b:5d:87:6c:f8:ec:ec:6b:
                    1a:f2:50:9b:97:07:f3:1b:48:66:6d:78:a8:fc:5e:
                    40:d3:85:8b:8a:b3:10:ab:6d:00:21:a6:22:87:22:
                    70:b4:19:98:2f:16:82:46:4e:46:21:06:a0:91:66:
                    c0:65:5f:69:cc:b3:26:99:95:9e:7f:b6:03:48:98:
                    fe:6b:0a:12:a0:ae:97:8d:60:16:29:4a:c0:7b:15:
                    81:78:8f:63:e3:a0:23:5b:0e:70:7e:11:f0:a1:22:
                    20:bf:c2:22:6a:6e:8d:e0:22:3a:18:ac:56:53:45:
                    1d:99:11:1b:c5:2d:4e:e5:e1:19:3d:1e:8a:59:0c:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:36:A1:A6:A1:38:4A:3D:FC:15:40:67:78:F4:AF:60:EA:94:D0:74
            X509v3 Authority Key Identifier:
                keyid:E1:8F:1B:93:41:93:82:6A:3D:D3:73:B2:42:3A:BA:D8:DF:9E:3E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/250ae782ed90dc2d1bb388f85d8b9e282c4de08a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c5327318-8e04-41e4-8319-a0af2f8ef9c6/a421ae9f935de1a361bde176bcfb6a5e99b7b1cd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.32.0/22
                IPv6:
                  2803:b410::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:30:5a:95:65:23:16:b9:30:70:29:c6:9c:7d:0f:22:9e:a8:
         4c:7e:bf:25:d2:94:cb:08:1c:24:63:dd:6e:2d:bb:ee:03:20:
         c9:1b:c7:48:ff:e9:47:2d:ce:6c:49:df:3b:87:2f:8e:39:f2:
         9b:b5:09:ba:43:3c:10:5e:93:50:d0:bb:b6:bb:c0:42:d0:3d:
         ee:73:6a:e8:52:45:fe:93:5d:e0:57:e7:02:68:f0:1a:ba:5f:
         08:33:1e:a7:92:c5:2b:b3:d0:a7:83:dc:04:f3:68:43:05:32:
         cc:13:df:a9:fc:4c:88:d5:0b:1a:c7:82:39:4a:d0:ce:67:b2:
         1c:05:a4:b6:02:90:14:07:65:e9:10:24:37:50:f3:fe:ab:a6:
         99:cb:ce:b0:0c:c9:8f:a7:f6:6a:50:67:bd:c0:43:e2:5b:f5:
         96:6f:04:7f:6c:2c:f7:9b:f4:db:5b:e5:04:f7:73:a5:e8:e1:
         6f:e5:8e:17:b4:85:2e:6b:8b:65:68:60:2a:2c:cb:73:61:76:
         64:20:31:a4:4d:6e:8b:4f:5e:a9:c6:ab:0c:88:08:12:2b:62:
         65:97:1d:1c:2f:3f:6d:e1:fc:c2:8d:68:61:72:50:24:38:8f:
         cd:15:ab:d5:1f:33:75:c4:49:a5:86:da:bf:be:f3:10:db:6b:
         31:9b:0b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----