Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/143c84bb-d75b-475a-a55a-a3984daf0e41/69c965b5131d3c4315f34efbd261638607d8bc64.roa
File:                     69c965b5131d3c4315f34efbd261638607d8bc64.roa (raw, json)
Hash identifier:          NMbvTLoN6s3fZX1QUu4X99SBs/JsddtXaQ2TZQNUmQY=
Subject key identifier:   60:61:89:0D:4C:2D:79:A7:F6:6D:96:27:DE:48:FD:63:14:EE:7A:70
Certificate issuer:       /CN=de6eebe43f541e18ccd7422937906e6c71168d41
Certificate serial:       12131D
Authority key identifier: DA:FB:93:8E:21:0F:B3:E9:9A:50:1B:81:AB:5F:CB:07:02:D4:66:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de6eebe43f541e18ccd7422937906e6c71168d41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/143c84bb-d75b-475a-a55a-a3984daf0e41/69c965b5131d3c4315f34efbd261638607d8bc64.roa
Signing time:             Tue 03 Oct 2023 08:30:08 +0000
ROA not before:           Mon 02 Oct 2023 08:30:08 +0000
ROA not after:            Wed 01 Oct 2025 08:30:08 +0000
asID:                     265753
IP address blocks:        131.196.52.0/22 maxlen: 22
                          2803:ebc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184541 (0x12131d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6eebe43f541e18ccd7422937906e6c71168d41
        Validity
            Not Before: Oct  2 08:30:08 2023 GMT
            Not After : Oct  1 08:30:08 2025 GMT
        Subject: CN=69c965b5131d3c4315f34efbd261638607d8bc64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:01:4b:69:79:ff:a4:96:12:e2:bf:3a:89:
                    e6:43:d3:57:76:e3:7b:c2:ef:36:a7:eb:5e:29:9b:
                    b0:2e:13:57:5e:a3:b4:45:25:7b:57:d7:f0:bf:59:
                    fe:a9:38:eb:5e:86:35:e7:1e:ef:3d:92:dc:54:79:
                    09:10:c0:e2:b4:3d:2c:e5:34:3b:18:b7:6b:7f:64:
                    ba:68:ae:14:a7:f3:01:7d:79:2d:5f:43:8d:83:b9:
                    fe:87:20:b4:8a:96:7b:d7:cd:30:27:49:6c:1d:3a:
                    df:46:1a:88:5e:38:d0:f4:0c:70:4b:01:ea:9e:42:
                    17:a7:83:76:b7:6d:0a:ff:50:84:42:87:c6:12:f4:
                    1e:7b:9d:f6:eb:49:9b:18:17:ca:d9:00:0f:7e:ed:
                    60:9d:18:aa:c1:32:c5:cd:83:a9:c3:e7:04:48:3a:
                    e9:88:f1:41:b6:41:bc:b2:27:1b:b4:3a:a2:cf:b8:
                    bc:46:e5:a9:81:04:84:fe:13:33:18:4a:b0:76:3e:
                    62:6b:29:e8:7e:b7:6f:0b:48:ff:1f:3a:45:8f:cc:
                    8c:34:77:aa:d4:a0:1e:0b:51:15:d2:57:fc:4b:c8:
                    64:35:e3:d7:29:e0:16:0b:92:55:57:33:56:70:d1:
                    2a:73:2c:01:f9:b7:48:e3:e5:78:56:fc:d1:b8:75:
                    2c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:61:89:0D:4C:2D:79:A7:F6:6D:96:27:DE:48:FD:63:14:EE:7A:70
            X509v3 Authority Key Identifier:
                keyid:DA:FB:93:8E:21:0F:B3:E9:9A:50:1B:81:AB:5F:CB:07:02:D4:66:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de6eebe43f541e18ccd7422937906e6c71168d41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/143c84bb-d75b-475a-a55a-a3984daf0e41/69c965b5131d3c4315f34efbd261638607d8bc64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/143c84bb-d75b-475a-a55a-a3984daf0e41/de6eebe43f541e18ccd7422937906e6c71168d41.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.52.0/22
                IPv6:
                  2803:ebc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:96:c3:65:bd:0f:33:10:38:a6:5a:25:1a:c3:97:2a:a0:02:
         10:b9:d0:e6:9b:3c:e5:e5:cf:88:64:bb:9d:22:b5:36:cc:c8:
         2a:96:b7:37:e3:36:a6:eb:ca:10:2d:08:ad:b3:66:03:64:0e:
         5c:7d:2f:cb:5b:29:d0:26:10:70:d7:92:2f:18:9a:ef:24:45:
         ba:8f:25:45:ea:b2:26:69:67:69:9f:bc:e5:71:55:7d:d2:11:
         50:36:94:3f:51:69:ff:c4:cd:e3:10:3e:b1:9c:11:5a:2b:ee:
         5b:99:66:70:b2:72:5a:9c:43:5c:8a:37:9e:a2:c9:d3:0c:af:
         fd:07:83:b6:7b:a6:0e:35:21:29:54:af:85:9a:03:6d:84:96:
         f8:a7:ad:ba:79:91:fb:3c:e1:ea:ec:d0:9b:59:83:36:cc:2f:
         c9:a1:24:16:8d:52:9e:84:3e:5e:de:9d:c8:aa:10:81:4d:93:
         94:c3:aa:0d:4a:c9:d9:64:ae:3e:61:cc:9a:c5:fa:60:2e:1a:
         9e:69:03:84:c9:d7:92:87:9e:e9:e4:eb:22:05:2e:83:b4:85:
         06:21:8e:04:6f:c0:81:ba:8e:52:02:56:16:68:d6:01:d3:f0:
         63:ce:d4:68:32:10:77:36:ba:3c:0a:d9:f0:c6:2e:70:c4:0b:
         4f:46:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----