Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/c8125c817704bd9aa57ed143f4c92dfee5935230.roa
File:                     c8125c817704bd9aa57ed143f4c92dfee5935230.roa (raw, json)
Hash identifier:          We4UZVfjjKBIWxy/a93PxM9FV9fTAol0x5L3+yz/pfw=
Subject key identifier:   0E:EB:79:BC:16:17:24:34:7A:8E:71:F9:D5:FF:22:EA:17:CA:CC:4A
Certificate issuer:       /CN=1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3
Certificate serial:       16373E
Authority key identifier: 58:B5:0D:EB:1A:6D:EC:02:75:B0:A6:6B:AD:AE:10:B2:70:98:2A:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/c8125c817704bd9aa57ed143f4c92dfee5935230.roa
Signing time:             Thu 21 Dec 2023 11:29:50 +0000
ROA not before:           Thu 21 Dec 2023 11:29:50 +0000
ROA not after:            Sun 21 Dec 2025 11:29:50 +0000
asID:                     263700
IP address blocks:        132.255.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1455934 (0x16373e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3
        Validity
            Not Before: Dec 21 11:29:50 2023 GMT
            Not After : Dec 21 11:29:50 2025 GMT
        Subject: CN=c8125c817704bd9aa57ed143f4c92dfee5935230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:72:9d:50:83:76:a8:c9:76:74:46:b0:df:44:
                    8c:b3:83:1a:df:19:5d:49:56:95:dc:e4:74:da:5f:
                    de:e3:79:ab:fb:fc:64:07:34:f2:3d:96:91:53:d6:
                    f3:ce:07:35:47:9f:b9:2e:91:39:34:76:f6:3b:df:
                    8a:19:93:42:9a:7c:07:53:da:aa:36:e8:18:dd:3e:
                    70:aa:4d:33:67:9a:6e:13:8c:6a:bc:65:12:7f:3a:
                    ac:c7:f8:c5:88:d0:fd:11:21:6a:2e:43:1c:ab:06:
                    ad:81:ac:af:78:30:55:2c:bb:29:6e:c2:ee:51:20:
                    cf:bc:cf:3a:26:f9:5f:6a:ac:ee:18:b0:cf:46:01:
                    12:17:e7:88:69:c2:54:dd:0d:42:bc:b0:d9:14:9a:
                    e3:0d:01:29:e7:80:9e:2a:19:47:55:04:82:2b:b9:
                    d8:da:b9:66:6f:52:bc:39:e4:b8:c4:0d:a6:dc:bf:
                    5c:52:ae:59:f5:49:66:81:a1:20:03:16:05:93:ba:
                    40:4a:d9:d5:f7:4f:f6:38:25:5e:6d:39:45:5d:dc:
                    ff:d9:c7:08:17:f2:45:78:77:5e:4d:68:da:5a:a4:
                    56:ff:62:42:10:b9:e0:67:3c:4b:21:71:63:ce:de:
                    24:ce:bf:67:94:47:dd:62:c7:63:5e:69:35:55:51:
                    d1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EB:79:BC:16:17:24:34:7A:8E:71:F9:D5:FF:22:EA:17:CA:CC:4A
            X509v3 Authority Key Identifier:
                keyid:58:B5:0D:EB:1A:6D:EC:02:75:B0:A6:6B:AD:AE:10:B2:70:98:2A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/c8125c817704bd9aa57ed143f4c92dfee5935230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/1d2fa4f2addeecf046730f3bb57f3dfb7945a4d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:31:23:ee:9f:ca:96:6f:69:30:cd:95:71:8a:5a:96:85:
         24:a0:75:dc:56:11:aa:33:e8:b5:45:94:10:ba:3b:85:44:03:
         57:81:90:ae:19:0a:e7:88:4e:bc:7c:4c:82:13:ea:ca:d4:cd:
         d5:bd:8b:b6:62:fc:44:f3:3e:0f:be:df:f3:d9:a9:1e:de:00:
         3b:74:95:42:87:61:1d:0f:35:6e:8a:fe:b9:ca:b6:b1:78:85:
         f7:d9:b5:88:53:45:79:fa:01:a2:f1:b7:aa:8a:db:67:f9:06:
         86:81:7e:d3:a2:c9:89:01:5e:2e:fe:a9:0a:9b:44:8f:0c:dc:
         36:59:ff:5a:d3:5f:a2:96:39:08:52:ea:57:57:b0:5c:a3:05:
         ba:fe:78:f2:b7:c3:e2:da:8b:da:65:f9:ac:1c:0a:b5:b8:50:
         c1:1f:d6:fe:ae:aa:33:50:4f:70:5e:2e:2b:42:5d:ac:8d:eb:
         83:4f:c9:34:76:dc:74:6c:0b:e1:95:4d:5e:8e:17:be:d2:1c:
         fe:e0:0e:53:83:b8:97:ea:56:26:48:b8:2b:99:5d:81:b0:83:
         64:4a:e2:aa:a0:0e:f9:10:5a:75:b8:55:b3:29:6f:b1:17:eb:
         c1:81:18:1f:d1:32:37:36:56:ff:07:2a:c6:8c:ec:13:07:ba:
         ca:e1:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----