Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/86b72acf28c72ed93bb2457f4951cd51f1f3cd63.roa
File:                     86b72acf28c72ed93bb2457f4951cd51f1f3cd63.roa (raw, json)
Hash identifier:          u+PWdgYgjYmEcg/j7HS9CqYZMD7YmJQBoG75TXtVNHw=
Subject key identifier:   7B:4E:2A:AE:10:A3:79:53:F7:47:C9:53:64:E9:84:FB:17:78:A8:F9
Certificate issuer:       /CN=665130a1c940d46872c6be287d312bbd14fb8bd7
Certificate serial:       211B20
Authority key identifier: 46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/86b72acf28c72ed93bb2457f4951cd51f1f3cd63.roa
Signing time:             Wed 17 May 2023 14:36:26 +0000
ROA not before:           Tue 16 May 2023 14:36:26 +0000
ROA not after:            Sat 17 May 2025 14:36:26 +0000
asID:                     52419
IP address blocks:        181.192.64.0/20 maxlen: 24
                          200.31.240.0/20 maxlen: 24
                          2803:3480::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169632 (0x211b20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665130a1c940d46872c6be287d312bbd14fb8bd7
        Validity
            Not Before: May 16 14:36:26 2023 GMT
            Not After : May 17 14:36:26 2025 GMT
        Subject: CN=86b72acf28c72ed93bb2457f4951cd51f1f3cd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:14:ba:b9:4a:e7:c4:83:63:fe:3f:11:5c:
                    7c:95:f3:69:80:b5:1e:8d:00:f8:c8:d5:ba:e6:b2:
                    b0:10:ae:cc:e8:bf:74:96:6d:24:91:21:55:fa:58:
                    15:46:ca:c8:ff:a7:e5:8f:dd:23:71:60:62:be:c6:
                    fa:eb:12:ba:62:ba:e6:90:a8:bf:28:31:e5:79:92:
                    55:92:6b:bf:2b:4e:6f:1f:fd:32:1c:e8:f6:4d:e4:
                    ed:4c:d8:17:0c:95:a0:2e:47:ca:0f:ec:25:27:8d:
                    8c:b6:d5:ce:28:b9:5c:b3:20:ae:93:6c:48:d1:6a:
                    fe:23:89:36:cb:1e:82:e8:27:ea:fd:92:39:d1:46:
                    7a:4b:37:0a:0d:10:64:d5:d7:62:38:f7:1c:90:26:
                    c5:01:66:1d:1e:d4:d7:36:8b:d5:62:c4:0e:f4:b8:
                    0e:dd:04:4e:6b:b8:b5:01:8f:fd:38:e0:02:ca:0f:
                    7e:cc:af:36:47:7a:4b:17:8a:b5:dc:8b:28:a5:6a:
                    f6:14:a3:20:68:6c:2b:c0:3e:97:9a:1b:78:a6:2c:
                    f2:93:73:b1:87:ac:7c:a2:22:66:6a:3c:11:f2:12:
                    20:c3:db:06:9a:53:3a:77:03:79:7f:18:90:fe:79:
                    09:52:a5:77:54:ec:30:7b:1b:7e:ed:5e:9c:0a:7a:
                    36:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4E:2A:AE:10:A3:79:53:F7:47:C9:53:64:E9:84:FB:17:78:A8:F9
            X509v3 Authority Key Identifier:
                keyid:46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/86b72acf28c72ed93bb2457f4951cd51f1f3cd63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/665130a1c940d46872c6be287d312bbd14fb8bd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.64.0/20
                  200.31.240.0/20
                IPv6:
                  2803:3480::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:99:17:51:2f:0d:f5:04:39:01:7f:fb:30:c0:91:b1:bc:f1:
         67:9a:d5:2a:12:eb:d1:38:a4:be:92:7f:05:05:5d:de:ed:a1:
         14:5f:da:72:e5:6c:bc:09:6a:d9:c1:d6:02:1d:50:04:c2:4c:
         2c:ce:48:1a:16:0f:7d:c6:b9:13:45:0a:a0:a6:91:ca:15:fa:
         8a:90:ae:5b:79:70:d2:d1:7f:1d:fe:ed:f1:63:09:7f:a2:4e:
         f7:00:00:f2:25:09:26:a2:b8:40:c3:2f:42:bb:4a:4e:be:ab:
         65:20:ab:1f:42:bc:42:89:ad:e3:26:69:ab:c7:a2:0c:de:79:
         87:79:96:f0:4b:4e:0e:a4:3d:74:21:fe:2b:9d:8c:0e:ca:43:
         a5:7e:5d:68:69:3b:2e:bc:fc:a1:b2:9b:54:1f:a1:af:6a:47:
         b3:a5:90:2d:e4:be:2b:82:02:16:59:85:c8:88:34:cb:d9:e0:
         27:01:e1:c1:0e:a3:6c:0d:11:77:24:2c:5e:8e:ff:a9:7d:58:
         18:87:67:98:74:2f:4a:f9:4b:bf:ec:ce:ef:95:36:bb:26:2e:
         d9:fd:a9:d7:8e:58:83:33:a9:56:dd:8d:2a:35:04:57:8d:0c:
         5f:96:38:b3:ea:42:7d:a5:f8:40:05:cb:01:15:c1:08:43:ab:
         98:2c:35:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----