Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2c206e0c-d40d-4219-909b-b55b2ce156bb/8020f0fb7675d0ad952a922b8763c977971fa60f.roa
File:                     8020f0fb7675d0ad952a922b8763c977971fa60f.roa (raw, json)
Hash identifier:          4mnZtq9wZA5CnZUgq5/VFhJAEyZoz0cP7UDEYyVg7sE=
Subject key identifier:   F0:8A:D3:60:A6:19:7A:C4:8A:74:EB:2B:A5:C5:64:AA:C2:8C:0B:CA
Certificate issuer:       /CN=a461f35f347471cd1d557d33929a056304b681b4
Certificate serial:       0E3D82
Authority key identifier: BA:B5:5C:10:D3:04:41:C4:41:10:A3:BD:EE:39:B6:4B:E1:FC:AE:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a461f35f347471cd1d557d33929a056304b681b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2c206e0c-d40d-4219-909b-b55b2ce156bb/8020f0fb7675d0ad952a922b8763c977971fa60f.roa
Signing time:             Fri 24 Mar 2023 22:29:06 +0000
ROA not before:           Thu 23 Mar 2023 22:28:37 +0000
ROA not after:            Mon 24 Mar 2025 22:28:37 +0000
asID:                     265587
IP address blocks:        187.62.104.0/22 maxlen: 24
                          2806:3ae::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933250 (0xe3d82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a461f35f347471cd1d557d33929a056304b681b4
        Validity
            Not Before: Mar 23 22:28:37 2023 GMT
            Not After : Mar 24 22:28:37 2025 GMT
        Subject: CN=8020f0fb7675d0ad952a922b8763c977971fa60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:54:9a:d1:c1:bd:85:36:e3:7c:9a:64:81:
                    de:67:42:de:d9:cf:c8:13:9b:ff:0b:bd:b2:a9:24:
                    54:86:7a:61:7e:08:ca:7f:c5:84:fd:b5:5e:b7:bf:
                    1a:fe:49:0f:b6:36:c2:99:f6:4d:38:ed:1b:c9:72:
                    a5:61:07:78:c0:62:1a:2f:c7:6f:f9:88:75:7f:d8:
                    53:fa:ec:2c:dd:17:a3:2b:1c:76:be:ad:90:b8:b4:
                    a6:21:3a:01:d0:3d:7a:d2:5a:b3:de:12:e1:e9:a2:
                    ba:b0:0f:82:0a:d3:18:3d:85:ca:ee:dd:b3:1f:c9:
                    a6:c8:c9:ee:0f:85:6a:0a:8c:b8:ca:10:c3:e1:2e:
                    b7:e5:cc:21:66:f0:12:47:df:54:ea:55:20:ec:e6:
                    6d:0d:91:ec:82:3d:09:6c:17:f2:a5:20:c8:9c:22:
                    74:d2:34:84:c3:f8:ec:60:ee:e2:5a:86:4d:ba:94:
                    e9:07:a0:e7:fc:59:06:87:e4:d0:fe:4c:8c:00:1d:
                    94:25:c9:9f:71:5a:55:5c:7e:59:35:b2:20:9a:bc:
                    f2:34:54:46:6a:b7:01:9f:f6:5e:03:f4:f2:09:ec:
                    95:8d:ec:e6:5f:da:27:25:6a:00:c9:76:9f:74:34:
                    05:83:88:6b:ad:e9:f1:af:a5:e0:2d:d2:f4:4d:f2:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8A:D3:60:A6:19:7A:C4:8A:74:EB:2B:A5:C5:64:AA:C2:8C:0B:CA
            X509v3 Authority Key Identifier:
                keyid:BA:B5:5C:10:D3:04:41:C4:41:10:A3:BD:EE:39:B6:4B:E1:FC:AE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a461f35f347471cd1d557d33929a056304b681b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2c206e0c-d40d-4219-909b-b55b2ce156bb/8020f0fb7675d0ad952a922b8763c977971fa60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2c206e0c-d40d-4219-909b-b55b2ce156bb/a461f35f347471cd1d557d33929a056304b681b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.104.0/22
                IPv6:
                  2806:3ae::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:cd:4f:fa:3a:8b:50:a7:31:c2:b1:eb:08:44:ae:26:2c:4f:
         c6:40:bf:c0:60:f4:56:31:a6:4b:eb:2c:bd:90:f8:98:0e:4d:
         e2:4e:08:10:d9:35:2a:62:54:1d:f3:d7:6d:80:d1:d6:6f:0a:
         2f:c0:6c:1a:90:33:a4:d1:02:17:6a:5a:90:9d:77:d7:ab:62:
         ad:48:c0:cc:9a:4d:ef:c2:3b:f8:74:64:33:40:e2:fd:84:31:
         4c:9e:ac:b8:bd:51:b2:d0:44:b3:f6:aa:bd:0f:44:a5:8d:c6:
         2c:83:de:0b:15:95:c7:e6:22:d9:03:d0:cf:c1:e7:66:1b:84:
         c7:84:82:2b:47:97:49:b4:5b:3e:19:8f:f0:9c:d5:02:2a:90:
         d0:7b:ab:00:6a:b4:61:77:5c:73:42:e2:06:0d:8c:6f:b3:f9:
         ba:ac:5c:02:e8:ee:99:9d:d8:33:9e:73:28:67:61:2f:82:f1:
         1c:25:63:f5:1f:38:1e:bf:4d:af:f4:98:8a:a0:d0:65:a0:58:
         b7:c2:fc:88:40:85:15:1b:0b:44:10:92:07:7b:ca:2b:03:35:
         c5:fb:b5:85:9d:e7:84:f5:cb:ef:e0:81:ac:82:d5:dd:50:ff:
         75:15:f6:7a:03:23:c8:bb:4a:c7:47:15:b2:d1:4a:b6:d9:72:
         66:75:0b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----