Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/ff3214fc90550c991d4c31d60efc61beeb7579bf.roa
File:                     ff3214fc90550c991d4c31d60efc61beeb7579bf.roa (raw, json)
Hash identifier:          cVTMZ95yuyf0moHpLbHsp7dia1LUrZfjSNG4d5RQI/s=
Subject key identifier:   8F:A2:25:24:1B:A1:FF:F3:6F:C8:21:C3:B6:66:B1:0F:65:68:96:0A
Certificate issuer:       /CN=138405134343f63286b605fe9165839fd04a4252
Certificate serial:       263A18
Authority key identifier: 13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/ff3214fc90550c991d4c31d60efc61beeb7579bf.roa
Signing time:             Thu 14 Dec 2023 17:46:44 +0000
ROA not before:           Thu 14 Dec 2023 17:46:43 +0000
ROA not after:            Sun 14 Dec 2025 17:46:43 +0000
asID:                     27820
IP address blocks:        192.188.50.0/24 maxlen: 24
                          200.0.28.0/22 maxlen: 24
                          2800:130::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2505240 (0x263a18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138405134343f63286b605fe9165839fd04a4252
        Validity
            Not Before: Dec 14 17:46:43 2023 GMT
            Not After : Dec 14 17:46:43 2025 GMT
        Subject: CN=ff3214fc90550c991d4c31d60efc61beeb7579bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:18:a9:61:af:9b:a5:ed:ba:36:da:0b:2b:75:
                    2b:f8:16:a1:39:c7:85:51:ee:4f:fe:2d:99:da:b1:
                    94:60:8c:71:61:d2:30:46:ba:eb:69:df:d2:ed:79:
                    5f:a5:0a:4c:a1:b4:c0:8c:ff:c5:f2:cf:7d:e8:f3:
                    2f:13:17:bf:06:93:6b:18:59:78:09:f5:3e:03:0e:
                    17:5e:73:fb:9c:b6:63:79:ca:21:3a:88:90:f7:a3:
                    da:f8:a9:1b:f1:d6:df:37:12:55:e2:5f:9d:ec:5d:
                    19:d7:a5:bb:e1:2f:2d:eb:72:04:7f:e7:37:7a:63:
                    52:2d:5b:2b:c6:06:42:b8:bf:15:9a:c8:7f:e7:85:
                    b8:06:05:73:b6:68:50:94:e5:9b:43:93:41:0f:e4:
                    48:c3:10:9b:d3:87:54:b8:03:ac:95:0c:79:5d:76:
                    b2:c1:19:ac:93:7d:c8:9c:b1:91:2e:80:ca:98:2e:
                    cc:bb:49:87:32:9c:c4:ce:b3:ce:08:86:c0:d5:4c:
                    7e:0f:c8:30:e6:f1:29:ab:2f:9c:aa:66:90:3b:bf:
                    11:15:50:2b:f3:ef:27:97:cf:c9:f6:77:a3:0b:e7:
                    eb:fe:9b:9a:8b:10:e4:5d:21:c5:5b:fb:18:53:21:
                    bc:22:d4:ac:05:8c:c4:9c:e2:01:12:f5:c4:ab:d0:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A2:25:24:1B:A1:FF:F3:6F:C8:21:C3:B6:66:B1:0F:65:68:96:0A
            X509v3 Authority Key Identifier:
                keyid:13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/ff3214fc90550c991d4c31d60efc61beeb7579bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.50.0/24
                  200.0.28.0/22
                IPv6:
                  2800:130::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:88:fa:f3:c9:72:cd:23:cf:79:1f:cc:fb:3e:3e:7f:2f:31:
         07:df:de:df:dd:a2:44:3f:8c:19:a1:8c:13:82:6e:4c:a6:6d:
         49:57:89:32:5a:d0:7d:80:9b:e1:cf:e3:39:ae:27:53:cd:6e:
         81:16:0a:8f:31:fb:c8:2c:8a:2f:2b:e7:8f:12:d6:66:9d:c1:
         b2:4d:63:a9:f4:6e:8a:31:1b:92:fe:21:fe:3a:16:76:e0:21:
         67:19:18:78:d2:f6:ab:a2:f0:28:73:87:e1:37:2e:cc:53:8f:
         8c:ca:62:44:6b:93:c4:0a:c4:0e:ca:86:ae:c5:58:bd:fe:53:
         a5:0e:e1:5f:08:59:69:66:fc:e0:a7:75:d8:e5:70:25:56:96:
         0f:0b:38:85:90:d0:0f:4d:f7:84:da:de:07:65:a6:8e:36:52:
         1e:80:1e:2b:fa:5d:d9:e9:fb:d9:ed:51:9f:89:f6:27:94:e3:
         1e:4d:d5:b4:e8:ac:a9:e4:ce:7a:fe:5a:c0:74:fb:3c:7b:21:
         a5:5f:51:70:bd:e6:19:65:b0:57:c1:1d:09:0d:ea:12:1a:a8:
         1a:d6:5f:46:ac:ec:89:7d:11:f6:4f:f0:1e:0e:c3:d8:46:f5:
         30:ae:4c:bd:c6:73:b2:96:1f:94:5a:68:a4:03:4b:81:61:b3:
         0d:45:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----