Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/bbcccdb2e11f7f70def5ebb3716c6f90fa63ad9a.roa
File:                     bbcccdb2e11f7f70def5ebb3716c6f90fa63ad9a.roa (raw, json)
Hash identifier:          sTPcBhz4ueoIgga33KjDHF3NcwjbKIAGU8C97bxO30I=
Subject key identifier:   1B:66:77:95:69:E8:B6:A1:F0:FB:72:EE:D1:EE:25:FA:8F:33:2D:39
Certificate issuer:       /CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
Certificate serial:       1B24E2
Authority key identifier: 53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/bbcccdb2e11f7f70def5ebb3716c6f90fa63ad9a.roa
Signing time:             Tue 11 Jul 2023 19:00:51 +0000
ROA not before:           Mon 10 Jul 2023 19:00:51 +0000
ROA not after:            Fri 11 Jul 2025 19:00:51 +0000
asID:                     271888
IP address blocks:        177.74.200.0/23 maxlen: 24
                          2803:9e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778914 (0x1b24e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
        Validity
            Not Before: Jul 10 19:00:51 2023 GMT
            Not After : Jul 11 19:00:51 2025 GMT
        Subject: CN=bbcccdb2e11f7f70def5ebb3716c6f90fa63ad9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:de:04:38:3d:a2:e1:5a:06:e1:19:eb:c0:
                    28:31:0e:89:53:e0:7f:25:d4:3d:55:ca:fa:fb:32:
                    01:33:76:65:63:35:45:e7:64:ab:4c:51:4d:f7:46:
                    c9:32:b8:ce:96:ac:9c:3d:56:9f:ef:ab:c0:20:a7:
                    f6:79:e7:3b:8f:25:7f:b3:37:3d:30:8c:1b:ed:a4:
                    fc:5c:1e:03:ee:a9:80:96:44:db:f1:11:f2:60:85:
                    f7:36:aa:f7:37:8f:92:0f:c5:c6:11:8e:69:48:6b:
                    0a:01:86:77:3a:ac:af:6a:8e:e3:ac:53:4d:b0:86:
                    d1:a4:47:92:14:1e:ea:00:ba:3d:0b:ad:06:fb:8c:
                    07:c9:69:f1:3e:9a:7a:de:28:a9:0b:2d:2d:bf:9b:
                    26:58:47:1d:cf:32:99:2d:39:d9:3f:ef:2f:8c:af:
                    6a:a6:2d:ea:13:a9:3b:c4:52:64:fa:eb:c8:97:e9:
                    c8:f1:b6:04:f6:94:df:29:79:0b:b1:79:ad:f7:64:
                    b9:22:d1:9a:ab:54:62:67:0b:c4:92:25:3c:2e:44:
                    61:24:f7:9b:05:a9:09:08:57:d1:03:99:cf:70:3e:
                    20:9b:fe:5e:ed:86:4d:76:26:de:d4:10:6a:38:29:
                    1d:41:f7:a6:cc:15:ae:06:73:2e:0b:3b:bd:b6:1f:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:66:77:95:69:E8:B6:A1:F0:FB:72:EE:D1:EE:25:FA:8F:33:2D:39
            X509v3 Authority Key Identifier:
                keyid:53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/bbcccdb2e11f7f70def5ebb3716c6f90fa63ad9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.200.0/23
                IPv6:
                  2803:9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:8f:39:9f:72:48:94:1e:09:51:a2:78:59:c9:cc:c4:b2:64:
         c4:99:2d:a6:a3:9a:15:82:40:02:8b:37:d6:14:90:e8:ff:83:
         ff:54:e5:f1:f1:0e:86:a1:ae:79:a2:a6:17:3f:99:4e:f5:9f:
         a0:fa:17:1f:ec:61:83:6d:4e:22:92:11:56:63:4e:81:d8:95:
         1c:0a:e6:42:fe:a3:df:8f:2d:98:a6:46:fa:36:9f:a0:09:4a:
         d2:1a:c3:c7:2e:a7:ce:4d:0b:d1:88:a4:96:4f:16:e6:42:dc:
         e2:81:3f:18:37:16:d6:49:81:1f:a3:39:a3:23:97:20:9d:07:
         d8:d7:ce:2a:28:96:05:0c:e1:24:b9:3f:32:25:21:fe:1f:57:
         da:59:28:e9:47:0f:1d:ea:e5:a3:90:a2:2d:80:08:92:0f:86:
         00:92:38:69:84:db:3b:03:9c:36:08:c3:74:ba:55:00:62:fc:
         59:5d:52:90:5c:d0:32:16:dd:a4:3d:4e:33:85:d0:02:ea:83:
         06:3a:61:a6:e8:0d:fe:d2:ae:77:0f:67:b4:1d:50:d1:4a:56:
         d2:76:0b:39:31:45:1e:7c:c8:c7:62:46:30:1d:2a:db:2b:a5:
         34:48:cc:ee:29:6b:8c:81:36:25:bb:bb:4e:2d:72:9a:fa:3e:
         a7:64:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----