Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/def1f227de8525365f62c378a53c5d466946fbf6.roa
File:                     def1f227de8525365f62c378a53c5d466946fbf6.roa (raw, json)
Hash identifier:          FaRV8AjJqZFqxKClmRX0pfOqlGmfSwlY+l5DwCtUbRE=
Subject key identifier:   72:FD:15:24:C1:76:3C:DD:57:12:BF:91:BD:53:00:B8:D6:51:3E:FB
Certificate issuer:       /CN=f172ca4093ff4ce47d20beb1ff07624aff070b40
Certificate serial:       215126
Authority key identifier: F5:4B:B6:F3:7D:92:91:07:1D:76:5A:6F:B9:AF:84:6B:EE:61:58:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f172ca4093ff4ce47d20beb1ff07624aff070b40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/def1f227de8525365f62c378a53c5d466946fbf6.roa
Signing time:             Wed 24 May 2023 12:09:26 +0000
ROA not before:           Tue 23 May 2023 12:09:26 +0000
ROA not after:            Sat 24 May 2025 12:09:26 +0000
asID:                     263716
IP address blocks:        132.255.224.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183462 (0x215126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f172ca4093ff4ce47d20beb1ff07624aff070b40
        Validity
            Not Before: May 23 12:09:26 2023 GMT
            Not After : May 24 12:09:26 2025 GMT
        Subject: CN=def1f227de8525365f62c378a53c5d466946fbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:90:25:03:54:f9:d8:34:62:a9:0f:6c:09:
                    aa:f9:57:76:f2:ec:bf:01:8f:46:2f:bb:7e:e9:db:
                    bf:d0:04:a1:e1:d5:0e:b7:7b:97:f7:a5:bd:29:d9:
                    9f:7a:bb:30:c0:7e:cb:9a:dd:a0:b1:95:49:25:b7:
                    45:f8:1b:94:46:72:35:df:ce:d5:d4:a4:06:fc:d7:
                    81:6e:66:a1:ee:4f:89:df:6b:70:05:10:48:a0:5f:
                    48:a3:a6:f9:f8:49:01:ad:12:58:61:ec:86:6d:7f:
                    43:76:0c:97:59:33:91:91:c7:60:ae:15:10:e5:ab:
                    d5:51:fc:5e:75:21:96:05:15:76:34:a9:7d:94:51:
                    d4:2e:64:b1:c9:40:57:a1:b4:72:91:57:44:9e:0c:
                    d2:cc:80:98:e1:4c:b3:6e:4a:2b:11:b2:14:6a:0b:
                    c8:34:95:b1:17:f4:bf:d0:16:3f:38:18:4d:1b:ac:
                    22:41:d7:aa:f7:58:c6:1a:6f:59:5f:12:bd:ca:cb:
                    1c:58:c2:b9:7c:ce:d4:db:4e:2e:bb:2b:fb:f3:42:
                    30:91:ca:cd:ec:bd:d7:fe:5b:92:36:5e:4e:4e:5a:
                    dd:43:47:3b:a9:23:ef:f6:64:16:23:f0:59:1a:00:
                    ed:bf:e8:5c:00:3c:51:05:b5:28:9d:67:79:3f:07:
                    7b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FD:15:24:C1:76:3C:DD:57:12:BF:91:BD:53:00:B8:D6:51:3E:FB
            X509v3 Authority Key Identifier:
                keyid:F5:4B:B6:F3:7D:92:91:07:1D:76:5A:6F:B9:AF:84:6B:EE:61:58:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f172ca4093ff4ce47d20beb1ff07624aff070b40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/def1f227de8525365f62c378a53c5d466946fbf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/f172ca4093ff4ce47d20beb1ff07624aff070b40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:7e:7e:e1:ed:3c:3f:0a:fb:f2:50:c6:df:b1:02:a5:8c:72:
         be:c2:2d:d5:ce:42:7e:89:b5:e1:55:94:7d:d3:97:22:2c:95:
         37:f7:ed:ee:20:bc:98:4f:0a:3c:de:a7:07:4d:f9:0f:57:09:
         35:5f:dc:71:b2:fa:61:77:2b:ed:91:ca:e5:f4:6f:ae:2a:7f:
         1b:a1:e1:40:d3:42:72:a6:f6:6b:10:83:5d:e9:2c:e6:36:b7:
         8c:c9:4e:44:c8:38:75:a7:8a:92:3c:74:b4:e1:b3:16:dd:15:
         ca:28:a2:88:59:28:1a:07:3d:34:f3:09:48:04:cf:6a:fa:95:
         cc:72:66:24:8e:22:f2:63:99:78:6f:c6:fa:fc:c2:2b:90:a1:
         26:16:6c:d9:b6:a7:9e:f8:f8:34:67:9e:9c:5c:dc:59:b0:bd:
         8d:f3:48:42:b6:03:69:f9:28:3f:39:f5:3e:e8:e3:30:aa:2e:
         ff:9b:a2:88:74:41:d9:f7:2e:4b:47:18:9b:de:95:26:2b:fc:
         45:ef:98:b3:1a:2d:82:5e:f2:da:3f:67:76:08:37:f0:1b:44:
         b0:38:bd:03:ce:d6:9c:3a:2e:e4:b5:63:a1:91:6a:5a:2d:62:
         2a:65:88:e9:89:b6:d7:d7:3e:e7:60:06:40:14:db:07:11:f0:
         2f:c3:91:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----