Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db5e1315-7410-4cd4-9ca1-9f255c7a1d2a/7e9f352dbdd470048c45c1de3c64a6b5b90e915b.roa
File:                     7e9f352dbdd470048c45c1de3c64a6b5b90e915b.roa (raw, json)
Hash identifier:          v0Abt9tCaztrDGPsZuSYOOzuYgoIEvxw3C2SXCBf8IQ=
Subject key identifier:   A8:68:20:1C:0F:8E:BB:11:B1:92:2E:E8:B8:65:DB:1C:42:83:AA:21
Certificate issuer:       /CN=51f4bc9212cb82c076353939748ab5027f909298
Certificate serial:       23C346
Authority key identifier: 9C:11:5B:A7:0B:F1:D7:3F:92:77:32:7B:06:F3:A3:CB:90:44:70:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/51f4bc9212cb82c076353939748ab5027f909298.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db5e1315-7410-4cd4-9ca1-9f255c7a1d2a/7e9f352dbdd470048c45c1de3c64a6b5b90e915b.roa
Signing time:             Fri 29 Sep 2023 14:01:02 +0000
ROA not before:           Thu 28 Sep 2023 14:01:02 +0000
ROA not after:            Mon 29 Sep 2025 14:01:02 +0000
asID:                     8053
IP address blocks:        181.225.32.0/19 maxlen: 24
                          190.94.192.0/18 maxlen: 24
                          2803:d480::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2343750 (0x23c346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4bc9212cb82c076353939748ab5027f909298
        Validity
            Not Before: Sep 28 14:01:02 2023 GMT
            Not After : Sep 29 14:01:02 2025 GMT
        Subject: CN=7e9f352dbdd470048c45c1de3c64a6b5b90e915b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:99:20:55:6e:9e:6d:af:31:94:4c:65:9e:
                    83:19:f4:54:8b:2e:d8:c6:1b:94:5e:07:b3:b9:78:
                    d7:6b:b7:a7:3c:2a:ce:ea:bb:00:ab:a2:a5:e3:5d:
                    78:df:cd:73:de:03:f6:33:cc:9c:75:52:18:0d:8d:
                    2a:af:b6:74:ff:eb:29:98:af:0a:5e:45:a6:81:89:
                    b3:c0:be:40:a9:39:64:dc:67:4a:0a:c3:d9:c3:27:
                    4c:4e:b4:94:c5:fd:c4:e0:5e:f8:4e:90:88:4c:f8:
                    db:71:f4:d0:8b:ca:54:9c:5a:41:36:64:0a:f4:03:
                    9c:89:10:50:f4:49:21:a3:a0:73:60:30:fa:ff:3f:
                    b7:54:3b:a8:8e:3b:1e:d7:92:37:f2:11:39:03:c2:
                    c8:b3:97:66:83:0c:b9:9e:ef:d8:60:96:b2:d9:c7:
                    c0:9b:42:37:18:7f:b8:e3:e6:81:5d:8e:89:9b:74:
                    cb:b4:e9:cd:56:01:84:a0:68:1b:a0:4c:b4:b0:1e:
                    51:d8:5b:e7:06:86:7e:dd:9d:f5:d4:32:84:9f:71:
                    45:22:7a:45:e7:26:2b:1d:a8:51:bf:d1:18:be:3f:
                    66:6a:23:f5:bf:aa:27:85:6c:d7:68:4c:8a:1e:6b:
                    9f:c6:15:74:48:0c:43:29:cb:e1:23:1c:be:28:87:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:68:20:1C:0F:8E:BB:11:B1:92:2E:E8:B8:65:DB:1C:42:83:AA:21
            X509v3 Authority Key Identifier:
