Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/539b8494-f826-4178-8b76-2ffe97373ef7/c1341f7562224ffdc045c5d6ecc328b0e206c2d0.roa
File:                     c1341f7562224ffdc045c5d6ecc328b0e206c2d0.roa (raw, json)
Hash identifier:          H7hFeWshCfCvV4b9gduQb0QuRW84Y5asNbNK+0cE9LA=
Subject key identifier:   E2:03:DC:9F:D1:64:8B:D2:1B:6B:50:29:28:90:34:AD:1D:1D:E0:6A
Certificate issuer:       /CN=61ea6ac6314c234138b3aad8fa2c76a5b7d47ece
Certificate serial:       253F7A
Authority key identifier: 2D:9E:C7:20:B2:BB:98:79:67:D0:DE:5D:AF:DF:DC:2E:DB:D2:DE:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61ea6ac6314c234138b3aad8fa2c76a5b7d47ece.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/539b8494-f826-4178-8b76-2ffe97373ef7/c1341f7562224ffdc045c5d6ecc328b0e206c2d0.roa
Signing time:             Tue 21 Nov 2023 14:03:25 +0000
ROA not before:           Tue 21 Nov 2023 14:03:25 +0000
ROA not after:            Fri 21 Nov 2025 14:03:25 +0000
asID:                     262221
IP address blocks:        190.106.112.0/21 maxlen: 24
                          2803:6400::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2441082 (0x253f7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ea6ac6314c234138b3aad8fa2c76a5b7d47ece
        Validity
            Not Before: Nov 21 14:03:25 2023 GMT
            Not After : Nov 21 14:03:25 2025 GMT
        Subject: CN=c1341f7562224ffdc045c5d6ecc328b0e206c2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:e7:fe:9b:53:34:92:e0:81:da:c6:2d:dc:
                    e9:dc:8f:2c:81:11:8b:9b:46:49:a6:b7:af:29:ef:
                    89:75:a7:2d:90:df:c1:56:ca:2c:42:a1:f3:90:fe:
                    5b:08:51:da:88:91:86:dd:c0:26:e4:e3:57:a4:de:
                    84:31:75:c8:0a:c8:63:bf:14:ce:b1:1b:c3:67:26:
                    04:2c:85:f5:11:00:75:b9:2c:2d:be:69:a2:42:ec:
                    1c:c2:51:8f:58:9d:6a:06:e2:73:df:73:bd:63:84:
                    eb:2a:c6:5a:2b:7e:8f:06:c8:12:cc:21:f2:8e:8b:
                    50:8e:de:3d:0d:a2:23:48:e3:b6:c2:ba:eb:92:2b:
                    b4:a1:70:8e:a6:51:b4:14:57:54:24:08:0e:2e:bc:
                    0a:d7:39:fc:d3:f0:95:81:c7:79:50:77:56:e1:95:
                    c3:a2:81:80:2d:bd:bc:10:ad:e3:da:60:11:c9:6c:
                    fc:38:5d:88:92:b2:27:9e:33:54:d3:85:4c:84:87:
                    46:fc:17:ed:78:5d:ac:05:4a:e3:56:0d:1b:50:4c:
                    8b:2a:81:6b:4c:83:04:7d:ff:9e:32:39:b1:c3:a6:
                    84:67:8b:22:26:de:14:ce:af:33:55:7e:51:26:dc:
                    28:bd:81:bd:e2:54:c1:24:91:7f:32:f1:20:ac:e3:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:03:DC:9F:D1:64:8B:D2:1B:6B:50:29:28:90:34:AD:1D:1D:E0:6A
            X509v3 Authority Key Identifier:
                keyid:2D:9E:C7:20:B2:BB:98:79:67:D0:DE:5D:AF:DF:DC:2E:DB:D2:DE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61ea6ac6314c234138b3aad8fa2c76a5b7d47ece.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/539b8494-f826-4178-8b76-2ffe97373ef7/c1341f7562224ffdc045c5d6ecc328b0e206c2d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/539b8494-f826-4178-8b76-2ffe97373ef7/61ea6ac6314c234138b3aad8fa2c76a5b7d47ece.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.112.0/21
                IPv6:
                  2803:6400::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:62:2f:50:07:83:4d:49:7d:a9:51:10:9b:76:41:20:64:12:
         d8:6c:b4:82:95:5f:8f:4a:d3:9c:51:ab:07:fa:5b:9e:0f:3d:
         09:c3:d2:4f:4a:d8:52:97:87:03:30:a7:14:9d:1e:a3:d0:81:
         e2:9c:7f:23:7e:35:98:ca:db:ef:1e:d5:1f:70:53:6c:ce:d8:
         b4:6c:f6:1a:2a:11:ab:3e:e1:e7:5c:95:47:20:3c:ff:a4:cf:
         44:26:21:be:13:72:34:79:18:d8:56:d0:86:43:fb:60:9f:b1:
         7f:94:a2:cd:23:f0:b2:d6:59:58:a0:4e:8b:da:24:5f:ce:73:
         5d:d7:d2:20:02:f8:d9:83:a9:81:6c:1d:8e:e2:e0:71:75:bb:
         22:32:92:42:1b:55:e4:40:02:b0:df:54:8a:68:8f:21:f5:b5:
         55:e5:ad:cd:0b:ed:b3:7f:20:34:4c:b0:9e:64:4d:be:78:b2:
         3d:e3:c3:2a:28:10:ca:aa:c8:8d:09:22:75:a3:98:07:35:3f:
         ba:f3:5e:fa:1d:f0:19:9d:31:1c:28:b9:58:a3:64:d5:58:7d:
         cb:94:51:a6:a6:60:80:ff:9f:0a:f0:15:11:0e:9b:35:34:a8:
         8e:c0:2c:37:7b:67:46:0f:e0:28:f6:fb:5f:5b:c8:1d:d3:80:
         49:17:8c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----