Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/bf9d0c5df32d19c4bdc590b3d77c2daf239ec702.roa
File:                     bf9d0c5df32d19c4bdc590b3d77c2daf239ec702.roa (raw, json)
Hash identifier:          5n55O+dKOcdDuQyVhNaLHm/R5DzR6e/nnycYsYyNhW8=
Subject key identifier:   F4:6A:4C:CD:DF:1F:EE:A1:9A:84:2E:56:88:E3:90:6E:E8:3B:41:84
Certificate issuer:       /CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
Certificate serial:       13FBDE
Authority key identifier: 53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/bf9d0c5df32d19c4bdc590b3d77c2daf239ec702.roa
Signing time:             Fri 23 Sep 2022 07:51:47 +0000
ROA not before:           Fri 23 Sep 2022 07:49:30 +0000
ROA not after:            Mon 23 Sep 2024 07:49:30 +0000
asID:                     271888
IP address blocks:        177.74.200.0/23 maxlen: 24
                          2803:9e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309662 (0x13fbde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
        Validity
            Not Before: Sep 23 07:49:30 2022 GMT
            Not After : Sep 23 07:49:30 2024 GMT
        Subject: CN=bf9d0c5df32d19c4bdc590b3d77c2daf239ec702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:f7:65:94:7b:28:92:32:d7:d4:36:84:00:
                    ae:18:de:10:0a:7c:f1:f9:b4:77:3d:3b:61:f3:ff:
                    ad:9b:1a:3c:b7:2d:1a:6e:cb:1f:85:39:ef:0b:8b:
                    6f:4e:f1:e2:89:e2:d2:b2:8e:8b:e2:2d:da:f3:8c:
                    38:13:58:38:d8:c9:f1:9b:e6:ed:ea:48:42:2d:ab:
                    04:aa:d2:95:e4:f9:73:40:f7:6d:a2:7b:81:c5:32:
                    94:85:30:bd:e1:fd:02:0b:9c:76:c5:36:dc:02:62:
                    5b:01:32:44:67:d3:3e:fe:1c:23:5d:54:72:56:1a:
                    c6:72:ad:43:03:88:4b:76:1d:c9:7a:dd:ac:8e:76:
                    25:1e:26:23:09:bc:1d:4d:e0:fd:00:7d:7f:47:fa:
                    2c:2d:57:7d:3e:b9:00:a3:64:91:67:29:1b:cb:62:
                    c7:a2:69:f1:3e:b5:0f:2a:23:44:75:8c:4d:a4:75:
                    07:eb:98:c2:60:20:79:be:a9:72:07:ee:d2:5e:8e:
                    c9:90:be:65:77:33:b5:b3:7b:72:a8:44:13:90:74:
                    a2:30:13:8b:d4:4f:d7:a8:e3:51:6e:65:c5:ea:67:
                    0d:27:cd:83:c7:c6:36:67:32:f9:f5:16:b1:0b:9c:
                    87:d9:b0:e3:c5:ba:5e:5a:74:09:36:f1:5e:94:56:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6A:4C:CD:DF:1F:EE:A1:9A:84:2E:56:88:E3:90:6E:E8:3B:41:84
            X509v3 Authority Key Identifier:
                keyid:53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/bf9d0c5df32d19c4bdc590b3d77c2daf239ec702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.200.0/23
                IPv6:
                  2803:9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:5c:ac:9d:fb:3c:6d:0c:3b:99:95:c2:f5:9b:bc:11:20:
         0d:20:2c:eb:ed:a4:2a:cc:5c:6f:54:8e:d4:f5:ea:bb:a1:00:
         24:72:28:f8:02:5a:bb:75:53:73:3f:4a:a4:17:81:94:65:25:
         3d:31:87:79:7c:ad:c7:bd:e2:83:b6:f8:3b:96:82:98:84:09:
         21:da:32:ea:64:5a:a9:7d:f6:67:60:a8:99:15:ea:06:cc:26:
         a6:e8:dd:6a:3c:3c:4b:84:2e:28:c8:f9:24:7a:a4:e7:55:0a:
         1e:c9:8e:88:58:74:91:7f:10:bb:47:06:7d:8a:79:b2:cb:97:
         00:55:aa:3c:79:fa:8e:bd:1c:37:aa:69:f5:48:b0:fc:43:13:
         44:ef:00:cc:72:c5:80:81:98:1c:7b:90:47:48:14:1d:97:72:
         71:7c:d8:96:3d:9c:0f:7b:3f:87:31:cd:43:28:ab:fc:f1:22:
         bd:69:bd:9c:8c:33:46:f6:0e:f3:f0:e0:27:45:bb:ac:b1:3c:
         49:16:94:b0:22:58:64:8d:f2:89:49:34:56:02:e9:d8:49:bd:
         ee:53:f0:cd:4b:42:e0:0c:9a:43:d2:52:4a:83:2f:63:11:48:
         e5:91:97:94:15:17:9e:be:a0:ff:e3:c6:d1:dc:01:22:51:bd:
         ee:d1:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----