Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/fdd6351f1e634fa820ce1862c63d0eea57081392.roa
File:                     fdd6351f1e634fa820ce1862c63d0eea57081392.roa (raw, json)
Hash identifier:          CEXJgth1oYmRoiccFb4zhS171ukemLZttAQZW6unKjE=
Subject key identifier:   9C:C8:63:FE:E9:8D:42:E9:BB:15:A8:9F:39:2E:A4:AE:2C:50:C8:6B
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       263129
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/fdd6351f1e634fa820ce1862c63d0eea57081392.roa
Signing time:             Tue 24 Oct 2023 21:14:12 +0000
ROA not before:           Tue 24 Oct 2023 21:14:12 +0000
ROA not after:            Fri 24 Oct 2025 21:14:12 +0000
asID:                     269805
IP address blocks:        181.188.246.0/28 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2502953 (0x263129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Oct 24 21:14:12 2023 GMT
            Not After : Oct 24 21:14:12 2025 GMT
        Subject: CN=fdd6351f1e634fa820ce1862c63d0eea57081392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8d:b0:12:9e:13:4b:1c:13:e2:ba:5f:49:84:
                    87:15:78:d4:ae:1f:7c:f8:de:23:74:3f:72:85:2a:
                    4c:9c:15:1c:a5:bd:4d:97:56:90:1e:51:95:d5:30:
                    8b:69:51:9c:9a:1f:a0:70:45:c0:ca:0a:8c:35:97:
                    12:8e:c9:77:c8:c4:1a:8c:94:df:3a:b2:7a:4e:12:
                    95:43:4d:53:2d:80:cc:fa:6b:7f:19:ef:51:23:33:
                    c0:a2:6e:70:77:49:f1:e9:9b:ea:57:47:af:60:37:
                    a8:f1:3a:a8:2e:94:2a:3b:ef:b2:53:30:a7:28:6c:
                    19:62:f3:82:ef:32:10:8f:9d:d6:dd:5f:4e:e9:b2:
                    ab:e1:e1:4d:66:f9:56:e1:72:48:47:1c:51:e5:36:
                    51:1a:1f:eb:71:59:ed:d6:5c:44:0c:6f:4e:b5:e3:
                    b4:0a:0f:c7:99:b6:65:a3:b0:b4:b2:95:e3:54:94:
                    f1:43:9a:26:08:7e:fe:c0:ec:93:9f:99:85:c4:94:
                    fd:be:2a:c2:c4:c0:e8:a5:6c:f9:8e:aa:95:d2:bc:
                    55:c8:f2:6f:fe:4a:dc:02:c8:00:b6:12:8d:3a:ec:
                    19:58:29:30:3d:d4:a1:67:ac:52:99:09:ab:d0:86:
                    d0:d6:06:4c:9a:d6:3b:c4:cb:50:34:0e:3d:dd:84:
                    6a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C8:63:FE:E9:8D:42:E9:BB:15:A8:9F:39:2E:A4:AE:2C:50:C8:6B
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/fdd6351f1e634fa820ce1862c63d0eea57081392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.246.0/28

    Signature Algorithm: sha256WithRSAEncryption
         37:ed:a6:e0:34:82:67:31:5f:ff:f6:93:f3:4b:88:09:11:d5:
         ac:e4:5e:f1:bd:f2:78:0d:b3:58:91:a1:af:62:7c:cb:f7:85:
         da:f9:53:e2:07:60:8e:a0:47:37:d2:64:83:05:97:5d:86:91:
         b7:72:68:db:85:3a:b6:dc:e1:d4:37:05:47:43:a5:70:d9:45:
         53:10:52:2a:42:3d:75:99:e1:92:ea:cf:f0:fa:43:83:ec:38:
         d5:03:ab:6e:30:2c:6e:55:ad:9e:63:14:92:76:75:7a:ee:44:
         00:c6:a3:f4:41:72:e7:3c:5a:e5:e9:af:cb:d7:da:f2:27:4a:
         b1:ae:73:83:a5:4e:2a:9b:04:3d:0f:20:de:a7:4e:50:76:f8:
         dc:ad:7a:eb:aa:56:e1:c4:d2:c6:08:4f:96:42:46:56:8f:36:
         09:70:cf:fe:9c:d5:f3:44:de:84:65:b6:d6:ba:7c:c9:d7:bd:
         f7:7b:48:d0:20:8b:46:11:a9:a1:ce:89:cf:ee:a6:c8:c8:b7:
         1d:da:d4:45:36:9c:81:29:b1:63:bf:8f:8a:0e:8c:d9:4a:fb:
         87:88:11:7c:5c:61:a9:b0:0b:29:5f:74:0d:c8:0c:d7:f2:1e:
         69:26:e6:4a:55:b7:1b:0f:ca:78:fa:21:15:fb:9d:b0:6b:bf:
         a6:f9:db:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----