Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/102fc47597e54e74c8f5311fe687757ae932ff7d.roa
File:                     102fc47597e54e74c8f5311fe687757ae932ff7d.roa (raw, json)
Hash identifier:          +Oa4HVxU/VbakmGiT9kxx6LBm/nR/CxVDNW071ecjo0=
Subject key identifier:   F8:B8:3D:2D:A9:34:9D:DE:FC:9C:2A:78:B8:69:B3:33:6F:5C:6A:CF
Certificate issuer:       /CN=eb390b28179c24ec9435f9593f78cfa52f75f119
Certificate serial:       11DCB7
Authority key identifier: 04:9A:57:F3:D8:48:B1:46:E4:9B:DF:0B:DE:84:DE:9E:13:91:B8:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb390b28179c24ec9435f9593f78cfa52f75f119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/102fc47597e54e74c8f5311fe687757ae932ff7d.roa
Signing time:             Wed 25 Oct 2023 07:30:00 +0000
ROA not before:           Wed 25 Oct 2023 07:30:00 +0000
ROA not after:            Fri 24 Oct 2025 07:30:00 +0000
asID:                     27747
IP address blocks:        181.44.0.0/14 maxlen: 24
                          168.194.180.0/22 maxlen: 24
                          186.18.0.0/15 maxlen: 24
                          186.22.0.0/15 maxlen: 24
                          190.55.0.0/16 maxlen: 24
                          200.115.192.0/18 maxlen: 24
                          200.125.64.0/18 maxlen: 24
                          2800:810::/28 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170615 (0x11dcb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb390b28179c24ec9435f9593f78cfa52f75f119
        Validity
            Not Before: Oct 25 07:30:00 2023 GMT
            Not After : Oct 24 07:30:00 2025 GMT
        Subject: CN=102fc47597e54e74c8f5311fe687757ae932ff7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:21:ec:f9:a4:82:3b:b4:bb:8e:af:56:84:
                    ba:71:ef:31:47:98:6d:4d:03:c1:eb:88:9a:32:c4:
                    32:d7:5f:bd:c1:c7:24:1d:29:0c:c2:91:93:16:96:
                    a4:f1:fb:94:e8:2e:ae:d9:46:0e:c8:6e:12:6c:a0:
                    c4:a7:73:48:01:02:31:85:6c:ff:b7:de:2b:53:c0:
                    34:2f:08:c5:a0:7f:ad:a3:23:4b:74:fc:c7:76:ac:
                    6b:1b:65:f9:1b:fb:04:ff:fe:30:a5:fc:72:00:4c:
                    45:44:22:bb:6a:15:e0:53:38:b7:b0:91:cd:bc:c3:
                    4d:98:d7:2e:67:95:91:7d:8f:3b:88:e8:2b:6e:73:
                    82:46:c5:26:c3:d0:99:f4:47:bc:7b:db:6e:3e:13:
                    97:15:54:29:2f:5d:65:2d:1f:76:a2:44:85:21:14:
                    43:13:a6:da:9d:bd:b3:15:fa:86:76:9d:45:f1:5c:
                    13:3b:f0:6c:de:d9:e8:4f:6b:46:07:5a:25:8c:8a:
                    44:eb:1a:da:53:31:18:5f:fb:7e:81:70:9f:71:f9:
                    8f:87:ba:16:cd:35:36:9b:2f:84:23:93:92:41:3c:
                    40:ac:75:73:7c:ea:1b:9b:ab:6d:12:71:db:a7:89:
                    c5:44:f3:a4:52:88:8e:ff:f4:de:59:50:7c:c4:22:
                    fc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B8:3D:2D:A9:34:9D:DE:FC:9C:2A:78:B8:69:B3:33:6F:5C:6A:CF
            X509v3 Authority Key Identifier:
                keyid:04:9A:57:F3:D8:48:B1:46:E4:9B:DF:0B:DE:84:DE:9E:13:91:B8:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb390b28179c24ec9435f9593f78cfa52f75f119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/102fc47597e54e74c8f5311fe687757ae932ff7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/eb390b28179c24ec9435f9593f78cfa52f75f119.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.180.0/22
                  181.44.0.0/14
                  186.18.0.0/15
                  186.22.0.0/15
                  190.55.0.0/16
                  200.115.192.0/18
                  200.125.64.0/18
                IPv6:
                  2800:810::/28

    Signature Algorithm: sha256WithRSAEncryption
         94:8e:54:73:84:80:5d:1d:3b:53:ab:db:35:3a:3c:ae:58:02:
         59:5a:9d:ff:e2:a8:fe:03:d3:58:2b:22:ec:38:02:f7:e2:33:
         ac:b4:e1:ef:a7:79:83:da:a2:1b:ac:69:86:06:44:dd:e3:9d:
         27:4b:96:00:6b:ff:a9:67:88:3e:7b:bb:0b:25:0b:a7:fa:49:
         27:26:8e:2c:7b:27:b7:0d:c2:a4:b2:e6:c7:02:67:85:21:83:
         c5:b9:06:03:c3:72:b3:d6:13:28:96:5f:9d:c9:e0:61:09:90:
         52:2a:01:9e:46:0c:42:30:7b:b3:10:a8:14:4b:c3:13:79:8a:
         e5:c1:e2:fd:76:d1:e4:8a:28:7d:20:ee:11:7b:cb:9c:13:d7:
         3d:5a:9d:1e:02:f2:dd:4c:f8:27:85:13:94:01:76:db:bb:61:
         13:85:b4:63:83:ec:a9:d9:ef:64:93:c7:57:da:9f:e2:7b:c5:
         a0:4c:e3:c3:62:c7:75:8b:54:3a:6a:e1:ee:f1:60:98:d8:1e:
         87:ac:62:7f:5d:71:30:ff:83:fe:7b:7c:dc:01:b1:f8:99:34:
         b7:7f:59:e7:62:08:7c:ad:20:c9:53:2e:d4:81:82:b9:30:6b:
         75:16:8e:4c:65:a9:f1:34:79:18:b1:04:68:3e:a3:7e:5e:ec:
         ef:f5:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----