Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/75ce2c8f5d1997f72bc64715e639c0ce8d499917.roa
File:                     75ce2c8f5d1997f72bc64715e639c0ce8d499917.roa (raw, json)
Hash identifier:          9KjyqZCDphLrQ3I/TE0CPCBBmy28zFNwzIunih1kv7k=
Subject key identifier:   7C:3E:53:AC:39:BD:2B:85:4B:3B:98:21:50:38:6E:DA:99:5D:88:4F
Certificate issuer:       /CN=b825aea653e97a291ec1350029e2e92dfa3c3746
Certificate serial:       0C238F
Authority key identifier: 76:2A:EA:61:EA:DD:F2:8C:6B:1E:CE:73:79:7A:C1:27:3D:E9:09:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b825aea653e97a291ec1350029e2e92dfa3c3746.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/75ce2c8f5d1997f72bc64715e639c0ce8d499917.roa
Signing time:             Thu 19 Oct 2023 19:27:26 +0000
ROA not before:           Thu 19 Oct 2023 19:27:26 +0000
ROA not after:            Sun 19 Oct 2025 19:27:26 +0000
asID:                     269997
IP address blocks:        181.192.100.0/22 maxlen: 24
                          2803:11e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795535 (0xc238f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b825aea653e97a291ec1350029e2e92dfa3c3746
        Validity
            Not Before: Oct 19 19:27:26 2023 GMT
            Not After : Oct 19 19:27:26 2025 GMT
        Subject: CN=75ce2c8f5d1997f72bc64715e639c0ce8d499917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2b:5f:5a:aa:2a:24:e9:a0:ea:e3:a7:c1:53:
                    9c:36:fb:dd:0f:b5:ff:40:93:0b:04:5c:11:5e:95:
                    69:20:6f:dd:d8:57:e4:3c:26:25:62:eb:a0:93:af:
                    a2:58:18:f0:20:51:6f:4f:5b:0a:d3:e0:95:d9:6d:
                    4b:45:bc:c5:42:8a:d5:fc:bf:58:11:5d:5f:44:a3:
                    7a:49:67:d6:b2:85:9b:77:c1:c4:2d:45:a4:ba:bd:
                    e6:ab:1b:fc:f2:17:85:37:26:4f:0b:db:e0:9f:63:
                    86:36:48:3c:52:43:b2:2c:0a:49:2c:c6:30:d0:1c:
                    e4:c0:07:2a:74:45:ca:d5:3c:d4:a7:dd:b3:14:44:
                    93:c8:f1:cf:65:76:14:3a:9f:5f:12:8d:6a:fa:7b:
                    d4:78:a7:63:32:68:b7:2f:be:ab:83:c8:c0:d8:f8:
                    5a:54:cb:a6:4e:b6:b9:b6:3b:c9:53:bf:a2:d0:cc:
                    b2:5d:78:a6:07:46:80:37:4d:46:9b:53:a0:2f:31:
                    8f:41:d1:a0:67:08:ee:b1:bf:54:ed:7d:9c:6c:f1:
                    20:cf:8a:cc:b2:14:7e:00:a0:1c:43:d1:c3:47:40:
                    f3:47:40:ce:d5:b5:4e:9b:5f:59:91:cc:db:1c:d0:
                    61:bd:a3:61:47:a8:fb:2c:4b:ca:30:21:f9:c8:f2:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3E:53:AC:39:BD:2B:85:4B:3B:98:21:50:38:6E:DA:99:5D:88:4F
            X509v3 Authority Key Identifier:
                keyid:76:2A:EA:61:EA:DD:F2:8C:6B:1E:CE:73:79:7A:C1:27:3D:E9:09:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b825aea653e97a291ec1350029e2e92dfa3c3746.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/75ce2c8f5d1997f72bc64715e639c0ce8d499917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/b825aea653e97a291ec1350029e2e92dfa3c3746.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.100.0/22
                IPv6:
                  2803:11e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:98:7d:71:09:59:fa:b0:d7:90:d6:5b:8f:1f:fb:c0:a0:d8:
         a2:7f:84:30:7b:4d:ba:e5:f0:d6:7f:1e:c9:c6:bd:a3:63:2f:
         6e:d7:6a:3b:1b:9c:13:63:63:fa:43:d5:b6:70:29:4d:49:11:
         c6:1d:10:73:a2:55:fa:40:2e:be:4f:4c:2d:c4:7d:99:68:cc:
         1a:67:de:90:cf:6a:02:a2:69:33:5e:19:bf:df:a0:79:4b:da:
         e3:76:48:31:62:c1:4d:1a:f1:62:5a:ec:dd:83:91:25:0e:00:
         39:e2:5c:01:2d:f6:fd:51:20:0e:46:f6:48:76:49:82:14:fd:
         5e:cf:ea:15:cc:61:2e:2f:a6:90:d8:13:43:ef:5f:98:de:7e:
         b6:d5:1b:27:50:ab:cb:b1:98:96:ba:36:60:c2:fc:b4:8c:82:
         62:79:a4:e9:aa:a6:5f:ff:73:64:29:38:4f:82:e0:92:02:04:
         02:bc:f0:93:d9:d4:70:e8:91:93:d3:01:52:0f:de:e9:9b:ee:
         54:7b:91:3a:69:0b:ab:13:6b:b7:4a:aa:bc:42:6b:4a:a7:fd:
         ff:f9:d3:13:c8:98:f6:b8:3a:7e:ce:a6:21:f2:08:92:19:3f:
         20:f0:f0:2a:62:c1:a3:a3:f4:6f:41:3d:f2:91:af:c4:66:65:
         e5:b4:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----