Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d8b528a-ef31-4eb7-af74-c2e0680bc699/8a6493ea7dcd6dce1b128b492ae742330ba3a7dc.roa
File:                     8a6493ea7dcd6dce1b128b492ae742330ba3a7dc.roa (raw, json)
Hash identifier:          Zhx4upDInWw8yHKjNsZDCnRjFh07n2yd57w/F5+vSHM=
Subject key identifier:   8B:0A:70:70:2E:D4:3C:BE:D4:07:4A:B5:15:29:E0:52:0B:C3:A6:18
Certificate issuer:       /CN=0048caf7ce87bff466e17f38ea984e0608802348
Certificate serial:       11D3DD
Authority key identifier: 97:26:67:2C:2D:05:0E:B6:44:61:1B:81:E9:A7:E9:98:1C:40:3F:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0048caf7ce87bff466e17f38ea984e0608802348.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d8b528a-ef31-4eb7-af74-c2e0680bc699/8a6493ea7dcd6dce1b128b492ae742330ba3a7dc.roa
Signing time:             Sun 14 Jan 2024 07:30:00 +0000
ROA not before:           Sun 14 Jan 2024 07:30:00 +0000
ROA not after:            Tue 13 Jan 2026 07:30:00 +0000
asID:                     265534
IP address blocks:        181.233.96.0/22 maxlen: 24
                          2806:3e2::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168349 (0x11d3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0048caf7ce87bff466e17f38ea984e0608802348
        Validity
            Not Before: Jan 14 07:30:00 2024 GMT
            Not After : Jan 13 07:30:00 2026 GMT
        Subject: CN=8a6493ea7dcd6dce1b128b492ae742330ba3a7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b8:56:ce:de:5a:5f:2a:af:a9:e2:4b:67:2e:
                    ab:5e:07:64:40:81:69:6c:8e:c4:b6:d1:c5:ae:df:
                    76:4e:ad:e2:40:51:92:a7:99:9f:1b:86:ae:a8:b9:
                    6f:9b:e4:4d:27:f0:04:ca:98:8a:ff:61:cd:a2:12:
                    06:79:36:39:91:ea:8c:25:48:50:c2:ec:ce:1f:b7:
                    5c:4a:97:88:52:c5:ab:ce:b8:8f:dc:94:19:e8:04:
                    d7:96:86:94:f5:80:1e:9d:cc:7c:da:24:e6:e5:ee:
                    8b:6c:02:a1:ba:33:4a:2e:2b:f7:1c:40:52:9e:c2:
                    1b:15:3b:0b:0a:31:c4:8f:d2:84:b1:25:d3:4f:67:
                    8a:82:76:0c:7f:7d:3d:a9:c2:fd:3d:49:82:c7:95:
                    20:73:45:e4:c4:d3:2c:20:97:70:37:bb:35:59:2f:
                    55:59:2d:fa:9c:df:86:28:e1:c4:77:52:be:90:0f:
                    e2:0b:e9:44:b2:d6:47:31:14:f5:c7:aa:2c:c8:a4:
                    7b:9e:85:af:34:4b:07:dc:87:3b:8a:8d:d4:fd:4d:
                    89:26:0d:1e:49:19:bd:9b:8e:47:1c:18:ab:0a:c6:
                    16:6a:4e:c4:56:f0:bc:f7:ea:9b:1a:2b:b8:54:f7:
                    0d:3e:73:5d:3b:17:d6:79:48:fe:a1:ec:9a:46:a7:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0A:70:70:2E:D4:3C:BE:D4:07:4A:B5:15:29:E0:52:0B:C3:A6:18
            X509v3 Authority Key Identifier:
                keyid:97:26:67:2C:2D:05:0E:B6:44:61:1B:81:E9:A7:E9:98:1C:40:3F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0048caf7ce87bff466e17f38ea984e0608802348.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d8b528a-ef31-4eb7-af74-c2e0680bc699/8a6493ea7dcd6dce1b128b492ae742330ba3a7dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d8b528a-ef31-4eb7-af74-c2e0680bc699/0048caf7ce87bff466e17f38ea984e0608802348.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.96.0/22
                IPv6:
                  2806:3e2::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:ec:82:32:d4:a9:94:7b:15:ac:a5:24:3b:30:8a:a6:22:
         19:8b:f1:c0:21:55:b8:41:5d:a5:de:65:7d:69:09:07:6e:e9:
         8b:50:72:72:e2:e0:c6:5a:d5:d7:2b:a6:d1:51:ec:50:9a:d2:
         08:0e:47:56:1d:20:6b:6b:3d:d5:17:39:31:c8:9b:d2:a6:5d:
         8e:11:e1:eb:31:c4:fb:11:a0:b2:d2:c6:8e:60:60:38:bf:e9:
         8e:58:7f:5b:32:ad:ed:be:5d:36:de:ee:9f:be:4c:33:1e:f9:
         2c:09:31:e9:c5:83:81:94:cc:b8:bc:12:a7:5f:4f:d6:26:e6:
         2a:24:2a:46:98:31:49:d6:6c:6c:1d:76:92:73:1c:d1:50:a3:
         6d:13:6e:5f:e7:f9:42:75:10:36:d1:25:f0:30:7d:2f:c4:5c:
         c8:5d:39:da:fa:de:03:16:3c:aa:db:33:90:49:a3:e6:e9:6b:
         e4:49:9f:ce:83:12:81:14:d0:88:0b:ef:a7:d1:68:44:7b:60:
         2b:c4:e7:6a:ed:71:ae:83:5f:0d:c8:01:21:70:cc:fa:a3:b3:
         76:e3:16:8e:b3:f8:81:31:c2:5a:17:34:bd:05:a6:2e:ab:64:
         d0:51:87:37:14:16:38:71:ce:02:d3:be:45:03:68:ef:4a:b4:
         64:77:10:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----