Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ebe09c6-6947-4ea4-815b-c3fd031e4d6c/5acd739cdb0506d7f7641aef884d4c4836910eb1.roa
File:                     5acd739cdb0506d7f7641aef884d4c4836910eb1.roa (raw, json)
Hash identifier:          zwDYgrDEkefMglGHwH5uDpY7c3VzVBI0DMd6xlleL4E=
Subject key identifier:   97:4B:C7:A5:89:87:62:D8:E3:DE:FB:2E:75:4F:46:EB:AD:86:95:15
Certificate issuer:       /CN=9fdb9dbec373220e99eb9a2a0c20a654f2f187af
Certificate serial:       04624B
Authority key identifier: 9A:56:79:3E:27:33:DA:68:32:3A:54:E1:64:D8:E9:BE:96:FA:3E:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdb9dbec373220e99eb9a2a0c20a654f2f187af.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ebe09c6-6947-4ea4-815b-c3fd031e4d6c/5acd739cdb0506d7f7641aef884d4c4836910eb1.roa
Signing time:             Mon 18 Sep 2023 20:52:12 +0000
ROA not before:           Sun 17 Sep 2023 20:52:12 +0000
ROA not after:            Thu 18 Sep 2025 20:52:12 +0000
asID:                     272810
IP address blocks:        179.63.72.0/22 maxlen: 24
                          2803:b890::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287307 (0x4624b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fdb9dbec373220e99eb9a2a0c20a654f2f187af
        Validity
            Not Before: Sep 17 20:52:12 2023 GMT
            Not After : Sep 18 20:52:12 2025 GMT
        Subject: CN=5acd739cdb0506d7f7641aef884d4c4836910eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:c3:9e:81:2a:a1:60:e7:b4:dd:45:d6:a4:
                    99:74:83:13:45:5d:71:c9:18:3f:a8:98:e0:0c:87:
                    73:28:9b:a9:2d:37:20:d3:ff:f6:1a:7f:6c:a2:bc:
                    b6:03:c3:7a:e7:cf:36:bf:b6:9c:f2:2f:b3:5d:9b:
                    54:61:98:fa:17:e3:ab:b4:34:a2:b5:b2:17:75:58:
                    25:ea:ca:53:8b:e7:43:93:d4:f0:da:42:30:a4:1d:
                    03:4a:f2:b0:cc:89:8a:25:44:f9:50:c1:79:6e:05:
                    9f:80:2e:55:b4:b3:38:55:64:5a:45:cb:b7:9d:c4:
                    f0:cd:7b:85:dd:3a:e5:6c:73:8f:e3:3e:f4:ef:2c:
                    72:d4:f3:20:67:00:70:14:fd:93:65:7c:38:ac:d6:
                    8f:d8:42:8c:72:a2:d6:41:3d:41:ce:a7:b6:26:84:
                    af:bb:27:a4:33:71:30:c0:be:67:24:c7:0b:21:17:
                    aa:eb:04:a3:36:db:34:5d:35:d7:0a:df:06:35:19:
                    90:3e:63:18:1b:95:fc:ca:6b:ec:ee:2b:e9:31:6f:
                    f2:e9:aa:4e:62:84:38:97:df:dd:c3:d9:10:64:35:
                    f6:81:14:c1:b4:91:b4:40:8a:b0:7d:69:43:e0:56:
                    af:93:52:bf:91:4d:39:eb:34:bd:ea:f5:7a:fe:5f:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:C7:A5:89:87:62:D8:E3:DE:FB:2E:75:4F:46:EB:AD:86:95:15
            X509v3 Authority Key Identifier:
                keyid:9A:56:79:3E:27:33:DA:68:32:3A:54:E1:64:D8:E9:BE:96:FA:3E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdb9dbec373220e99eb9a2a0c20a654f2f187af.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ebe09c6-6947-4ea4-815b-c3fd031e4d6c/5acd739cdb0506d7f7641aef884d4c4836910eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ebe09c6-6947-4ea4-815b-c3fd031e4d6c/9fdb9dbec373220e99eb9a2a0c20a654f2f187af.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.72.0/22
                IPv6:
                  2803:b890::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:ac:c5:5b:09:dd:36:ac:19:9c:21:b3:04:51:80:1c:ed:4c:
         3c:fa:76:e3:b2:38:e8:ef:4b:3b:bd:72:2c:0a:66:39:b0:e7:
         87:0d:55:67:78:5e:2d:55:57:ea:b3:c6:c9:b2:61:e3:fa:b1:
         f7:f8:fd:47:33:74:9c:cf:a2:c9:48:61:3a:07:f3:0f:2d:26:
         43:30:ab:86:e6:cd:36:58:44:0b:da:f1:6d:07:81:ef:c6:28:
         1c:86:87:04:4e:f2:e8:39:a4:cd:c0:0a:85:c2:84:7e:fa:95:
         a9:6e:14:83:8c:f4:98:87:5d:ee:e4:db:d9:39:ce:71:29:90:
         29:54:7b:38:b5:9c:45:6a:78:63:49:b4:bd:fb:86:3b:61:49:
         9c:7e:bb:42:60:a7:f4:ff:6e:48:cf:1c:2a:99:7b:dc:29:7e:
         9d:98:d2:16:84:71:6c:2a:eb:7c:6b:89:57:1b:32:30:d8:80:
         d7:1a:ee:c3:37:5c:a2:ac:55:ae:59:a3:22:fc:f7:17:aa:c3:
         e5:79:ea:eb:a1:25:4e:73:b8:d4:c3:ba:14:54:b8:7c:9a:b0:
         de:0d:30:6a:25:e4:31:8e:b0:f7:22:22:60:9d:fd:df:1c:9e:
         54:3f:7e:8d:2b:97:4d:2b:e5:9e:9b:05:60:8d:84:81:4d:b0:
         ea:27:61:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----