Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/a820cf9cdeb42f0cbbc69df5725692bb64a25d76.roa
File:                     a820cf9cdeb42f0cbbc69df5725692bb64a25d76.roa (raw, json)
Hash identifier:          Ndic03+9apxC7V8UohDqqdDzaVLb0Vw02WNyrEebxZU=
Subject key identifier:   C5:AE:D4:7F:2A:9F:76:D2:0F:76:94:27:EF:20:2D:E3:F2:EA:A3:E0
Certificate issuer:       /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial:       20C33A
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/a820cf9cdeb42f0cbbc69df5725692bb64a25d76.roa
Signing time:             Wed 03 May 2023 13:50:58 +0000
ROA not before:           Tue 02 May 2023 13:50:57 +0000
ROA not after:            Sat 03 May 2025 13:50:57 +0000
asID:                     264731
IP address blocks:        186.167.216.0/21 maxlen: 24
                          186.167.244.0/23 maxlen: 23
                          186.167.240.0/20 maxlen: 24
                          186.167.192.0/20 maxlen: 24
                          2800:937::/32 maxlen: 126

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147130 (0x20c33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
        Validity
            Not Before: May  2 13:50:57 2023 GMT
            Not After : May  3 13:50:57 2025 GMT
        Subject: CN=a820cf9cdeb42f0cbbc69df5725692bb64a25d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c1:b1:2b:2b:5b:0c:44:78:84:45:f5:9e:63:
                    83:56:d9:bc:e3:11:96:e0:11:38:16:a1:2d:1b:db:
                    0b:b3:eb:17:84:c3:f8:8d:44:9d:76:d2:60:35:ee:
                    14:6d:58:22:c8:a1:6f:89:98:ef:b2:19:92:ed:23:
                    1a:20:ba:b8:93:cb:1b:ef:e0:74:8f:bd:8b:44:8a:
                    62:bd:62:e6:7a:95:62:30:a8:27:c5:78:5a:d9:85:
                    0f:a8:98:66:ef:85:86:64:be:7a:3b:08:41:e4:99:
                    4e:66:5b:53:3b:7c:4c:c1:71:c1:71:e5:43:be:92:
                    60:cf:7f:2b:67:25:e5:57:f4:01:5d:55:67:bc:fb:
                    fa:63:d9:57:77:41:d5:08:02:9b:ed:00:f0:fd:b0:
                    79:d2:93:ea:6b:81:95:bf:89:5c:51:3e:7e:26:ce:
                    66:0a:5d:ca:78:f3:0e:7b:67:19:82:6a:ea:d0:08:
                    9a:f7:68:a5:77:e0:47:9e:07:43:a0:f9:b2:0c:67:
                    09:a3:23:18:6a:90:04:27:09:36:4e:7f:a2:58:c8:
                    61:84:82:96:7b:71:9c:10:6c:57:10:88:9f:2d:bb:
                    fe:0b:9c:ee:a7:a9:3d:c9:0c:7b:2e:e3:09:f0:34:
                    5e:9d:52:78:b6:79:f2:4b:63:44:23:29:cd:c9:1c:
                    31:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AE:D4:7F:2A:9F:76:D2:0F:76:94:27:EF:20:2D:E3:F2:EA:A3:E0
            X509v3 Authority Key Identifier:
                keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/a820cf9cdeb42f0cbbc69df5725692bb64a25d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.192.0/20
                  186.167.216.0/21
                  186.167.240.0/20
                IPv6:
                  2800:937::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:85:cc:c8:6b:e7:40:95:24:01:d6:b5:29:e3:f7:1b:bc:c2:
         0a:7f:f8:23:bc:0c:fa:84:21:77:8d:dc:8e:15:2b:68:e7:40:
         f7:10:5a:01:ca:4c:7d:85:70:a9:79:20:b7:53:e0:63:2e:df:
         f8:43:62:17:42:9c:1d:2f:a5:58:cb:89:92:a7:2a:c5:44:66:
         88:8c:94:ef:7f:72:b3:69:87:7d:19:8e:9e:bd:3f:74:08:a0:
         4c:cc:04:05:c7:88:7a:23:b7:e1:00:8d:6e:d2:6a:07:2d:cb:
         da:69:2e:11:36:4e:02:ff:f8:4d:39:2b:ca:47:f2:c4:31:21:
         69:41:be:b5:5b:c3:db:44:69:50:4e:02:f9:6e:75:cc:80:85:
         1f:df:0d:36:d9:36:69:e0:4d:f5:f0:70:42:d1:05:e3:c2:28:
         2b:f6:95:3e:0b:64:12:37:de:9c:79:83:c7:8c:d2:aa:43:25:
         69:8c:31:ac:39:dc:da:89:64:a7:e2:12:cd:44:06:c7:14:a6:
         be:c9:05:81:fc:00:bf:4a:ae:1a:7c:a6:1d:77:b6:e5:92:c0:
         ce:62:39:1e:25:ad:3b:18:dc:0b:cf:8b:da:0c:e4:50:3f:95:
         a9:8f:00:e7:1c:93:f5:50:2a:c2:0e:d3:f4:82:40:39:65:f3:
         06:9d:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----