Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/119aec9478d3c1a1fe630d2d745ea48e9dedf371.roa
File:                     119aec9478d3c1a1fe630d2d745ea48e9dedf371.roa (raw, json)
Hash identifier:          XvROmFJ8GgiN0rYN3aQg/sV+NQVHnwuzbeiMU4L0m9Q=
Subject key identifier:   C1:81:D8:BC:61:19:B3:6E:43:D1:83:9F:50:C4:C7:09:67:D6:E3:27
Certificate issuer:       /CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
Certificate serial:       23302B
Authority key identifier: 84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/119aec9478d3c1a1fe630d2d745ea48e9dedf371.roa
Signing time:             Mon 28 Aug 2023 13:10:10 +0000
ROA not before:           Sun 27 Aug 2023 13:10:09 +0000
ROA not after:            Thu 28 Aug 2025 13:10:09 +0000
asID:                     27818
IP address blocks:        131.161.152.0/22 maxlen: 24
                          181.114.128.0/19 maxlen: 24
                          201.220.160.0/19 maxlen: 24
                          2803:3380:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2306091 (0x23302b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
        Validity
            Not Before: Aug 27 13:10:09 2023 GMT
            Not After : Aug 28 13:10:09 2025 GMT
        Subject: CN=119aec9478d3c1a1fe630d2d745ea48e9dedf371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:be:06:2a:93:80:62:c2:29:65:44:de:a3:
                    67:39:b5:f5:e9:b2:22:0e:2c:e2:cb:38:d0:c7:9e:
                    c3:b4:9e:ac:93:c6:ec:79:40:09:5a:22:6c:37:da:
                    cd:78:2b:20:fb:17:30:bc:a9:8a:09:35:8f:db:1a:
                    c6:7e:8b:60:30:a4:9e:82:62:f5:57:11:59:cd:a0:
                    0e:ab:26:1f:dc:f2:7c:cf:f7:21:83:08:a7:48:80:
                    f1:bb:5d:e4:33:99:53:ad:ed:71:ff:6e:70:af:27:
                    9c:f2:27:66:06:e7:7a:d5:d7:c5:02:93:4d:ef:b1:
                    51:af:8f:2d:2c:1d:b1:02:02:03:ea:bc:9f:cd:91:
                    77:5b:6a:78:db:3e:ba:f6:40:83:4f:b6:bf:bd:b6:
                    7c:f9:1e:71:d7:0e:ec:85:a4:ac:06:39:a0:23:2b:
                    24:6f:17:b6:d6:a9:3c:d1:b2:b0:db:d3:be:b1:ac:
                    ef:50:e0:09:33:eb:94:06:fa:00:3c:01:eb:fd:09:
                    41:8b:a9:61:61:ce:35:0d:7a:35:77:65:2c:ae:a5:
                    95:2b:13:3c:04:ec:18:17:d8:73:8f:41:d8:da:6a:
                    5c:71:38:9d:5a:fb:9a:9a:00:a4:7b:49:8a:4a:42:
                    86:4e:87:77:02:d2:4c:ff:8e:c4:01:bb:27:09:99:
                    41:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:81:D8:BC:61:19:B3:6E:43:D1:83:9F:50:C4:C7:09:67:D6:E3:27
            X509v3 Authority Key Identifier:
                keyid:84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/119aec9478d3c1a1fe630d2d745ea48e9dedf371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/961b6618bb492a79bacf586c02bc72ae5ebcd74f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.152.0/22
