Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/48fb834f1e0794375ab1ef6d947be1f69549cc00.roa
File:                     48fb834f1e0794375ab1ef6d947be1f69549cc00.roa (raw, json)
Hash identifier:          jsYazWnIEjewmuWfysS9nzgJq/zRsvuMTGviV3EIDWo=
Subject key identifier:   BD:5E:2C:4E:10:63:BC:AE:45:DC:A8:3B:5E:56:28:FA:65:DF:E9:F7
Certificate issuer:       /CN=3a42a7b9520279dc23cca505fffe138c6e922475
Certificate serial:       21C226
Authority key identifier: 14:A5:D5:FB:37:98:45:41:6C:D0:23:61:A8:3A:8C:C7:DD:E5:D6:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a42a7b9520279dc23cca505fffe138c6e922475.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/48fb834f1e0794375ab1ef6d947be1f69549cc00.roa
Signing time:             Thu 29 Jun 2023 20:27:06 +0000
ROA not before:           Wed 28 Jun 2023 20:27:06 +0000
ROA not after:            Sun 29 Jun 2025 20:27:06 +0000
asID:                     52468
IP address blocks:        190.107.208.0/22 maxlen: 24
                          170.80.16.0/22 maxlen: 24
                          2803:1e00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2212390 (0x21c226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a42a7b9520279dc23cca505fffe138c6e922475
        Validity
            Not Before: Jun 28 20:27:06 2023 GMT
            Not After : Jun 29 20:27:06 2025 GMT
        Subject: CN=48fb834f1e0794375ab1ef6d947be1f69549cc00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a9:41:e8:aa:85:8f:06:b6:fa:a7:ac:7f:a2:
                    b1:3f:31:d0:20:07:9e:b0:96:30:be:d3:88:f3:aa:
                    62:cd:d6:4b:a6:7a:e0:e2:33:8d:65:b6:04:05:70:
                    fc:9c:83:a6:b8:fc:3c:57:6a:3c:f0:6f:66:47:46:
                    e5:81:d0:d2:2d:56:14:d2:c4:94:21:01:2d:80:a3:
                    08:a8:8f:2f:d9:19:28:43:6f:a1:9a:4e:d1:01:83:
                    dd:f9:7f:51:3a:df:a3:44:3f:23:82:e4:07:38:ea:
                    11:b6:04:09:ec:1a:90:28:b1:54:86:fc:28:db:c1:
                    aa:21:61:92:12:e3:9c:39:47:74:0b:8f:a6:76:a8:
                    88:c7:58:32:9f:0a:59:52:02:f2:d0:7c:2f:0f:90:
                    84:59:90:ba:f3:f8:e1:44:6d:61:fe:cd:62:b1:b1:
                    2c:05:50:bf:6e:5f:a6:ed:5d:63:97:2c:fe:f6:d9:
                    ec:dc:e8:43:0d:20:ab:9d:96:fb:9d:26:9b:da:50:
                    05:11:4d:67:eb:8d:49:2b:77:b8:80:6f:c5:4f:8e:
                    bb:64:23:83:01:cb:2e:58:b1:30:7f:8a:9c:10:fa:
                    59:20:0e:61:c1:bf:eb:3a:9f:47:e5:0b:25:28:59:
                    c5:10:f3:c5:df:fc:32:60:9d:2a:4c:1c:31:66:14:
                    a4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5E:2C:4E:10:63:BC:AE:45:DC:A8:3B:5E:56:28:FA:65:DF:E9:F7
            X509v3 Authority Key Identifier:
                keyid:14:A5:D5:FB:37:98:45:41:6C:D0:23:61:A8:3A:8C:C7:DD:E5:D6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a42a7b9520279dc23cca505fffe138c6e922475.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/48fb834f1e0794375ab1ef6d947be1f69549cc00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/3a42a7b9520279dc23cca505fffe138c6e922475.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.16.0/22
                  190.107.208.0/22
                IPv6:
                  2803:1e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:36:44:8e:65:9e:74:da:0d:52:4c:35:28:6f:72:95:a8:4d:
         70:d5:10:32:e2:f8:e5:8b:a8:70:0f:50:2c:a2:90:06:35:d7:
         a8:c8:fb:f8:1e:92:23:4f:82:8a:b9:c6:17:75:b1:52:b5:8c:
         96:74:4a:e6:c2:e8:64:ba:0f:7b:22:73:88:25:e1:fe:81:cb:
         10:c1:bf:e4:6e:c3:26:c0:05:b1:50:21:6f:a2:f6:80:09:9a:
         03:69:dd:64:05:fb:a2:43:de:ec:dc:d2:8f:89:3d:11:0a:45:
         2a:2e:e5:ae:b1:94:4f:56:8f:97:1f:fd:f5:2d:f2:c7:c9:cb:
         5b:66:b3:f5:2d:21:51:c5:c4:64:36:37:9a:30:25:92:86:5b:
         16:1e:e1:13:fa:77:7b:d7:42:cb:14:a4:4c:4d:f0:0a:f4:21:
         b5:fd:1b:86:94:61:b0:93:31:8d:b9:bd:13:e0:67:7a:c4:e4:
         97:90:72:04:ae:4a:4f:8d:df:65:30:50:82:9b:07:cc:00:0b:
         2f:f0:79:ef:27:79:4f:c0:0b:4a:c7:87:b1:2d:ce:52:5e:8a:
         52:1d:fe:8e:63:36:5e:35:fb:0e:72:03:bd:58:f1:fe:86:79:
         be:94:64:46:ad:22:13:9a:ff:7c:08:75:3e:cc:77:8a:7d:47:
         5b:4b:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----