Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/12cc69b764bcc5cb8553c2879282f2a32234276d.roa
File:                     12cc69b764bcc5cb8553c2879282f2a32234276d.roa (raw, json)
Hash identifier:          YLfDUTxs7h3M1ygNPxqDOxQm6fT5Fv7NzmUbCX4L2jI=
Subject key identifier:   D2:E7:F7:06:C5:DE:01:EB:9B:BB:D5:E2:54:ED:18:A7:63:BF:9C:9C
Certificate issuer:       /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial:       2053BA
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/12cc69b764bcc5cb8553c2879282f2a32234276d.roa
Signing time:             Fri 12 May 2023 13:45:19 +0000
ROA not before:           Thu 11 May 2023 13:45:16 +0000
ROA not after:            Mon 12 May 2025 13:45:16 +0000
asID:                     262589
IP address blocks:        179.1.144.0/20 maxlen: 24
                          191.97.55.0/24 maxlen: 24
                          191.97.63.0/24 maxlen: 24
                          2800:650:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118586 (0x2053ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
        Validity
            Not Before: May 11 13:45:16 2023 GMT
            Not After : May 12 13:45:16 2025 GMT
        Subject: CN=12cc69b764bcc5cb8553c2879282f2a32234276d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:d5:26:5b:ef:fc:9f:e2:a9:e5:9e:97:c9:
                    4e:d9:6d:a1:a5:e9:a9:53:11:3a:8f:a5:fe:13:df:
                    c4:65:83:d0:c0:39:a7:ca:ef:4b:7a:a8:4b:78:86:
                    02:3b:80:c6:15:80:11:3d:e8:93:2e:35:8a:38:98:
                    57:8d:22:cf:59:0c:98:81:b7:5c:7b:64:3c:a1:8c:
                    19:a9:2f:b7:b6:c1:c3:6c:8b:f3:8e:f1:aa:3c:59:
                    80:48:03:fc:a3:f7:3e:9f:3e:d9:67:d7:25:6c:f9:
                    a2:50:3c:7e:68:cf:a6:63:c0:0c:5f:87:88:ba:e0:
                    59:5b:02:10:ba:27:e1:ef:1d:1a:84:6c:1a:c9:69:
                    ec:26:80:55:1c:34:5a:19:e9:00:eb:9d:82:19:d4:
                    e2:af:0d:c0:8b:aa:d0:d3:53:64:1f:bd:1a:c8:cc:
                    39:22:cf:32:d5:20:2a:2e:1a:ae:c0:00:94:d4:b8:
                    50:26:e6:7b:12:03:50:37:7e:c2:e8:31:2d:f4:92:
                    e0:12:f0:ec:fa:c5:98:f4:27:07:bf:d7:f0:0d:26:
                    30:a1:b6:a6:5f:2e:79:33:9b:20:36:15:7f:13:03:
                    de:46:14:80:29:ba:4f:62:c2:18:3f:ef:3a:23:f4:
                    a8:7f:52:42:5d:64:c8:b7:2c:ea:cd:3e:aa:49:33:
                    c6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E7:F7:06:C5:DE:01:EB:9B:BB:D5:E2:54:ED:18:A7:63:BF:9C:9C
            X509v3 Authority Key Identifier:
                keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/12cc69b764bcc5cb8553c2879282f2a32234276d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.144.0/20
                  191.97.55.0/24
                  191.97.63.0/24
                IPv6:
                  2800:650:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:73:52:77:6a:20:b4:7f:4b:50:89:38:c3:3a:26:e3:d6:12:
         f7:88:33:83:a3:be:94:b4:20:f3:9b:ee:19:9c:2b:c5:ec:6e:
         e4:aa:79:b1:a9:f6:b3:cb:1d:83:60:73:80:74:da:16:dd:02:
         03:49:45:c2:06:c1:50:bc:57:8f:5f:c1:93:fc:46:72:9e:74:
         db:f3:bb:f4:2e:12:d5:0c:b8:6f:3e:6d:29:65:ef:ee:f1:0a:
         88:14:7a:80:84:7a:dc:b5:73:9f:ad:e5:93:cd:80:54:31:50:
         32:3c:d2:3b:7f:55:7f:5a:9a:a3:05:2e:5c:76:c8:23:e3:64:
         ac:76:ed:cd:7a:8c:ff:52:bd:60:1e:73:70:96:3b:a8:b3:92:
         0a:6e:c7:68:b3:6a:6f:90:57:e3:e6:06:22:0b:05:72:0c:56:
         f0:de:46:ca:e5:41:db:56:f9:08:22:bf:57:1c:6a:9c:e8:12:
         32:e9:a6:d6:97:14:8a:ce:f4:d7:14:77:31:f0:c2:20:ed:7f:
         b2:20:67:e0:a2:cb:21:ef:3e:24:5c:2c:55:e9:a2:e8:c8:49:
         a6:56:29:09:64:37:40:cd:a9:1c:8b:13:84:83:90:c4:d1:4f:
         29:16:1e:ae:08:6c:33:ea:cd:83:7b:ab:bc:51:24:64:1b:8e:
         5d:ab:7e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----