Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/7a8013355d831645300b2f0d4404b76e965b40f9.roa
File:                     7a8013355d831645300b2f0d4404b76e965b40f9.roa (raw, json)
Hash identifier:          Jrq3d2YV/WJOPBt9BneVU26xOOLmvDoWFbiaKvbS58o=
Subject key identifier:   A5:53:1D:A8:8C:C3:96:76:3D:03:DD:71:90:86:B9:97:FA:00:4C:32
Certificate issuer:       /CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
Certificate serial:       26028C
Authority key identifier: 35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/7a8013355d831645300b2f0d4404b76e965b40f9.roa
Signing time:             Sun 31 Dec 2023 04:59:57 +0000
ROA not before:           Thu 29 Jun 2023 03:00:00 +0000
ROA not after:            Mon 30 Jun 2025 03:00:00 +0000
asID:                     26210
IP address blocks:        186.121.192.0/18 maxlen: 24
                          190.181.0.0/18 maxlen: 24
                          200.105.192.0/19 maxlen: 24
                          2800:88:1a00::/39 maxlen: 48
                          2800:88:d::/48 maxlen: 48
                          2800:88:e::/47 maxlen: 48
                          2800:88:40::/48 maxlen: 48
                          2800:88:11::/48 maxlen: 48
                          2800:88:12::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2491020 (0x26028c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
        Validity
            Not Before: Jun 29 03:00:00 2023 GMT
            Not After : Jun 30 03:00:00 2025 GMT
        Subject: CN=7a8013355d831645300b2f0d4404b76e965b40f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ed:33:3e:f9:26:cd:b8:85:12:72:80:de:78:
                    97:16:e7:90:25:6e:95:0c:a2:08:5c:3f:ff:f8:35:
                    d4:6d:dd:30:ad:05:ca:cb:70:70:d7:a1:cd:23:d0:
                    5d:a2:6e:ad:ed:b7:27:ed:72:db:c9:cb:36:8b:51:
                    29:f4:40:6a:54:87:f1:95:36:ff:e3:51:6a:db:86:
                    a3:20:8c:c4:45:c6:31:27:2e:3d:d2:82:74:73:ee:
                    23:1f:f4:1e:be:44:45:f6:ac:f7:ec:1e:90:29:cc:
                    94:55:3b:ad:38:a9:bf:f7:05:fe:f0:bb:bf:58:63:
                    23:cc:02:8f:6d:73:18:d6:c7:00:63:5e:96:d3:e5:
                    b6:df:1a:27:45:3c:01:cc:37:21:6d:e1:c2:e3:d4:
                    d6:91:e8:fe:36:62:09:f3:d3:b9:e5:54:59:0e:fd:
                    58:e1:f0:9b:34:fe:07:0c:df:53:5c:30:4b:5a:b5:
                    fc:ec:1e:95:21:b5:50:cc:d8:b2:d6:7a:72:74:07:
                    0e:1e:e7:e7:5e:4d:96:4d:ca:f4:51:c2:31:45:c0:
                    a3:98:33:9e:26:54:42:3a:24:43:f1:dc:1f:b8:ec:
                    21:c8:92:86:56:08:51:73:ad:10:06:1e:8d:62:54:
                    08:15:ae:d9:b9:4e:12:31:cb:d7:b7:87:5f:c3:40:
                    a2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:53:1D:A8:8C:C3:96:76:3D:03:DD:71:90:86:B9:97:FA:00:4C:32
            X509v3 Authority Key Identifier:
                keyid:35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/7a8013355d831645300b2f0d4404b76e965b40f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.192.0/18
                  190.181.0.0/18
                  200.105.192.0/19
                IPv6:
                  2800:88:d::-2800:88:f:ffff:ffff:ffff:ffff:ffff
                  2800:88:11::-2800:88:13:ffff:ffff:ffff:ffff:ffff
                  2800:88:40::/48
                  2800:88:1a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         16:6d:d6:86:7e:73:47:36:bf:c8:79:4d:cb:e9:4a:9d:ae:64:
         a5:b9:7d:81:47:71:00:0a:93:ef:4f:ba:86:77:c8:0c:38:bc:
         06:16:4a:c8:c3:4d:8e:32:77:2e:8e:59:a0:95:47:4b:da:af:
         5c:df:da:f2:cf:3b:a8:de:7b:15:35:08:79:97:5b:04:d5:12:
         56:a1:77:ee:cb:a5:81:4c:ed:1f:27:68:c9:9b:5f:1c:dd:e7:
         e8:23:ec:1c:19:e6:ff:d8:ba:9a:d5:28:d2:ae:73:74:71:7c:
         1b:6b:95:b0:7a:5f:d9:74:34:d8:0f:b3:a3:24:bd:07:9f:57:
         63:5b:50:f3:40:ba:30:0a:50:d5:3d:62:2a:e1:c7:12:f6:aa:
         a3:ed:d1:bd:9a:70:6d:e8:71:69:0c:8e:d8:19:08:bb:1b:f3:
         5f:1a:db:0b:89:67:15:70:f2:7d:93:23:7a:75:41:4d:ec:17:
         20:05:d0:42:8f:19:6b:e9:84:18:83:29:6d:ba:aa:15:d5:be:
         c4:18:e6:d5:5e:e8:43:d4:01:ee:fc:fe:3b:5c:22:5d:5d:b8:
         78:fb:b1:b8:ab:19:bd:f2:b1:92:0f:68:b8:a5:09:76:4d:1a:
         1c:ff:8e:09:fc:d2:f1:69:e1:65:dc:3d:56:a9:ba:b0:a8:2c:
         2a:93:17:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----