Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/da65558f0efc19f53be58ba5fe8a3ddc440a840b.roa
File:                     da65558f0efc19f53be58ba5fe8a3ddc440a840b.roa (raw, json)
Hash identifier:          Jw4Z5UTJ0n8wFqw15YWi6nad+hg6R9tehfXSrpE9K4M=
Subject key identifier:   48:6B:03:0B:3B:48:19:56:90:E4:2C:1A:48:31:1F:E7:EB:9C:70:3E
Certificate issuer:       /CN=5a93fb330793d475d283f90d1a40a536c6ec17d3
Certificate serial:       0E54B8
Authority key identifier: D4:CB:17:FF:BA:9F:0B:4B:04:60:B5:8C:75:05:DB:3B:B0:93:F7:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a93fb330793d475d283f90d1a40a536c6ec17d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/da65558f0efc19f53be58ba5fe8a3ddc440a840b.roa
Signing time:             Mon 16 Oct 2023 13:36:53 +0000
ROA not before:           Sun 15 Oct 2023 13:36:53 +0000
ROA not after:            Thu 16 Oct 2025 13:36:53 +0000
asID:                     271835
IP address blocks:        181.233.24.0/22 maxlen: 24
                          2803:1810::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939192 (0xe54b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a93fb330793d475d283f90d1a40a536c6ec17d3
        Validity
            Not Before: Oct 15 13:36:53 2023 GMT
            Not After : Oct 16 13:36:53 2025 GMT
        Subject: CN=da65558f0efc19f53be58ba5fe8a3ddc440a840b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7a:ce:e5:7a:a9:48:90:f2:35:8f:c6:03:b1:
                    5e:ed:80:ed:5c:5f:96:e9:ce:c7:0e:d3:1f:3a:3f:
                    4a:b3:aa:7f:c2:f1:47:01:ec:83:10:3c:8f:25:d3:
                    91:53:64:84:ee:66:e8:58:24:4a:92:22:d2:8f:26:
                    89:98:7f:23:d5:1c:b1:58:f6:8d:6b:92:bb:ba:ce:
                    cd:e0:27:96:48:f4:df:04:f1:c6:75:fe:8f:e1:56:
                    6f:d7:fb:2a:4a:89:16:ca:69:fc:f4:87:05:b2:5d:
                    9b:9d:36:96:3d:27:68:24:39:75:e4:a0:8b:2d:ee:
                    ae:10:ca:e1:6c:41:1d:ff:56:a1:d7:cc:58:cd:b4:
                    c6:45:c6:93:93:c3:ca:24:16:09:a7:a1:4d:67:b2:
                    b3:e8:ec:54:7f:a9:ec:ee:07:49:8a:62:1d:f9:6b:
                    88:51:99:2a:ec:cc:b4:66:99:00:7c:08:98:d3:49:
                    ba:a7:e4:29:8a:84:78:0c:48:47:a1:c7:d3:72:1a:
                    3e:0e:34:35:95:eb:10:2e:67:44:10:9d:9b:35:fa:
                    06:92:26:67:0e:f2:c6:7e:63:e4:97:b5:61:c9:6b:
                    2b:56:27:dc:33:2b:65:fd:f2:c5:47:d7:f3:98:f9:
                    ae:c0:0b:08:b0:e6:1c:3a:9f:ce:0b:05:15:4e:32:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6B:03:0B:3B:48:19:56:90:E4:2C:1A:48:31:1F:E7:EB:9C:70:3E
            X509v3 Authority Key Identifier:
                keyid:D4:CB:17:FF:BA:9F:0B:4B:04:60:B5:8C:75:05:DB:3B:B0:93:F7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a93fb330793d475d283f90d1a40a536c6ec17d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/da65558f0efc19f53be58ba5fe8a3ddc440a840b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/5a93fb330793d475d283f90d1a40a536c6ec17d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.24.0/22
                IPv6:
                  2803:1810::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:dc:bc:26:77:52:39:18:c0:92:5f:50:0d:a1:8f:6d:9b:
         36:80:eb:49:91:fa:2a:b8:63:54:6c:47:5d:6b:16:2c:05:ca:
         79:c8:9c:22:5b:c7:4b:31:d6:5b:0f:f2:53:a5:18:cc:c0:60:
         f8:27:b8:eb:e9:0e:ce:f0:59:1f:65:64:7e:c3:70:56:cf:e5:
         48:0c:66:02:0f:20:a7:0b:48:54:2e:b5:2f:72:23:8e:48:33:
         87:70:ac:02:f8:47:2d:01:2f:e3:88:b7:53:95:57:fd:eb:71:
         51:d1:1a:27:22:a2:18:55:61:c1:7a:45:fb:2a:31:b7:c6:6f:
         ca:ef:a7:31:f1:02:57:31:62:3c:ff:61:22:e5:e2:31:da:e5:
         d7:1c:ca:37:a6:ca:17:57:ea:fa:b4:95:50:50:a9:58:b7:91:
         9e:57:9c:d6:47:b3:02:6f:96:0d:bd:1b:7f:0d:48:95:9b:ce:
         9e:1b:9a:e6:1f:2a:cc:32:e0:a0:20:6e:16:f4:0d:60:86:51:
         46:97:87:52:67:34:6f:35:82:58:6e:78:81:22:0d:7c:8c:a2:
         18:31:86:1a:c4:2e:f0:9e:00:19:cb:a9:27:b4:bc:22:78:1c:
         fa:a3:59:31:8d:e5:6a:1d:92:4e:ed:96:3b:0d:48:24:4f:bd:
         9f:de:a8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----