                keyid:9C:11:5B:A7:0B:F1:D7:3F:92:77:32:7B:06:F3:A3:CB:90:44:70:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/51f4bc9212cb82c076353939748ab5027f909298.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db5e1315-7410-4cd4-9ca1-9f255c7a1d2a/7e9f352dbdd470048c45c1de3c64a6b5b90e915b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db5e1315-7410-4cd4-9ca1-9f255c7a1d2a/51f4bc9212cb82c076353939748ab5027f909298.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.32.0/19
                  190.94.192.0/18
                IPv6:
                  2803:d480::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:91:a9:24:f2:97:30:8b:da:09:d9:74:49:86:b7:24:f5:f0:
         6b:f0:86:51:c6:d0:e0:d0:5c:51:98:ca:be:46:0a:e6:a9:bb:
         5e:9f:71:71:dd:ad:fb:5c:1f:bf:9c:7f:1f:3f:97:98:99:af:
         12:f3:da:24:c3:28:98:9c:6f:bc:24:a1:3e:f0:be:a7:10:e3:
         f3:ee:30:7f:77:ed:18:c0:18:0f:2f:dd:4b:9f:e7:82:8e:cf:
         45:3f:bc:f8:5c:e8:dd:a3:e5:63:51:5b:fc:50:20:40:df:12:
         cf:9c:c0:f5:57:cd:c5:2f:0d:07:b9:83:47:03:6d:53:28:b4:
         dd:44:ab:41:65:e9:b1:5f:76:55:b9:b6:7e:79:50:e9:28:cb:
         a1:fc:62:12:74:9e:e1:c1:91:95:80:86:0d:d8:07:db:0b:af:
         7e:6c:31:80:9b:8c:28:a2:a1:d7:ce:f1:b8:8c:78:7b:11:4f:
         f2:d0:24:3f:87:8d:4f:a8:4e:85:e2:3e:95:b8:98:ba:68:36:
         2d:97:1c:b4:24:f3:ae:41:d5:1d:2a:d5:b1:a9:8d:ed:72:ff:
         3a:83:9d:8b:75:8d:73:37:7a:cb:e8:fd:68:74:4f:ef:f5:ad:
         55:1c:01:7f:af:fc:39:cb:58:73:a9:5e:9f:f5:15:41:73:16:
         46:c4:d9:99
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDI8NGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
ZjRiYzkyMTJjYjgyYzA3NjM1MzkzOTc0OGFiNTAyN2Y5MDkyOTgwHhcNMjMwOTI4
MTQwMTAyWhcNMjUwOTI5MTQwMTAyWjAzMTEwLwYDVQQDEyg3ZTlmMzUyZGJkZDQ3
MDA0OGM0NWMxZGUzYzY0YTZiNWI5MGU5MTViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoD+ZIFVunm2vMZRMZZ6DGfRUiy7YxhuUXgezuXjXa7enPCrO
6rsAq6Kl4114381z3gP2M8ycdVIYDY0qr7Z0/+spmK8KXkWmgYmzwL5AqTlk3GdK
CsPZwydMTrSUxf3E4F74TpCITPjbcfTQi8pUnFpBNmQK9AOciRBQ9Ekho6BzYDD6
/z+3VDuojjse15I38hE5A8LIs5dmgwy5nu/YYJay2cfAm0I3GH+44+aBXY6Jm3TL
tOnNVgGEoGgboEy0sB5R2FvnBoZ+3Z311DKEn3FFInpF5yYrHahRv9EYvj9maiP1
v6onhWzXaEyKHmufxhV0SAxDKcvhIxy+KIco1wIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFKhoIBwPjrsRsZIu6Lhl2xxCg6ohMB8GA1UdIwQYMBaAFJwRW6cL8dc/kncy
ewbzo8uQRHCaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTFmNGJj
OTIxMmNiODJjMDc2MzUzOTM5NzQ4YWI1MDI3ZjkwOTI5OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGI1ZTEzMTUtNzQxMC00Y2Q0LTljYTEtOWYyNTVj
N2ExZDJhLzdlOWYzNTJkYmRkNDcwMDQ4YzQ1YzFkZTNjNjRhNmI1YjkwZTkxNWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYjVlMTMxNS03NDEwLTRjZDQtOWNhMS05ZjI1
NWM3YTFkMmEvNTFmNGJjOTIxMmNiODJjMDc2MzUzOTM5NzQ4YWI1MDI3ZjkwOTI5
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEBbXhIAMEBr5ewDANBAIAAjAHAwUAKAPUgDANBgkqhkiG9w0B
AQsFAAOCAQEAApGpJPKXMIvaCdl0SYa3JPXwa/CGUcbQ4NBcUZjKvkYK5qm7Xp9x
cd2t+1wfv5x/Hz+XmJmvEvPaJMMomJxvvCShPvC+pxDj8+4wf3ftGMAYDy/dS5/n
go7PRT+8+Fzo3aPlY1Fb/FAgQN8Sz5zA9VfNxS8NB7mDRwNtUyi03USrQWXpsV92
Vbm2fnlQ6SjLofxiEnSe4cGRlYCGDdgH2wuvfmwxgJuMKKKh187xuIx4exFP8tAk
P4eNT6hOheI+lbiYumg2LZcctCTzrkHVHSrVsamN7XL/OoOdi3WNczd6y+j9aHRP
7/WtVRwBf6/8OctYc6len/UVQXMWRsTZmQ==
-----END CERTIFICATE-----