Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b84a00e-e83f-4581-912e-af911f88c3d7/cb536547b756096a5f02bc34dc70851f08065989.roa
File:                     cb536547b756096a5f02bc34dc70851f08065989.roa (raw, json)
Hash identifier:          7fKlhYGIJ8FQv3ojA5Gc8m1TqluQqYwZUuC4wO5SaJw=
Subject key identifier:   23:76:06:63:3D:94:15:67:7D:DB:3D:70:D8:16:48:71:A3:38:2D:71
Certificate issuer:       /CN=b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69
Certificate serial:       21C2A3
Authority key identifier: 34:57:68:27:66:E2:5C:F7:DB:5E:F9:D4:E9:C7:2D:0E:0D:2C:FA:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b84a00e-e83f-4581-912e-af911f88c3d7/cb536547b756096a5f02bc34dc70851f08065989.roa
Signing time:             Thu 31 Aug 2023 15:24:37 +0000
ROA not before:           Wed 30 Aug 2023 15:24:36 +0000
ROA not after:            Sun 31 Aug 2025 15:24:36 +0000
asID:                     52455
IP address blocks:        131.72.24.0/22 maxlen: 24
                          190.113.92.0/22 maxlen: 24
                          170.233.216.0/22 maxlen: 24
                          2803:b300::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2212515 (0x21c2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69
        Validity
            Not Before: Aug 30 15:24:36 2023 GMT
            Not After : Aug 31 15:24:36 2025 GMT
        Subject: CN=cb536547b756096a5f02bc34dc70851f08065989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:b2:b6:02:ec:86:ad:28:72:2f:97:bd:8e:
                    d3:4c:a3:76:5e:94:57:19:fa:c8:97:47:a8:f1:c2:
                    f3:7a:07:56:42:b4:19:40:9d:3e:d1:fa:f1:5b:dc:
                    ee:0d:4c:73:9b:a9:03:43:bb:22:b2:8f:a2:7f:35:
                    fe:0d:d7:c9:6d:f2:98:13:72:25:32:2e:30:a1:ca:
                    e5:69:75:aa:00:41:92:53:2b:18:72:31:82:a3:fa:
                    b0:9c:33:91:c6:27:3f:8b:dd:6d:06:f7:19:08:f3:
                    5f:45:61:1d:86:26:9f:d4:56:a0:6d:01:69:b7:54:
                    c3:1e:4b:50:07:b4:aa:9d:1c:ad:54:31:4d:7e:f7:
                    a4:19:b3:9a:54:cc:89:58:eb:45:67:44:8e:c6:6d:
                    41:14:78:b8:b1:1b:f5:99:ec:5b:02:06:2f:65:21:
                    a5:35:55:9c:2b:1f:3f:e9:05:f7:99:95:ae:10:8e:
                    54:12:62:51:bd:aa:ec:e9:f9:97:26:13:4b:3c:fa:
                    79:5f:f5:93:50:4e:9f:77:89:95:d4:7c:1c:e6:08:
                    f0:a4:ed:1a:67:52:d2:94:e4:f1:9c:e3:07:a8:5a:
                    55:77:d8:d5:98:82:5d:4b:d4:b0:d2:93:1e:13:50:
                    e6:88:d9:db:bd:c8:f3:a9:07:00:ac:2c:14:82:66:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:76:06:63:3D:94:15:67:7D:DB:3D:70:D8:16:48:71:A3:38:2D:71
            X509v3 Authority Key Identifier:
                keyid:34:57:68:27:66:E2:5C:F7:DB:5E:F9:D4:E9:C7:2D:0E:0D:2C:FA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b84a00e-e83f-4581-912e-af911f88c3d7/cb536547b756096a5f02bc34dc70851f08065989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b84a00e-e83f-4581-912e-af911f88c3d7/b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.24.0/22
                  170.233.216.0/22
                  190.113.92.0/22
                IPv6:
                  2803:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:0a:ca:a0:f0:40:b5:57:02:3c:33:7a:f1:7a:7f:cd:45:96:
         7f:d7:12:83:b3:dd:d3:83:21:59:43:9f:dd:aa:69:b0:b5:b9:
         c9:27:ba:43:61:1b:a2:dc:33:af:d4:c5:2d:8a:e9:69:22:9e:
         85:d6:ee:b9:19:40:55:df:db:87:50:3c:fb:cd:e3:f0:cf:13:
         32:9c:47:f0:07:bc:cc:5d:a8:0e:b8:4b:ed:e5:4e:cc:fa:55:
         83:2c:00:6b:f8:6f:8d:c7:58:b2:4a:aa:34:9e:32:6e:f6:78:
         4f:84:61:15:cb:b1:18:9b:e7:0b:b5:ad:84:a5:44:af:b3:73:
         4c:9b:bf:89:53:42:f5:0e:7e:5d:42:03:1a:ba:36:57:a7:31:
         2b:2c:27:0f:e4:ae:5a:e7:6b:31:3e:30:d0:1a:14:b8:cf:ab:
         21:28:ef:23:f7:c0:fe:be:1b:ba:98:9b:6a:b3:ff:2d:eb:8b:
         24:66:84:8f:81:9e:08:27:09:d4:36:f5:09:cc:18:84:77:33:
         9d:72:44:70:f3:b0:31:92:fe:e3:f8:82:2a:12:9d:cb:83:e9:
         d0:b7:0a:8b:03:49:7c:a2:90:d8:a0:15:1b:6a:6f:ab:d1:67:
         0f:07:d9:fb:ee:58:3f:4a:d4:de:de:40:b2:d0:39:ec:47:0f:
         5e:c0:85:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----