Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/cb12d456f87c28c8ab101a3b318ed60220247951.roa
File:                     cb12d456f87c28c8ab101a3b318ed60220247951.roa (raw, json)
Hash identifier:          w0jTuNiH61X/tGrzajlUFNiSoLkp5KtUm8tq6wZH33U=
Subject key identifier:   95:3A:EF:93:74:BD:7C:0C:7D:F1:B9:39:64:66:F6:14:32:13:E8:C1
Certificate issuer:       /CN=6e6c24239084f733054ec407015e5331b5b41b77
Certificate serial:       184123
Authority key identifier: F0:BD:1A:66:94:93:90:C8:79:AE:50:22:2C:4C:6C:1A:CA:4C:77:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e6c24239084f733054ec407015e5331b5b41b77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/cb12d456f87c28c8ab101a3b318ed60220247951.roa
Signing time:             Mon 30 Oct 2023 15:09:23 +0000
ROA not before:           Mon 30 Oct 2023 15:09:23 +0000
ROA not after:            Thu 30 Oct 2025 15:09:23 +0000
asID:                     52255
IP address blocks:        186.0.160.0/20 maxlen: 24
                          201.159.56.0/21 maxlen: 24
                          2803:f100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1589539 (0x184123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6c24239084f733054ec407015e5331b5b41b77
        Validity
            Not Before: Oct 30 15:09:23 2023 GMT
            Not After : Oct 30 15:09:23 2025 GMT
        Subject: CN=cb12d456f87c28c8ab101a3b318ed60220247951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:86:2d:6e:8d:c6:fa:a0:6d:4b:71:38:c3:
                    85:e0:e2:30:3b:ae:1d:e3:62:0d:c7:30:be:e5:c9:
                    03:b6:8d:9d:8c:0d:73:3c:56:ac:82:73:e9:e4:ad:
                    12:99:98:5c:ed:a6:0a:7f:d8:6a:ca:27:51:1b:6e:
                    96:d4:8b:4b:b7:2a:c4:ce:19:a4:5f:15:ee:dc:ba:
                    21:10:a6:75:85:42:53:64:2d:10:bd:2d:92:6b:96:
                    4e:ab:7b:12:aa:11:64:6a:82:65:c8:18:61:2e:cb:
                    51:69:8d:3d:8a:8d:77:76:16:57:00:3d:48:a5:bf:
                    28:be:c1:d0:89:10:47:63:c2:7b:e2:b8:47:3a:12:
                    dc:f0:62:82:a9:04:97:ba:6b:45:b5:e7:0d:62:c1:
                    cc:37:f9:c6:d8:50:a6:65:6a:0b:a8:80:3f:7b:f6:
                    bf:58:e0:20:dc:f5:7e:b8:54:31:9c:c6:3c:2c:27:
                    c2:61:91:64:88:7c:d4:49:33:8c:18:96:81:4f:b6:
                    d8:9c:bc:8e:5b:88:10:18:c9:85:bd:a3:3c:35:bf:
                    00:7a:80:eb:13:c4:bb:9f:82:46:12:f8:70:0d:88:
                    a3:29:25:f4:96:61:75:02:5a:f2:9e:fb:d7:9a:64:
                    df:8f:f8:79:da:79:6d:7d:71:52:0f:0b:02:28:fa:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3A:EF:93:74:BD:7C:0C:7D:F1:B9:39:64:66:F6:14:32:13:E8:C1
            X509v3 Authority Key Identifier:
                keyid:F0:BD:1A:66:94:93:90:C8:79:AE:50:22:2C:4C:6C:1A:CA:4C:77:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e6c24239084f733054ec407015e5331b5b41b77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/cb12d456f87c28c8ab101a3b318ed60220247951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9197480f-a4b3-4e08-984d-c4521ac45094/6e6c24239084f733054ec407015e5331b5b41b77.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.160.0/20
                  201.159.56.0/21
                IPv6:
                  2803:f100::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:c3:b4:87:7f:41:e8:42:21:34:1f:e1:b8:f1:93:ff:6d:b5:
         b3:7d:8e:49:f4:34:bc:96:8a:8c:fe:2b:78:a5:1f:ad:e4:cc:
         b7:3b:88:1a:0e:3b:20:f6:b1:2c:ea:85:53:0c:ee:31:dc:fd:
         24:29:91:24:d2:81:91:fe:e2:06:a0:5e:1d:50:2c:64:81:6e:
         cf:65:b6:58:b5:76:b8:79:a6:bb:78:d3:34:1b:a1:d9:2c:1f:
         d5:ec:5c:80:01:fb:17:88:43:59:32:eb:2c:17:5c:1a:84:e8:
         3f:68:ec:5b:e3:c6:1e:27:f0:37:6f:cd:57:9f:56:cb:3d:cd:
         8c:b7:11:69:5e:30:0c:f4:53:25:d5:1a:dc:b3:73:60:26:2e:
         90:94:71:d8:c7:23:31:51:99:df:3e:26:97:d9:fc:dd:5d:ce:
         4d:2d:f7:16:f7:2f:c4:14:f0:f6:bb:a8:3c:9e:1f:57:49:c3:
         ca:90:54:be:5d:12:3a:27:e6:be:f5:aa:bd:8b:b5:eb:44:9f:
         47:89:7f:30:8b:fb:cf:9e:95:c0:b4:a0:64:95:20:86:78:0f:
         ca:32:f6:97:a5:fa:22:c3:99:8d:61:6f:b2:48:c8:f7:80:4a:
         89:d1:83:ff:ba:76:ad:39:6a:e1:ef:04:3d:6e:db:3c:b1:2b:
         19:5f:12:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----