Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/1ff8ccadf537f4fe0e90470cb5b232abea7cf74c.roa
File:                     1ff8ccadf537f4fe0e90470cb5b232abea7cf74c.roa (raw, json)
Hash identifier:          TFn6GgpoohIwcF2+Uud6Lqnpysv4ZicDRkp667Ay9jo=
Subject key identifier:   74:6B:FB:10:5B:62:81:83:42:47:32:27:31:37:CA:CB:B1:63:A8:3A
Certificate issuer:       /CN=0bba00c9e212b68aac90a0d26d072a417cd9bbab
Certificate serial:       20C57C
Authority key identifier: BD:89:59:86:22:5C:5F:7F:D7:F1:AB:31:56:D0:93:42:4D:9B:52:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bba00c9e212b68aac90a0d26d072a417cd9bbab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/1ff8ccadf537f4fe0e90470cb5b232abea7cf74c.roa
Signing time:             Tue 30 May 2023 20:29:22 +0000
ROA not before:           Mon 29 May 2023 20:29:21 +0000
ROA not after:            Fri 30 May 2025 20:29:21 +0000
asID:                     262184
IP address blocks:        187.49.248.0/21 maxlen: 24
                          190.5.212.0/22 maxlen: 23
                          190.211.92.0/22 maxlen: 24
                          45.5.60.0/22 maxlen: 24
                          2803:9ec0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147708 (0x20c57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bba00c9e212b68aac90a0d26d072a417cd9bbab
        Validity
            Not Before: May 29 20:29:21 2023 GMT
            Not After : May 30 20:29:21 2025 GMT
        Subject: CN=1ff8ccadf537f4fe0e90470cb5b232abea7cf74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:83:05:2d:fb:35:ae:0c:36:31:49:76:ea:e2:
                    bb:e6:74:d0:49:21:ab:a7:a8:b3:18:da:e9:d7:c8:
                    83:3a:28:a8:0c:57:a6:b1:48:b6:20:2d:ec:a7:56:
                    e3:32:04:3e:98:0e:e4:2b:11:19:71:d3:fc:05:8d:
                    5e:f7:64:74:88:81:19:e7:bb:55:10:1f:2c:d5:d7:
                    ca:7d:31:75:99:51:da:16:3d:80:48:e6:15:04:16:
                    91:3b:ea:9e:f3:be:83:6f:ce:6e:3f:7c:44:63:a2:
                    22:25:5a:c4:ce:90:b2:af:4c:aa:61:1d:69:fe:83:
                    42:20:db:21:b3:be:fe:25:3f:49:dc:ac:1f:05:d7:
                    62:2f:ed:19:e3:35:c0:5d:d9:eb:46:89:1b:99:1e:
                    08:8a:5b:1b:48:7b:2d:0f:aa:86:7e:6a:04:ed:a9:
                    0f:a0:df:10:d8:2d:e2:74:36:c3:1a:0a:62:1c:d2:
                    45:ee:51:75:7e:30:3f:b0:01:f7:cf:39:eb:4a:45:
                    e2:e7:eb:84:11:55:e1:6e:d4:5e:f8:8f:af:0c:8d:
                    b2:ae:e9:80:7e:7a:41:11:9b:bd:2c:1f:2d:fa:73:
                    b5:94:86:b1:06:e9:8b:57:47:ec:cd:e3:41:79:07:
                    19:69:f8:70:6f:14:96:d7:e5:95:ad:d7:ae:d2:5b:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6B:FB:10:5B:62:81:83:42:47:32:27:31:37:CA:CB:B1:63:A8:3A
            X509v3 Authority Key Identifier:
                keyid:BD:89:59:86:22:5C:5F:7F:D7:F1:AB:31:56:D0:93:42:4D:9B:52:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bba00c9e212b68aac90a0d26d072a417cd9bbab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/1ff8ccadf537f4fe0e90470cb5b232abea7cf74c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/0bba00c9e212b68aac90a0d26d072a417cd9bbab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.60.0/22
                  187.49.248.0/21
                  190.5.212.0/22
                  190.211.92.0/22
                IPv6:
                  2803:9ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:4c:76:a9:4b:76:a8:82:23:d4:76:07:d3:93:e4:db:09:2a:
         5a:85:52:9e:43:8a:95:82:be:bf:a7:24:72:72:55:dd:cd:1e:
         f1:a4:c0:9c:3e:33:35:c0:ca:b1:fd:e0:68:03:cb:c5:32:89:
         86:72:b2:63:8f:35:55:c5:c8:9d:34:d6:69:ff:08:cd:59:1b:
         e6:b5:d4:84:08:30:c2:dd:c7:db:e6:c1:fd:cf:74:98:a6:f9:
         68:58:7a:f0:09:a4:55:6e:dd:a6:c1:c2:fb:72:61:13:e9:e5:
         4f:b7:c0:a4:51:47:48:93:c4:22:24:0e:9a:a5:6a:cd:46:12:
         1c:f5:e3:23:6e:8d:0b:53:83:b5:4d:f7:a4:d3:47:50:cf:14:
         73:b7:2a:48:cc:25:d3:39:d7:1a:be:8f:ee:5a:a6:07:ae:fa:
         5c:22:cd:4a:28:85:95:84:51:79:4f:69:83:15:f8:da:4f:13:
         5f:17:cb:1c:c7:16:ce:9d:64:c1:99:0d:c0:05:70:b2:cd:78:
         ef:b9:46:a1:45:a9:c4:03:61:6c:ac:1e:c6:ff:41:39:f0:e1:
         8b:75:15:24:16:81:f8:98:92:45:a3:ac:9b:1c:dd:e0:02:23:
         b2:97:05:ba:5e:5b:da:f4:f3:78:58:1f:58:8e:17:51:a0:b4:
         14:6d:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----