Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6684fedf-05a2-478e-bd9d-40c5d454a6bd/5dff19b727c3e0b7ed70b54059c8a95fb6b0e506.roa
File:                     5dff19b727c3e0b7ed70b54059c8a95fb6b0e506.roa (raw, json)
Hash identifier:          PyM6qZYI7gN1K+6wUmexpKt4UWwXrjfl9XhpXAEvx6w=
Subject key identifier:   96:D1:8B:B8:49:82:E5:A8:19:71:C9:49:D9:09:0E:55:36:9C:70:38
Certificate issuer:       /CN=cbd944bf8c1af6b82a2220e086ccf759b7b6767c
Certificate serial:       11F31B
Authority key identifier: CE:F3:61:FB:73:DE:9F:AF:29:D0:CF:9F:B7:C5:75:C8:AC:B4:41:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbd944bf8c1af6b82a2220e086ccf759b7b6767c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6684fedf-05a2-478e-bd9d-40c5d454a6bd/5dff19b727c3e0b7ed70b54059c8a95fb6b0e506.roa
Signing time:             Tue 29 Aug 2023 08:30:00 +0000
ROA not before:           Mon 28 Aug 2023 08:30:00 +0000
ROA not after:            Wed 27 Aug 2025 08:30:00 +0000
asID:                     52485
IP address blocks:        132.255.132.0/22 maxlen: 22
                          138.122.192.0/22 maxlen: 22
                          168.90.96.0/22 maxlen: 22
                          168.196.236.0/22 maxlen: 22
                          190.123.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176347 (0x11f31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd944bf8c1af6b82a2220e086ccf759b7b6767c
        Validity
            Not Before: Aug 28 08:30:00 2023 GMT
            Not After : Aug 27 08:30:00 2025 GMT
        Subject: CN=5dff19b727c3e0b7ed70b54059c8a95fb6b0e506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:b8:6d:48:71:b0:48:99:f6:89:92:1f:36:
                    27:53:2b:14:a6:b0:a0:de:26:97:7f:ce:32:c1:e3:
                    be:36:27:eb:2a:13:7b:ac:ea:fa:e5:d2:6c:98:ad:
                    36:86:e2:8a:9c:8a:fc:10:54:72:10:1a:01:6a:28:
                    67:7a:ca:2d:c8:c2:33:db:1c:64:5d:a4:66:9f:82:
                    57:41:9e:74:88:b2:21:dc:cc:1f:40:44:58:fa:89:
                    c8:61:73:2a:7f:58:b7:05:c6:bb:0e:be:1c:00:b0:
                    7d:3e:24:47:b5:e9:2e:77:b6:f6:1b:ae:f1:0d:2a:
                    db:75:7e:58:f7:75:0a:44:4c:17:32:10:f5:90:ec:
                    57:01:b6:2f:b2:c7:2d:0e:27:9b:7b:2d:d2:0a:d8:
                    c5:11:97:fd:35:7c:44:a0:7c:d7:f7:a2:2d:77:af:
                    d4:17:ef:fd:b4:df:a5:18:c0:3e:51:5d:a6:c9:f1:
                    85:33:09:94:02:a4:f8:c7:38:f5:d5:77:e0:19:bc:
                    02:77:a9:57:4a:79:6e:1b:19:de:99:77:70:fc:48:
                    9b:71:87:c7:69:ba:66:c5:66:53:fa:80:4e:a4:4a:
                    8e:69:31:7f:49:df:ac:db:f9:c8:40:f1:29:e4:08:
                    d0:14:ae:36:a1:12:83:d6:56:7f:a3:f1:fd:16:6e:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D1:8B:B8:49:82:E5:A8:19:71:C9:49:D9:09:0E:55:36:9C:70:38
            X509v3 Authority Key Identifier:
                keyid:CE:F3:61:FB:73:DE:9F:AF:29:D0:CF:9F:B7:C5:75:C8:AC:B4:41:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbd944bf8c1af6b82a2220e086ccf759b7b6767c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6684fedf-05a2-478e-bd9d-40c5d454a6bd/5dff19b727c3e0b7ed70b54059c8a95fb6b0e506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6684fedf-05a2-478e-bd9d-40c5d454a6bd/cbd944bf8c1af6b82a2220e086ccf759b7b6767c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.132.0/22
                  138.122.192.0/22
                  168.90.96.0/22
                  168.196.236.0/22
                  190.123.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:49:04:5b:27:6c:bf:e8:fe:98:43:26:13:8c:b1:82:71:d3:
         15:f9:36:5c:78:01:1d:76:91:84:8a:73:32:40:68:4e:fa:ce:
         12:3c:9b:59:c9:a0:d5:d7:12:68:90:3b:2c:df:9a:1e:ac:a4:
         e8:25:eb:57:b0:94:3e:92:48:80:c7:2d:5d:f0:97:ae:fe:6c:
         d3:ae:0e:8b:50:b1:a0:cb:01:0b:9b:06:8c:83:86:cc:32:a5:
         b2:5b:d8:12:47:14:e7:d1:17:84:db:43:ef:8d:29:9d:80:23:
         33:21:a2:cd:73:c5:d4:cb:33:bb:18:01:04:f8:2e:87:4c:85:
         78:a5:f5:58:8f:c2:87:97:45:c0:d3:d6:8c:3b:86:c5:c2:ba:
         a7:cb:85:66:f3:ed:4e:db:19:c7:78:08:44:9b:92:c4:c6:42:
         92:64:51:f4:f8:4c:6c:ca:d0:28:d2:4f:cb:77:23:e1:90:1d:
         0f:ed:46:73:17:e5:44:f5:85:2b:2b:33:db:f3:67:ec:50:62:
         60:9a:00:37:31:0f:50:97:89:19:3d:72:60:f7:2c:bf:be:08:
         56:ce:00:33:62:8f:0f:aa:8f:48:21:a7:d7:a8:fc:dd:ec:2e:
         d1:c8:62:c0:57:93:e3:2d:73:4c:2c:35:d6:67:23:76:8a:9d:
         dc:d5:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----