Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/fb5c1b49cb6733d862bc3e668ed4edfb75af82a5.roa
File:                     fb5c1b49cb6733d862bc3e668ed4edfb75af82a5.roa (raw, json)
Hash identifier:          1Iy2fyJzswVTxYz7BzIT5fT4icKpLyqxb5PnrMAIoro=
Subject key identifier:   08:9D:37:53:70:8A:9F:54:13:8F:F9:D6:4A:D8:E4:4D:1B:00:1E:48
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2C1ACD
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/fb5c1b49cb6733d862bc3e668ed4edfb75af82a5.roa
Signing time:             Thu 04 Apr 2024 13:49:02 +0000
ROA not before:           Thu 04 Apr 2024 13:49:02 +0000
ROA not after:            Sat 04 Apr 2026 13:49:02 +0000
asID:                     27789
IP address blocks:        190.93.96.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2890445 (0x2c1acd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Apr  4 13:49:02 2024 GMT
            Not After : Apr  4 13:49:02 2026 GMT
        Subject: CN=fb5c1b49cb6733d862bc3e668ed4edfb75af82a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:37:45:24:91:bb:f3:98:55:09:16:8a:16:3d:
                    c5:b6:20:f4:ed:7b:61:0c:81:b4:95:18:9f:8c:f4:
                    19:0e:4d:9b:b3:53:22:4c:b0:2c:af:d8:77:f0:ac:
                    e2:cc:4c:d0:6f:5c:14:8b:8a:ef:75:9e:e9:73:f3:
                    ef:0f:77:97:3c:06:fd:af:3a:9a:1b:ae:e5:24:d0:
                    a9:57:f2:eb:a9:e4:29:b7:1d:25:c4:26:31:06:33:
                    4c:d1:b0:82:20:3b:07:e8:4e:46:ed:ef:82:1f:7f:
                    ae:ca:43:0b:00:32:07:d7:dc:ec:9d:16:10:fa:34:
                    58:3c:ff:4e:76:eb:06:e0:84:88:8b:d3:4f:65:f2:
                    69:a9:58:39:93:dc:9a:00:fb:96:73:b5:8a:61:2b:
                    9f:ea:0a:06:c0:cb:61:ca:46:9c:80:fb:a5:77:21:
                    3b:a4:10:7d:1f:4d:67:ba:ce:06:af:55:78:48:c0:
                    de:7c:6b:5c:28:f8:02:a4:04:2b:57:de:f1:d3:f7:
                    ed:1c:6f:04:9d:ec:11:71:51:42:4c:5f:2e:51:bf:
                    13:4b:f8:d2:47:9c:3a:ec:ae:c1:4a:b8:b9:4e:43:
                    2e:0e:4e:82:18:52:34:7b:42:69:ff:fb:6c:59:b4:
                    2f:f3:34:0a:d5:b7:13:70:e8:1a:29:ba:0e:0a:8d:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9D:37:53:70:8A:9F:54:13:8F:F9:D6:4A:D8:E4:4D:1B:00:1E:48
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/fb5c1b49cb6733d862bc3e668ed4edfb75af82a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:9a:e2:b5:e7:89:71:d5:81:e5:f9:48:5d:17:54:01:97:72:
         13:fc:34:73:0c:98:ae:c7:83:9f:4c:c0:31:11:b1:ce:09:72:
         31:d8:a2:85:7f:6f:7b:a6:07:5f:b0:f1:65:bd:95:86:2b:23:
         e4:4b:26:d5:99:f1:d5:33:6e:b6:81:37:e3:cf:a6:e9:e1:46:
         91:36:6b:ec:5b:20:89:4d:a7:68:4e:e9:bc:57:51:46:a7:86:
         28:a1:f9:fe:3e:1c:f1:c1:4c:bd:fb:ed:bc:12:b5:cd:31:71:
         d3:6b:8c:c0:24:bd:17:d2:4b:78:e1:5d:5d:fa:19:56:09:d0:
         44:7d:84:93:95:6b:fe:24:bd:25:84:6e:40:fc:c8:93:24:42:
         18:90:72:33:df:0b:5e:9c:66:3e:91:29:c4:a3:8f:e0:c1:d9:
         8d:66:cb:4d:93:d1:7a:0d:f7:af:99:45:bf:68:7f:2a:5f:63:
         a3:69:e8:92:ed:4e:23:64:6e:4c:2e:d0:f1:fa:2a:4d:7b:a9:
         3f:e5:78:b8:e4:63:f9:60:fb:c1:95:25:1a:bf:0f:66:7c:f5:
         fa:94:30:fe:e8:43:6e:ab:9e:76:d0:52:70:9b:7f:86:5e:37:
         50:ce:95:a2:f4:73:20:c0:9f:e9:e5:af:6d:9f:75:f7:75:37:
         25:d5:b8:e4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDLBrNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
ZmI1Y2Q5OTNkMzQ4MjVkY2ExYWZjNGNhZGVhZjg0OTNkYmRiZGQwHhcNMjQwNDA0
MTM0OTAyWhcNMjYwNDA0MTM0OTAyWjAzMTEwLwYDVQQDEyhmYjVjMWI0OWNiNjcz
M2Q4NjJiYzNlNjY4ZWQ0ZWRmYjc1YWY4MmE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgjdFJJG785hVCRaKFj3FtiD07XthDIG0lRifjPQZDk2bs1Mi
TLAsr9h38KzizEzQb1wUi4rvdZ7pc/PvD3eXPAb9rzqaG67lJNCpV/LrqeQptx0l
xCYxBjNM0bCCIDsH6E5G7e+CH3+uykMLADIH19zsnRYQ+jRYPP9OdusG4ISIi9NP
ZfJpqVg5k9yaAPuWc7WKYSuf6goGwMthykacgPuldyE7pBB9H01nus4Gr1V4SMDe
fGtcKPgCpAQrV97x0/ftHG8EnewRcVFCTF8uUb8TS/jSR5w67K7BSri5TkMuDk6C
GFI0e0Jp//tsWbQv8zQK1bcTcOgaKboOCo0HYQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAidN1Nwip9UE4/51krY5E0bAB5IMB8GA1UdIwQYMBaAFPt84Eo2/gXQEbvk
w1q2h+jw4qG8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTlmYjVj
ZDk5M2QzNDgyNWRjYTFhZmM0Y2FkZWFmODQ5M2RiZGJkZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2L2ZiNWMxYjQ5Y2I2NzMzZDg2MmJjM2U2NjhlZDRlZGZiNzVhZjgyYTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvYTlmYjVjZDk5M2QzNDgyNWRjYTFhZmM0Y2FkZWFmODQ5M2RiZGJk
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBb5dYDANBgkqhkiG9w0BAQsFAAOCAQEAVpriteeJcdWB5flI
XRdUAZdyE/w0cwyYrseDn0zAMRGxzglyMdiihX9ve6YHX7DxZb2Vhisj5Esm1Znx
1TNutoE348+m6eFGkTZr7FsgiU2naE7pvFdRRqeGKKH5/j4c8cFMvfvtvBK1zTFx
02uMwCS9F9JLeOFdXfoZVgnQRH2Ek5Vr/iS9JYRuQPzIkyRCGJByM98LXpxmPpEp
xKOP4MHZjWbLTZPReg33r5lFv2h/Kl9jo2noku1OI2RuTC7Q8foqTXupP+V4uORj
+WD7wZUlGr8PZnz1+pQw/uhDbquedtBScJt/hl43UM6VovRzIMCf6eWvbZ9193U3
JdW45A==
-----END CERTIFICATE-----