Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/811ef01a94123e75cfc32c4f3e39e752e5cc6576.roa
File:                     811ef01a94123e75cfc32c4f3e39e752e5cc6576.roa (raw, json)
Hash identifier:          kwSC3pE9waUzpuOkGwQgx5XaRHvbRxSVwcjyqvqwVwM=
Subject key identifier:   A2:27:F6:C7:A8:FA:AB:12:F3:19:F7:4E:5C:8E:86:CC:2C:1B:74:3F
Certificate issuer:       /CN=962886d2caf49497dff544bb6ba251bf1ffa6220
Certificate serial:       1CF953
Authority key identifier: EA:C5:A1:9C:82:7E:D5:4A:C3:AB:89:73:AF:0B:1F:89:D3:FF:0D:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/962886d2caf49497dff544bb6ba251bf1ffa6220.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/811ef01a94123e75cfc32c4f3e39e752e5cc6576.roa
Signing time:             Thu 29 Jun 2023 19:37:36 +0000
ROA not before:           Wed 28 Jun 2023 19:37:36 +0000
ROA not after:            Sun 29 Jun 2025 19:37:36 +0000
asID:                     264628
IP address blocks:        190.89.30.0/23 maxlen: 24
                          190.89.29.0/24 maxlen: 24
                          190.89.30.0/23 maxlen: 24
                          190.103.28.0/22 maxlen: 24
                          190.120.248.0/21 maxlen: 24
                          2803:c000::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1898835 (0x1cf953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962886d2caf49497dff544bb6ba251bf1ffa6220
        Validity
            Not Before: Jun 28 19:37:36 2023 GMT
            Not After : Jun 29 19:37:36 2025 GMT
        Subject: CN=811ef01a94123e75cfc32c4f3e39e752e5cc6576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:43:fb:38:00:39:af:d9:35:58:58:81:66:
                    2a:43:23:58:6a:10:47:0a:15:0c:94:f3:94:91:c8:
                    64:be:7b:b7:c9:20:85:05:8c:b6:1f:99:55:83:ae:
                    60:ac:73:13:92:18:42:28:85:8e:9c:2c:e3:df:c4:
                    bc:11:1c:62:13:e5:7c:d0:9e:53:7e:2a:82:28:c7:
                    be:4d:c2:49:65:56:ae:a9:20:34:1f:c6:6f:90:fa:
                    d9:59:ae:39:43:99:d6:d5:db:88:87:e6:67:9a:d7:
                    e9:d6:ae:6f:8d:05:cd:b9:69:9f:3f:aa:bf:74:9a:
                    db:8b:49:f7:e1:cf:53:3e:d9:54:b7:00:9e:a3:46:
                    d4:b5:ed:8d:a8:e0:0f:75:2d:53:94:22:9f:4d:63:
                    8b:93:5c:f3:35:e3:06:5e:e3:a3:c7:c3:6e:c0:4c:
                    ef:8e:57:1a:3f:95:c4:9d:e8:29:1b:c2:86:aa:28:
                    7d:0d:38:fa:e6:dd:94:37:e6:3a:65:5f:21:d7:a8:
                    35:51:c3:04:dd:99:f7:33:40:10:f1:28:93:f3:f2:
                    1e:7e:d3:4e:4c:cd:b6:3c:95:50:1f:50:c8:19:ff:
                    fe:43:e0:d8:1b:ee:68:f4:7c:34:f6:d2:23:02:c8:
                    9d:c5:69:8e:de:ce:20:3c:28:8a:1c:86:11:a8:5e:
                    83:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:27:F6:C7:A8:FA:AB:12:F3:19:F7:4E:5C:8E:86:CC:2C:1B:74:3F
            X509v3 Authority Key Identifier:
                keyid:EA:C5:A1:9C:82:7E:D5:4A:C3:AB:89:73:AF:0B:1F:89:D3:FF:0D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/962886d2caf49497dff544bb6ba251bf1ffa6220.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/811ef01a94123e75cfc32c4f3e39e752e5cc6576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/962886d2caf49497dff544bb6ba251bf1ffa6220.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.29.0-190.89.31.255
                  190.103.28.0/22
                  190.120.248.0/21
                IPv6:
                  2803:c000::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:09:ac:43:29:f2:17:35:e8:0e:2a:18:9f:1d:f5:be:bf:da:
         a2:6a:e1:88:0c:09:8c:f4:ca:09:5c:7b:fe:5b:e7:64:6e:71:
         d7:72:63:3f:94:11:0b:85:dd:9e:be:1e:c6:7f:d1:68:ef:22:
         41:34:2d:2a:9f:c6:ed:eb:96:db:d9:49:a7:5d:f4:bf:3d:01:
         87:dc:a6:23:45:35:86:a9:d5:07:33:da:1d:ee:e8:38:b6:70:
         9a:46:f4:68:c1:e3:42:ac:75:6d:db:24:3d:eb:56:c6:41:0c:
         9e:f6:a7:f0:f5:e7:ff:cc:c8:e5:4e:8e:a7:02:be:90:62:3a:
         8a:77:6b:04:25:ae:50:32:b2:ee:d6:ba:8f:9c:f9:5c:10:85:
         29:a8:d6:c6:80:5f:00:48:a2:57:05:4e:25:22:1a:eb:10:b9:
         7c:77:28:65:a7:55:6d:14:0f:cc:6f:2b:a9:78:e9:29:75:e3:
         70:0d:a2:68:d6:13:0f:a7:10:83:51:0c:3b:c6:92:91:3c:1b:
         8c:eb:d6:92:18:4d:e4:42:50:73:08:1b:b3:7b:fb:b8:45:d8:
         35:d2:4b:3d:5b:f3:97:6d:c1:9e:4a:6b:29:b6:94:04:bd:f6:
         ce:2e:51:88:60:5e:86:88:a0:bd:3e:22:14:90:4b:de:fb:aa:
         cd:8a:53:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----