Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/d0bfa8e6229953bce82f08716f1bb725cf14a3b6.roa
File:                     d0bfa8e6229953bce82f08716f1bb725cf14a3b6.roa (raw, json)
Hash identifier:          Le0e5B5tuLHQBQY+aSUPl65zkgeRwqr4f+m/ebvb88Y=
Subject key identifier:   03:7A:C3:D9:A4:1E:14:EB:D1:EA:41:0C:81:5E:B2:E6:B0:BC:FB:63
Certificate issuer:       /CN=ef50a919c38d29bb33866e24d668a0b386609323
Certificate serial:       199FA9
Authority key identifier: A2:7E:F9:12:D9:A3:A0:AE:2C:D2:E1:59:04:73:E0:80:98:E6:0D:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef50a919c38d29bb33866e24d668a0b386609323.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/d0bfa8e6229953bce82f08716f1bb725cf14a3b6.roa
Signing time:             Mon 06 Jun 2022 21:34:21 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     263703
IP address blocks:        143.255.84.0/22 maxlen: 24
                          190.97.224.0/19 maxlen: 24
                          2803:7800::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679273 (0x199fa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef50a919c38d29bb33866e24d668a0b386609323
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=d0bfa8e6229953bce82f08716f1bb725cf14a3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:c5:c8:07:86:bb:cb:bd:ca:d2:3e:9f:17:
                    4b:30:78:94:c6:37:93:97:7d:aa:ed:a3:5b:9b:68:
                    56:74:18:4d:64:ba:6a:ca:10:4b:d1:5c:f9:be:ce:
                    23:be:76:ca:cb:bd:72:b6:68:25:47:51:49:da:ed:
                    dd:be:a8:ad:ec:15:b4:d7:68:df:9a:b1:06:5a:75:
                    13:af:0a:db:22:01:f8:17:94:49:f0:3b:9c:67:a3:
                    f9:ee:c4:3e:7f:a1:ba:48:d2:44:12:e6:54:45:72:
                    fb:9c:91:a1:86:cc:8a:42:84:3f:92:42:37:0f:32:
                    21:aa:8d:bb:95:db:9a:7d:e7:1e:2f:b3:a0:33:7e:
                    a6:46:47:11:5b:9d:50:a5:84:e1:cb:10:76:d7:b6:
                    e2:09:70:12:f8:6c:da:28:b3:f9:88:b8:40:38:56:
                    8c:0f:f8:c1:04:b2:40:8d:30:73:d1:e7:05:47:c1:
                    e7:78:b9:d1:0e:aa:4b:74:db:30:e4:e0:f9:0f:17:
                    24:e2:80:82:38:68:7e:45:0e:8c:05:78:f9:0a:67:
                    7d:3d:e1:a6:87:08:a7:ff:be:21:2c:bf:13:c0:a3:
                    35:47:64:7c:3e:30:3b:fc:ad:60:ff:c3:53:df:f4:
                    b9:e3:c4:47:7c:7e:d7:c8:55:9b:87:0b:70:f4:c6:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7A:C3:D9:A4:1E:14:EB:D1:EA:41:0C:81:5E:B2:E6:B0:BC:FB:63
            X509v3 Authority Key Identifier:
                keyid:A2:7E:F9:12:D9:A3:A0:AE:2C:D2:E1:59:04:73:E0:80:98:E6:0D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef50a919c38d29bb33866e24d668a0b386609323.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/d0bfa8e6229953bce82f08716f1bb725cf14a3b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/ef50a919c38d29bb33866e24d668a0b386609323.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.84.0/22
                  190.97.224.0/19
                IPv6:
                  2803:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:ec:42:36:3e:7d:64:c4:70:c7:ca:69:21:42:56:54:de:bf:
         13:b4:1d:14:a1:c0:97:0c:f3:53:e6:b6:81:6c:c2:3f:aa:09:
         8c:98:79:38:05:cd:4c:1a:4b:f8:bd:13:8c:8c:74:fa:e6:8d:
         63:3d:e8:48:4e:f6:36:0f:e2:72:7e:08:f1:55:49:ca:4d:71:
         f1:ad:ba:a3:d7:8b:b7:00:f1:4e:46:58:05:d0:c5:09:d9:be:
         a2:18:c4:a7:37:6c:e9:f4:1c:26:e6:16:f9:9a:95:cf:39:e1:
         13:aa:73:0e:3e:d1:01:cb:ed:e9:21:e3:a8:1e:0d:7c:05:51:
         76:3b:98:0c:9e:fc:9b:f4:e3:15:ed:7c:3c:4a:c9:2d:2d:c4:
         4a:ab:30:67:a5:99:70:9b:d7:86:e5:c0:62:18:44:9d:46:1e:
         b5:7b:af:02:c6:d6:94:6b:e3:07:d8:1c:0a:27:03:a5:ff:44:
         0f:dc:a0:b9:b3:f1:31:f2:f3:8d:b6:1b:9e:16:d8:9b:b9:c2:
         32:eb:a3:a3:c7:db:c7:19:23:f8:78:c9:66:ea:3c:85:40:5a:
         58:65:21:c5:54:ab:21:e5:bd:84:a1:79:20:4b:be:74:7e:ca:
         ee:2b:88:c3:8d:b3:86:a9:2b:ab:c9:d9:d4:6a:e6:46:57:3a:
         02:34:a9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----