Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57f05d44-bebf-4cf3-94d6-48ddb5e1cb44/097f52e80acb66615c20a7c86250ed933d377939.roa
File:                     097f52e80acb66615c20a7c86250ed933d377939.roa (raw, json)
Hash identifier:          fh1BW6aDtr1OhI5fJNp1mbhY8rv6YlOJqq3kpiJmthc=
Subject key identifier:   AA:B3:EA:65:97:06:5D:8B:CA:45:27:93:75:B9:2A:4A:56:C4:31:41
Certificate issuer:       /CN=ac8eb259055a640e6426229a6c1df950fd5cddba
Certificate serial:       07E661
Authority key identifier: 5D:70:B8:24:E6:02:7A:10:C0:50:1F:5A:57:3D:28:3B:47:52:55:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac8eb259055a640e6426229a6c1df950fd5cddba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57f05d44-bebf-4cf3-94d6-48ddb5e1cb44/097f52e80acb66615c20a7c86250ed933d377939.roa
Signing time:             Wed 24 Mar 2021 14:31:43 +0000
ROA not before:           Wed 24 Mar 2021 14:31:43 +0000
ROA not after:            Tue 24 Mar 2026 14:31:43 +0000
asID:                     269987
IP address blocks:        177.23.128.0/22 maxlen: 24
                          2803:eee0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517729 (0x7e661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac8eb259055a640e6426229a6c1df950fd5cddba
        Validity
            Not Before: Mar 24 14:31:43 2021 GMT
            Not After : Mar 24 14:31:43 2026 GMT
        Subject: CN=097f52e80acb66615c20a7c86250ed933d377939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:1a:60:5c:84:3a:46:80:07:63:ee:0d:22:
                    9e:9a:b1:36:40:4c:f2:e0:2d:3a:8f:4c:7e:e1:cc:
                    71:95:84:62:2b:28:0b:ae:60:ea:b5:1c:00:bc:5e:
                    18:b0:0d:b5:45:8d:df:e0:5a:b8:db:00:99:a0:5f:
                    b6:03:55:b0:c2:af:4e:36:b8:4e:c0:93:da:89:fb:
                    43:6a:73:39:1e:c6:72:71:5f:5b:97:ec:84:3a:2f:
                    3c:ca:ae:1a:3e:02:9c:b5:c1:e3:73:4e:48:93:d0:
                    bc:06:aa:58:4f:c2:7b:45:7f:e9:96:ee:2f:ba:ac:
                    4f:08:27:bc:36:52:a2:eb:a1:98:54:ab:e1:d6:44:
                    51:9d:cd:6a:05:1f:35:10:5e:c1:12:65:8a:39:60:
                    ed:51:33:e5:eb:61:6b:99:cb:e5:1e:1b:d7:9e:bb:
                    18:e6:37:0b:1d:8d:a2:8c:6f:f7:dc:83:d7:b3:d8:
                    5f:5f:09:67:23:19:1b:b0:21:fc:07:a7:0e:0e:cd:
                    90:76:54:f1:81:9f:20:df:b0:3f:87:68:14:7e:a3:
                    17:56:0e:b3:54:23:c0:3d:f3:e0:c1:ca:c3:eb:24:
                    24:26:fb:a1:55:e3:26:3f:2d:2c:d0:bb:0f:e4:70:
                    e7:5a:fa:d9:99:6e:52:38:82:bc:2b:0f:19:36:4f:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B3:EA:65:97:06:5D:8B:CA:45:27:93:75:B9:2A:4A:56:C4:31:41
            X509v3 Authority Key Identifier:
                keyid:5D:70:B8:24:E6:02:7A:10:C0:50:1F:5A:57:3D:28:3B:47:52:55:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac8eb259055a640e6426229a6c1df950fd5cddba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57f05d44-bebf-4cf3-94d6-48ddb5e1cb44/097f52e80acb66615c20a7c86250ed933d377939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57f05d44-bebf-4cf3-94d6-48ddb5e1cb44/ac8eb259055a640e6426229a6c1df950fd5cddba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.128.0/22
                IPv6:
                  2803:eee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:d6:81:3f:61:ef:cb:63:5f:c7:3d:25:1e:1a:83:73:c8:6d:
         19:da:6b:50:ca:a4:e7:e9:2f:0b:96:30:4c:59:cc:09:85:66:
         97:26:e9:c4:8c:62:54:5c:98:cf:58:2f:a4:09:42:9d:f2:e2:
         bf:f8:a4:de:d8:ad:f7:9a:bc:cc:df:6f:67:5e:43:45:06:ef:
         1b:d6:fb:00:2a:b0:ef:a9:88:8b:2f:9c:92:c7:5a:48:ce:5c:
         1e:99:91:c7:63:1d:1c:2e:5d:e5:68:02:ae:77:24:c2:4a:c8:
         e6:7e:ca:4c:72:6e:4a:8e:7b:0a:0e:1c:98:2e:a6:35:61:2b:
         a5:15:49:1b:dc:0c:39:82:83:90:71:c3:f3:99:de:22:fe:b6:
         d3:cc:05:33:61:09:c6:90:39:19:f6:de:9f:99:45:46:8f:b1:
         b2:3e:71:a7:6c:f1:24:88:ef:47:9a:4d:39:d2:fd:e3:40:08:
         44:75:4f:30:41:7b:be:d3:ea:81:05:6c:5d:98:b8:64:5a:bc:
         f6:49:9d:81:1e:0c:ea:a2:bc:3e:5a:33:49:f2:cb:47:6c:c5:
         fb:87:07:7a:55:35:66:f9:2f:90:82:1c:de:b0:43:c4:8b:cf:
         dc:ca:8a:ac:ab:37:31:b6:f8:ab:16:19:a5:49:72:cb:2d:71:
         35:c8:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----