Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/3c855ae79eb86f38c552ecbb31a96b5572c754d5.roa
File:                     3c855ae79eb86f38c552ecbb31a96b5572c754d5.roa (raw, json)
Hash identifier:          7gZbusUzKkUK6msPgt2Jxey9Mtuxot7VdZ8PSVGpl8I=
Subject key identifier:   3D:70:10:EB:5B:7C:6C:96:B0:0A:01:99:30:C6:A2:73:16:EE:59:7E
Certificate issuer:       /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial:       1FAB14
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/3c855ae79eb86f38c552ecbb31a96b5572c754d5.roa
Signing time:             Wed 03 May 2023 14:51:22 +0000
ROA not before:           Tue 02 May 2023 14:51:22 +0000
ROA not after:            Sat 03 May 2025 14:51:22 +0000
asID:                     52392
IP address blocks:        190.99.120.0/21 maxlen: 24
                          2803:b100::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075412 (0x1fab14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
        Validity
            Not Before: May  2 14:51:22 2023 GMT
            Not After : May  3 14:51:22 2025 GMT
        Subject: CN=3c855ae79eb86f38c552ecbb31a96b5572c754d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:c7:9e:2c:02:7d:22:e2:da:52:e4:f6:38:
                    0b:58:9b:82:01:6d:4c:fc:5c:78:3f:2a:ec:ae:b0:
                    63:af:14:86:6d:d5:7b:86:48:71:b3:f4:06:05:35:
                    f2:40:f8:48:72:62:d0:1f:3b:51:cc:80:3f:5a:c3:
                    78:6e:29:55:47:f5:1a:a9:28:5c:96:83:c9:0a:f8:
                    6d:c8:94:55:53:94:b5:61:99:59:3f:f4:cf:12:98:
                    b0:42:47:fe:e2:94:ac:00:c0:1b:b3:04:89:43:41:
                    ac:bd:b7:64:26:93:ec:8d:ce:d5:25:55:2d:48:92:
                    f3:ce:94:fc:50:33:33:3a:4f:4e:2c:c8:5f:67:04:
                    2f:8e:a0:9d:f7:c0:bb:4a:80:08:c9:6f:5b:ec:39:
                    64:b1:6c:87:50:f5:d8:9d:ff:85:7e:08:63:a4:66:
                    48:f8:3f:00:ef:ea:3c:73:69:7e:c7:69:d6:12:a4:
                    0c:f1:b9:0b:34:05:c0:ee:32:6d:1f:5d:c5:06:b3:
                    71:d2:2a:9b:61:94:c3:d7:79:27:52:b7:69:c1:44:
                    86:9e:9e:c9:d5:0a:ee:82:68:37:56:40:c2:8c:8e:
                    45:37:3e:ca:0a:c3:7f:46:94:4e:ce:e2:93:1e:b1:
                    ec:79:b1:c4:16:b8:37:e8:5a:79:f9:61:5c:a8:6f:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:70:10:EB:5B:7C:6C:96:B0:0A:01:99:30:C6:A2:73:16:EE:59:7E
            X509v3 Authority Key Identifier:
                keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/3c855ae79eb86f38c552ecbb31a96b5572c754d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/21
                IPv6:
