Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/3ad2daefee6f4944ac0c936621c5a60e296c389b.roa
File:                     3ad2daefee6f4944ac0c936621c5a60e296c389b.roa (raw, json)
Hash identifier:          wyXgp68tVPJ6+EbtuVijAEr/xkE0G96NP185FiAEhcg=
Subject key identifier:   06:AB:1D:C7:08:2B:F7:DA:F5:62:64:0E:63:10:F9:13:1F:A9:D9:4D
Certificate issuer:       /CN=2992018c1338674cb760d954bf606483b9b3a7d8
Certificate serial:       0F8D8A
Authority key identifier: 5A:CB:88:0A:8F:D2:85:1B:74:EB:F9:7D:46:04:8E:1A:CF:B7:06:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2992018c1338674cb760d954bf606483b9b3a7d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/3ad2daefee6f4944ac0c936621c5a60e296c389b.roa
Signing time:             Tue 16 May 2023 16:01:49 +0000
ROA not before:           Mon 15 May 2023 16:01:49 +0000
ROA not after:            Fri 16 May 2025 16:01:49 +0000
asID:                     271896
IP address blocks:        201.94.148.0/22 maxlen: 24
                          2803:2210::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019274 (0xf8d8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2992018c1338674cb760d954bf606483b9b3a7d8
        Validity
            Not Before: May 15 16:01:49 2023 GMT
            Not After : May 16 16:01:49 2025 GMT
        Subject: CN=3ad2daefee6f4944ac0c936621c5a60e296c389b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:26:22:5f:11:4d:27:13:73:64:90:8f:18:
                    1f:70:eb:6c:1a:87:c8:69:bb:2c:16:8b:80:d3:0e:
                    d5:b0:d3:ed:77:a7:b2:7d:e6:97:2a:7c:a2:61:80:
                    05:ab:42:b3:71:0f:a2:38:bc:29:d5:51:ea:2c:05:
                    6e:e9:db:ff:39:8f:e3:b6:ca:1b:ad:17:33:c7:ac:
                    dd:86:fb:5c:02:3c:08:f0:84:2f:c1:c6:ba:08:9e:
                    34:90:e9:06:1d:47:63:67:79:24:59:63:b5:57:db:
                    a7:29:e2:da:7f:62:67:e9:37:3f:41:eb:bc:cb:d3:
                    83:48:01:b0:3c:9d:ea:fe:96:5b:d0:08:af:69:78:
                    20:f9:ab:19:02:6f:aa:ad:9f:ac:d3:00:ad:32:ef:
                    d4:6f:3c:33:5c:5d:91:37:58:8d:c3:55:21:71:de:
                    d7:11:75:e3:1d:c6:5f:59:14:b9:18:bb:20:85:86:
                    7e:a6:4c:94:7d:42:a8:5b:33:97:57:c8:5b:fa:46:
                    0f:b9:dd:c9:f5:7e:36:4a:d9:3b:4c:25:aa:f6:20:
                    ac:24:24:9a:43:f1:04:9a:d6:7c:da:6d:08:f2:26:
                    e2:b8:c5:45:b0:3c:c5:de:2e:ca:24:17:7e:e5:cf:
                    32:c7:37:32:cb:24:e4:0d:fd:3d:70:d7:df:29:0a:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AB:1D:C7:08:2B:F7:DA:F5:62:64:0E:63:10:F9:13:1F:A9:D9:4D
            X509v3 Authority Key Identifier:
                keyid:5A:CB:88:0A:8F:D2:85:1B:74:EB:F9:7D:46:04:8E:1A:CF:B7:06:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2992018c1338674cb760d954bf606483b9b3a7d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/3ad2daefee6f4944ac0c936621c5a60e296c389b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/2992018c1338674cb760d954bf606483b9b3a7d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.148.0/22
                IPv6:
                  2803:2210::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:40:9d:30:62:9c:eb:22:fa:b9:43:3b:1c:6d:88:e1:88:43:
         f3:9b:0b:1c:e8:5f:69:0e:33:76:bd:61:cf:8c:c8:e5:98:bc:
         d2:41:21:41:7c:9b:7d:c3:f4:cb:07:7e:d1:18:01:cc:f2:0e:
         67:49:62:fd:b3:fb:61:17:69:62:ce:7f:08:22:38:52:73:57:
         dc:c3:04:a1:63:89:bf:ce:7d:1e:f3:7b:ed:3a:b3:b0:15:b5:
         33:7f:10:25:46:6c:e7:d8:50:ff:36:77:68:52:1d:51:45:fe:
         c7:15:25:bd:40:85:49:71:ee:0b:5d:6d:9b:01:f4:fa:5c:65:
         52:35:f6:37:13:be:bc:62:3f:7e:f6:07:63:82:a5:7f:3d:af:
         b4:d4:b8:8d:12:1a:db:05:f8:b9:f8:6e:88:95:bd:f4:1d:ee:
         9f:39:12:52:de:54:ba:76:53:9a:92:8d:0e:f1:c5:91:7f:a3:
         b7:fc:41:c5:fb:db:99:1e:4b:88:9e:aa:f9:bc:dc:35:d9:ac:
         f9:60:a2:72:79:03:a3:76:d8:d5:5d:c8:a1:fc:2a:8e:3d:f9:
         fb:2c:f9:ce:c8:a7:8f:75:c5:1d:28:93:a2:c0:86:48:49:03:
         d1:e3:53:92:64:8f:ee:ce:18:f2:37:e8:78:0c:1d:19:5f:a4:
         9d:bb:4b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----