                  181.114.128.0/19
                  201.220.160.0/19
                IPv6:
                  2803:3380:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:a6:83:4d:c0:a1:b4:94:88:0d:b4:77:91:c1:c3:0c:08:f8:
         94:e6:6d:ba:0f:c8:e7:da:23:6d:3b:3e:1e:99:9d:5b:58:b0:
         2f:32:a1:0f:f5:be:6f:da:43:bd:00:5a:12:ce:c1:e5:05:58:
         4e:43:c4:8f:18:17:35:c2:0e:85:47:14:68:89:9e:7f:8b:3b:
         82:3c:27:82:77:28:ad:05:d8:d9:e5:bb:e2:58:c5:d3:d4:ea:
         07:b4:02:12:96:85:26:49:87:05:07:8d:f6:02:a9:ca:6f:95:
         9b:6d:bd:0a:5e:fd:47:93:da:e5:56:f8:d4:81:7b:04:91:da:
         34:f7:4a:f6:8f:e4:89:a3:48:5e:c0:24:d3:8f:d5:5a:1a:aa:
         47:b2:30:ff:2a:08:47:28:76:36:de:8a:b1:9e:2e:a3:b3:92:
         19:13:1b:a0:1a:53:fe:3e:9b:3a:a8:99:76:f6:f0:51:58:86:
         82:70:0c:16:82:7b:de:a7:85:d2:e3:56:42:ae:20:21:60:33:
         49:af:ec:bd:e4:a5:2f:0b:92:0e:9d:3f:90:97:9f:f4:06:cc:
         81:5f:94:29:af:26:b3:36:14:dc:4e:9e:5a:90:5d:88:16:0e:
         31:6c:24:47:dc:a3:8a:00:70:a3:77:6b:e6:65:25:b7:12:e3:
         72:92:f2:e4
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIDIzArMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk2
MWI2NjE4YmI0OTJhNzliYWNmNTg2YzAyYmM3MmFlNWViY2Q3NGYwHhcNMjMwODI3
MTMxMDA5WhcNMjUwODI4MTMxMDA5WjAzMTEwLwYDVQQDEygxMTlhZWM5NDc4ZDNj
MWExZmU2MzBkMmQ3NDVlYTQ4ZTlkZWRmMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5rS+BiqTgGLCKWVE3qNnObX16bIiDiziyzjQx57DtJ6sk8bs
eUAJWiJsN9rNeCsg+xcwvKmKCTWP2xrGfotgMKSegmL1VxFZzaAOqyYf3PJ8z/ch
gwinSIDxu13kM5lTre1x/25wryec8idmBud61dfFApNN77FRr48tLB2xAgID6ryf
zZF3W2p42z669kCDT7a/vbZ8+R5x1w7shaSsBjmgIyskbxe21qk80bKw29O+sazv
UOAJM+uUBvoAPAHr/QlBi6lhYc41DXo1d2UsrqWVKxM8BOwYF9hzj0HY2mpccTid
WvuamgCke0mKSkKGTod3AtJM/47EAbsnCZlBBQIDAQABo4ICdzCCAnMwHQYDVR0O
BBYEFMGB2LxhGbNuQ9GDn1DExwln1uMnMB8GA1UdIwQYMBaAFITF9S5dYOHbvckz
VQmg/rok2rIdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTYxYjY2
MThiYjQ5MmE3OWJhY2Y1ODZjMDJiYzcyYWU1ZWJjZDc0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmVkMGUxNTMtYzI3Yi00NjgyLWFmMzEtYjI5YmJl
Njg3YTg2LzExOWFlYzk0NzhkM2MxYTFmZTYzMGQyZDc0NWVhNDhlOWRlZGYzNzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZWQwZTE1My1jMjdiLTQ2ODItYWYzMS1iMjli
YmU2ODdhODYvOTYxYjY2MThiYjQ5MmE3OWJhY2Y1ODZjMDJiYzcyYWU1ZWJjZDc0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQs
MCowGAQCAAEwEgMEAoOhmAMEBbVygAMEBcncoDAOBAIAAjAIAwYEKAMzgBAwDQYJ
KoZIhvcNAQELBQADggEBAJSmg03AobSUiA20d5HBwwwI+JTmbboPyOfaI207Ph6Z
nVtYsC8yoQ/1vm/aQ70AWhLOweUFWE5DxI8YFzXCDoVHFGiJnn+LO4I8J4J3KK0F
2Nnlu+JYxdPU6ge0AhKWhSZJhwUHjfYCqcpvlZttvQpe/UeT2uVW+NSBewSR2jT3
SvaP5ImjSF7AJNOP1VoaqkeyMP8qCEcodjbeirGeLqOzkhkTG6AaU/4+mzqomXb2
8FFYhoJwDBaCe96nhdLjVkKuICFgM0mv7L3kpS8Lkg6dP5CXn/QGzIFflCmvJrM2
FNxOnlqQXYgWDjFsJEfco4oAcKN3a+ZlJbcS43KS8uQ=
-----END CERTIFICATE-----