Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/e1eca7edcef8568204f3c5390b28f57c947029ed.roa
File:                     e1eca7edcef8568204f3c5390b28f57c947029ed.roa (raw, json)
Hash identifier:          dCP0hoOO1kasykgBvMpMKfSY1nVS4kAt5jNEsGiw34w=
Subject key identifier:   E2:78:EA:B6:1D:2F:49:DD:EB:34:FC:76:3C:5F:E3:29:E2:C2:0B:36
Certificate issuer:       /CN=7272057ebe387df71782aa3e99d4f487f3e842e8
Certificate serial:       0BA6C6
Authority key identifier: 2C:C0:67:CE:51:EC:05:E7:87:C1:0F:08:8E:45:02:0E:09:A5:F5:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7272057ebe387df71782aa3e99d4f487f3e842e8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/e1eca7edcef8568204f3c5390b28f57c947029ed.roa
Signing time:             Mon 29 May 2023 14:39:34 +0000
ROA not before:           Sun 28 May 2023 14:39:33 +0000
ROA not after:            Thu 29 May 2025 14:39:33 +0000
asID:                     265587
IP address blocks:        201.77.96.0/22 maxlen: 24
                          2806:3a8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763590 (0xba6c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7272057ebe387df71782aa3e99d4f487f3e842e8
        Validity
            Not Before: May 28 14:39:33 2023 GMT
            Not After : May 29 14:39:33 2025 GMT
        Subject: CN=e1eca7edcef8568204f3c5390b28f57c947029ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9b:3b:32:53:15:6f:75:2c:91:ae:c3:eb:a6:
                    88:f6:90:a6:38:cf:e9:04:e6:d3:59:03:d6:6c:f8:
                    aa:08:7f:9c:65:8a:4b:08:70:1a:19:a4:48:f8:5f:
                    51:d5:8a:2b:b3:0e:3a:b6:a8:f8:c5:dd:70:15:92:
                    61:32:08:8e:c8:78:d4:9e:8b:30:79:b4:e0:fe:28:
                    bb:8c:c1:1b:4d:21:b1:c2:ea:f0:d4:9f:92:15:ee:
                    a4:c1:d0:3b:a2:de:9f:77:0a:34:88:c8:be:44:31:
                    7f:8c:a2:a3:68:40:21:20:6f:62:d8:47:45:85:49:
                    4a:78:af:a1:26:fa:20:2d:13:e6:c7:e9:b9:70:a9:
                    e1:08:ce:ce:4d:c9:e2:ce:0b:74:c4:cb:d5:a8:ae:
                    29:24:7c:e9:f2:36:1b:6d:73:c2:77:29:0d:52:b8:
                    43:11:2d:87:a7:5d:37:f8:08:74:72:fb:ce:53:e8:
                    35:52:ae:a7:00:76:77:cb:e0:8e:46:c0:e4:90:02:
                    b2:d7:f6:83:82:47:73:d6:fa:ce:e1:5b:29:ae:c6:
                    24:31:d8:50:95:c6:d0:e6:c6:e7:ac:fa:01:0b:c8:
                    f1:fb:db:ac:ca:43:2b:af:6d:f3:b3:6b:a0:4d:99:
                    cc:87:3b:f7:f7:88:59:0a:ea:24:91:89:ab:38:4f:
                    03:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:78:EA:B6:1D:2F:49:DD:EB:34:FC:76:3C:5F:E3:29:E2:C2:0B:36
            X509v3 Authority Key Identifier:
                keyid:2C:C0:67:CE:51:EC:05:E7:87:C1:0F:08:8E:45:02:0E:09:A5:F5:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7272057ebe387df71782aa3e99d4f487f3e842e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/e1eca7edcef8568204f3c5390b28f57c947029ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/7272057ebe387df71782aa3e99d4f487f3e842e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.96.0/22
                IPv6:
                  2806:3a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:f0:23:ff:99:a5:33:d8:b5:4a:f5:e2:93:e3:16:94:d4:51:
         0f:87:b2:c6:c5:82:99:8f:e1:76:a3:a2:a5:c0:83:a1:4c:61:
         86:d9:3d:a6:af:04:e9:7d:d1:2b:62:e2:36:57:e0:3d:2b:f4:
         89:06:a7:49:8e:19:87:5d:6b:69:32:0c:26:1b:b4:36:7a:50:
         a0:58:9d:ef:24:de:d0:53:c6:11:63:56:36:78:6a:1b:5a:69:
         a9:57:88:5c:b1:d3:fa:00:28:28:3a:ea:7b:45:c8:88:54:d3:
         01:55:65:aa:65:9b:72:dc:43:43:0d:c6:6e:1b:2f:e2:e9:8b:
         ca:47:28:26:9f:ba:d6:9b:c5:14:54:ca:56:1c:f6:43:e5:43:
         af:2c:ae:10:be:3c:63:53:34:46:2a:9f:fa:e1:f5:87:8e:e2:
         48:ef:98:d1:10:e2:36:5c:78:e4:e3:7e:f5:ec:06:37:52:92:
         ae:93:4c:27:a9:08:fe:72:54:42:5f:f2:27:eb:bb:c9:47:7e:
         52:cf:ec:1a:a5:ca:13:71:db:76:7a:2a:6a:27:6e:40:80:b3:
         b1:a4:4b:20:cc:9e:54:25:cb:0b:72:64:9f:7f:b8:36:25:be:
         98:12:f9:26:87:ed:85:c1:51:b2:e4:b8:b7:76:6f:eb:7d:55:
         e9:ed:93:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----