                  2803:b100::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:11:ac:2f:d7:43:11:5f:e4:1a:34:7b:c9:6d:06:ec:97:3b:
         72:fb:56:99:3b:33:e9:61:34:29:e8:5f:b4:12:c0:6d:ec:a6:
         8b:c5:4a:5d:b1:e7:45:75:ca:24:9d:e2:7e:bc:e5:06:07:c4:
         06:da:da:a6:5b:70:c4:39:b3:fa:61:7d:8e:a3:0b:b3:b1:b6:
         d9:65:27:54:ed:93:6d:23:b5:b7:51:68:12:82:7a:f0:a3:64:
         3b:06:84:36:42:5c:be:ee:f7:b3:23:ea:e1:1e:37:f1:6f:ef:
         1f:ed:aa:be:1a:21:b1:16:a9:a2:8e:85:81:93:b4:8e:b4:fb:
         cb:36:4f:1c:92:8a:7f:d1:3b:96:ac:8b:7e:53:d7:e6:5f:32:
         c9:a4:91:17:fc:c3:75:5c:9e:3a:3d:c7:58:7b:06:05:bd:1e:
         3a:e0:aa:4b:1a:ad:82:68:78:96:0b:df:2e:9e:de:91:5b:69:
         43:ec:ff:f9:b9:33:63:60:8c:b2:07:70:5e:52:f3:b6:90:b1:
         82:ee:9f:63:5d:90:af:d4:af:e0:1f:50:c8:af:bd:fc:98:d4:
         fc:2e:d1:20:46:0d:62:ca:d6:73:82:d8:e4:c4:c1:aa:b2:e9:
         4e:e8:db:88:4f:6f:a4:91:a7:7a:51:b1:22:22:dc:97:5d:07:
         47:09:c0:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDH6sUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
MzY3NGRjYjM3YjkxMDIxYWZmZWRkZjgwZWYzNGM5MjQ0MjM2MjcwHhcNMjMwNTAy
MTQ1MTIyWhcNMjUwNTAzMTQ1MTIyWjAzMTEwLwYDVQQDEygzYzg1NWFlNzllYjg2
ZjM4YzU1MmVjYmIzMWE5NmI1NTcyYzc1NGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlg/HniwCfSLi2lLk9jgLWJuCAW1M/Fx4PyrsrrBjrxSGbdV7
hkhxs/QGBTXyQPhIcmLQHztRzIA/WsN4bilVR/UaqShcloPJCvhtyJRVU5S1YZlZ
P/TPEpiwQkf+4pSsAMAbswSJQ0GsvbdkJpPsjc7VJVUtSJLzzpT8UDMzOk9OLMhf
ZwQvjqCd98C7SoAIyW9b7DlksWyHUPXYnf+FfghjpGZI+D8A7+o8c2l+x2nWEqQM
8bkLNAXA7jJtH13FBrNx0iqbYZTD13knUrdpwUSGnp7J1Qrugmg3VkDCjI5FNz7K
CsN/RpROzuKTHrHsebHEFrg36Fp5+WFcqG/RawIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFD1wEOtbfGyWsAoBmTDGonMW7ll+MB8GA1UdIwQYMBaAFJ/mwOD42sLEHIxL
66NQ5S8YJXBAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzNjc0
ZGNiMzdiOTEwMjFhZmZlZGRmODBlZjM0YzkyNDQyMzYyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjljY2RjMmItMDZmZC00YTI0LWJkMzYtOTU0NTZm
ODA5NTFjLzNjODU1YWU3OWViODZmMzhjNTUyZWNiYjMxYTk2YjU1NzJjNzU0ZDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOWNjZGMyYi0wNmZkLTRhMjQtYmQzNi05NTQ1
NmY4MDk1MWMvNTEzNjc0ZGNiMzdiOTEwMjFhZmZlZGRmODBlZjM0YzkyNDQyMzYy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEA75jeDANBAIAAjAHAwUAKAOxADANBgkqhkiG9w0BAQsFAAOC
AQEAcRGsL9dDEV/kGjR7yW0G7Jc7cvtWmTsz6WE0KehftBLAbeymi8VKXbHnRXXK
JJ3ifrzlBgfEBtrapltwxDmz+mF9jqMLs7G22WUnVO2TbSO1t1FoEoJ68KNkOwaE
NkJcvu73syPq4R438W/vH+2qvhohsRapoo6FgZO0jrT7yzZPHJKKf9E7lqyLflPX
5l8yyaSRF/zDdVyeOj3HWHsGBb0eOuCqSxqtgmh4lgvfLp7ekVtpQ+z/+bkzY2CM
sgdwXlLztpCxgu6fY12Qr9Sv4B9QyK+9/JjU/C7RIEYNYsrWc4LY5MTBqrLpTujb
iE9vpJGnelGxIiLcl10HRwnAMA==
-----END CERTIFICATE-----