Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cc7c9d4-3662-4a63-9e9f-b302c287c6ab/b2459b192d3ee1dd51aeab728488ca68f165505e.roa
File:                     b2459b192d3ee1dd51aeab728488ca68f165505e.roa (raw, json)
Hash identifier:          bapy8HP/89KXcf3DnhoM8BRklEpl3c/FaJy4OOGJ+aM=
Subject key identifier:   26:49:A0:CA:E9:4E:77:16:70:4C:30:72:44:FE:1C:D2:85:66:8D:6D
Certificate issuer:       /CN=32783512bd26dfb61020e74e1fef6ed1390b1a0b
Certificate serial:       05C6
Authority key identifier: AF:C6:33:33:68:CB:64:52:37:36:61:B9:18:41:15:2D:6B:7B:59:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32783512bd26dfb61020e74e1fef6ed1390b1a0b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cc7c9d4-3662-4a63-9e9f-b302c287c6ab/b2459b192d3ee1dd51aeab728488ca68f165505e.roa
Signing time:             Fri 17 Feb 2023 19:48:04 +0000
ROA not before:           Thu 16 Feb 2023 19:45:02 +0000
ROA not after:            Mon 17 Feb 2025 19:45:02 +0000
asID:                     265561
IP address blocks:        131.196.244.0/22 maxlen: 24
                          2806:2ec::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1478 (0x5c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32783512bd26dfb61020e74e1fef6ed1390b1a0b
        Validity
            Not Before: Feb 16 19:45:02 2023 GMT
            Not After : Feb 17 19:45:02 2025 GMT
        Subject: CN=b2459b192d3ee1dd51aeab728488ca68f165505e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:80:bf:ae:25:22:fb:3d:e3:8b:13:a3:22:
                    85:66:eb:fb:40:a4:fe:cb:72:44:70:0c:00:01:52:
                    88:1b:4d:87:70:c6:90:fa:e4:0c:fc:45:9d:0e:d2:
                    76:ab:45:5c:a1:db:31:6c:20:24:86:06:1a:aa:6f:
                    25:90:91:4a:9d:5b:4b:76:1e:82:84:58:1f:61:f7:
                    14:8d:ac:ef:e2:4d:ce:46:53:c7:e3:cb:c5:d3:db:
                    2a:a6:13:14:0d:d9:c4:e0:7b:66:7d:2a:68:76:0c:
                    8c:1a:4a:b4:be:92:e4:8d:e1:b6:67:fa:e0:47:bf:
                    28:a2:49:d9:0f:19:db:c1:b6:b4:65:d3:fa:ce:58:
                    30:5f:f5:ea:dc:c1:32:01:e3:6a:22:24:45:d2:b3:
                    d6:d7:cf:89:6a:9b:5c:6d:ce:4c:8b:a6:5c:fb:c7:
                    54:0e:01:18:b4:07:e7:c8:0a:8a:02:ff:d5:0e:83:
                    13:a3:b4:fb:5d:04:b4:5b:47:8a:8b:94:f7:ac:4e:
                    a7:a4:a4:9c:e8:2f:fa:0d:e3:41:c6:91:54:c8:5e:
                    14:18:09:50:60:20:19:c0:ef:e0:62:59:a3:a3:78:
                    cc:30:4f:ff:af:ff:94:83:7f:e2:02:eb:b6:74:0e:
                    87:54:ce:16:c3:fb:45:1e:63:0f:44:2c:37:77:30:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:49:A0:CA:E9:4E:77:16:70:4C:30:72:44:FE:1C:D2:85:66:8D:6D
            X509v3 Authority Key Identifier:
                keyid:AF:C6:33:33:68:CB:64:52:37:36:61:B9:18:41:15:2D:6B:7B:59:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32783512bd26dfb61020e74e1fef6ed1390b1a0b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cc7c9d4-3662-4a63-9e9f-b302c287c6ab/b2459b192d3ee1dd51aeab728488ca68f165505e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cc7c9d4-3662-4a63-9e9f-b302c287c6ab/32783512bd26dfb61020e74e1fef6ed1390b1a0b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.244.0/22
                IPv6:
                  2806:2ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:70:00:ff:12:69:b3:98:dd:b8:56:d8:86:71:16:00:dc:1c:
         73:bd:fb:d8:29:3d:a5:f8:cb:cc:1b:3e:6d:66:ee:fa:b0:69:
         35:ef:fd:4d:00:47:0b:04:08:03:57:02:c1:45:ef:4e:88:42:
         73:29:00:0f:d2:35:91:79:a9:16:d7:0b:14:85:7e:12:45:7f:
         9a:c9:6f:43:2a:f8:ee:d4:9c:76:41:03:9e:a3:cb:b3:eb:c7:
         a6:1c:f1:3f:05:95:1f:9f:da:ad:bb:c4:8b:e8:0f:6b:a9:88:
         02:f9:fe:49:39:75:d3:3d:90:dc:38:c6:1b:ad:05:d4:82:33:
         eb:b7:02:35:dc:c1:0c:0d:06:44:8f:30:08:ca:dd:dd:f4:a0:
         23:8a:fb:82:67:23:14:cd:6c:98:9e:5d:c3:ee:e4:77:d6:19:
         0f:08:a8:e8:12:ee:ab:c8:66:92:d4:0b:bc:4c:a4:ad:db:be:
         41:aa:04:e2:af:f7:1b:a3:1c:99:5a:7e:9c:cd:26:b2:8b:ba:
         c5:0a:8b:6a:99:7a:77:35:53:00:b2:8e:37:1a:cd:d8:6b:2c:
         53:e1:cf:85:7a:c3:e4:11:8d:ea:d6:4f:eb:3e:e4:4b:77:d4:
         0f:b5:59:a2:a1:06:ba:1b:dc:e7:49:6b:57:60:85:dd:a2:21:
         ec:a0:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----