Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/0afe43f259264e928fd8660e2c2b374c1f9ee9f7.roa
File:                     0afe43f259264e928fd8660e2c2b374c1f9ee9f7.roa (raw, json)
Hash identifier:          XjjYUCFP2BC2VWReaniONLC2M6ascAQJC/bHE8b8gE0=
Subject key identifier:   25:85:A7:3B:FD:96:5C:F4:7F:B3:50:1E:7B:78:D3:60:0C:ED:0C:70
Certificate issuer:       /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial:       27C900
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/0afe43f259264e928fd8660e2c2b374c1f9ee9f7.roa
Signing time:             Wed 31 Jan 2024 21:00:12 +0000
ROA not before:           Wed 31 Jan 2024 21:00:11 +0000
ROA not after:            Sat 31 Jan 2026 21:00:11 +0000
asID:                     52228
IP address blocks:        186.15.0.0/17 maxlen: 24
                          186.15.128.0/19 maxlen: 24
                          186.15.160.0/20 maxlen: 24
                          186.15.176.0/21 maxlen: 24
                          186.159.220.0/22 maxlen: 24
                          186.159.224.0/19 maxlen: 24
                          186.159.128.0/18 maxlen: 24
                          186.159.192.0/20 maxlen: 24
                          186.159.208.0/21 maxlen: 24
                          186.159.216.0/23 maxlen: 24
                          2803:6000::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2607360 (0x27c900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
        Validity
            Not Before: Jan 31 21:00:11 2024 GMT
            Not After : Jan 31 21:00:11 2026 GMT
        Subject: CN=0afe43f259264e928fd8660e2c2b374c1f9ee9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:e1:0a:75:47:da:73:30:a6:a0:09:28:d4:
                    ae:08:07:13:ee:12:d5:45:b1:52:bd:7a:11:69:5e:
                    21:9a:92:4d:0f:2f:82:20:ba:c1:41:d2:2b:21:59:
                    4a:36:b4:8a:1a:03:d2:8f:b2:f4:ee:31:b5:5b:f3:
                    4d:1d:6f:9c:e0:e9:5e:ff:c9:ff:60:68:4f:e6:a4:
                    02:ab:e1:14:30:0b:dd:e5:7f:fe:61:b7:7a:37:71:
                    d2:2e:84:40:bb:af:b9:b5:4c:92:00:93:92:79:c7:
                    21:23:0d:09:f2:1c:eb:41:71:d7:33:cb:ac:c7:5c:
                    e3:87:43:5f:30:80:67:d8:44:64:da:ea:a4:68:1f:
                    ec:bc:49:1e:3c:49:30:22:97:2d:9e:a7:e2:fe:3f:
                    84:8d:81:3a:11:32:1d:7d:7c:1b:00:8a:60:bc:ab:
                    fa:d6:58:d1:80:fd:86:27:89:7a:b4:df:29:73:ec:
                    2a:56:89:58:ab:67:e5:d9:8a:cb:62:e7:0c:14:62:
                    d9:ea:ef:f0:18:c2:03:fc:a3:8b:57:ae:50:fa:59:
                    ea:d7:7a:eb:b3:fa:b1:25:ca:8d:d9:b9:d4:d6:f5:
                    e8:5e:e8:0f:c2:0c:02:ba:8c:02:0b:12:d2:69:52:
                    cc:0c:fe:49:06:0a:12:85:c7:04:9b:0c:10:d3:5d:
                    3c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:85:A7:3B:FD:96:5C:F4:7F:B3:50:1E:7B:78:D3:60:0C:ED:0C:70
            X509v3 Authority Key Identifier:
                keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/0afe43f259264e928fd8660e2c2b374c1f9ee9f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.15.0.0-186.15.183.255
                  186.159.128.0-186.159.217.255
                  186.159.220.0-186.159.255.255
                IPv6:
                  2803:6000::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:01:08:0c:60:d2:1c:f0:05:4e:cd:44:d7:78:38:87:ca:4a:
         9f:56:9e:bf:77:e9:d6:ba:f6:d8:a8:ff:b9:41:e5:89:e3:0b:
         0b:10:2c:fb:a8:1b:34:da:1c:65:3f:96:f8:a1:0c:58:d4:ca:
         f8:b7:97:c1:9e:54:1b:87:44:64:2c:a9:bd:19:8b:81:a0:61:
         d6:ff:95:e7:48:c3:d0:74:56:4e:32:c6:c4:b7:bc:ac:9f:bd:
         f8:1b:d6:25:d7:cd:87:40:c9:f4:ae:33:a6:0c:e7:6b:a5:70:
         1f:e5:c8:9d:09:0e:28:91:75:ce:a2:9e:9a:08:5c:5d:d5:25:
         25:d2:ed:c6:3a:14:bf:84:74:1d:3f:d2:88:4e:ec:3d:a5:70:
         ba:0b:6b:c9:c8:78:1b:82:2f:b6:41:70:e2:bb:ac:69:d3:49:
         4b:5b:9e:e7:7e:8e:97:c2:23:4d:bf:c6:0b:59:b6:4d:15:c7:
         6c:ac:80:49:d4:91:ed:7e:36:87:ea:51:86:7b:d3:18:9b:68:
         68:58:5c:9d:3e:ce:31:00:90:3c:bc:e9:2f:30:0d:ab:ef:77:
         0c:71:0b:96:74:3a:0d:d7:e8:09:0f:12:4c:65:10:02:ec:85:
         76:fb:a8:80:5e:9d:20:3e:36:3c:bb:d1:f1:49:0d:0a:58:0a:
         ba:05:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----