Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/10356cb6f3bf83d01b2d7870aa55324ca4ab5a81.roa
File:                     10356cb6f3bf83d01b2d7870aa55324ca4ab5a81.roa (raw, json)
Hash identifier:          9rTUPqqLsKAzrUv/ghm1GBzEnLrhCYXuHRBfAxSN2ek=
Subject key identifier:   2F:46:15:FA:62:2E:CB:D1:D5:59:FD:73:63:92:EE:44:72:CA:FC:B1
Certificate issuer:       /CN=de4267281632ed5870c17320b110df8594425b92
Certificate serial:       23F563
Authority key identifier: 27:9D:AC:70:6E:FC:C5:18:94:86:8D:62:51:D8:59:B1:F4:42:DE:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de4267281632ed5870c17320b110df8594425b92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/10356cb6f3bf83d01b2d7870aa55324ca4ab5a81.roa
Signing time:             Thu 21 Sep 2023 20:16:21 +0000
ROA not before:           Wed 20 Sep 2023 20:16:21 +0000
ROA not after:            Sun 21 Sep 2025 20:16:21 +0000
asID:                     27833
IP address blocks:        181.197.192.0/18 maxlen: 24
                          190.211.192.0/19 maxlen: 24
                          170.231.76.0/22 maxlen: 24
                          190.1.0.0/18 maxlen: 24
                          190.97.0.0/18 maxlen: 24
                          2800:560::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2356579 (0x23f563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de4267281632ed5870c17320b110df8594425b92
        Validity
            Not Before: Sep 20 20:16:21 2023 GMT
            Not After : Sep 21 20:16:21 2025 GMT
        Subject: CN=10356cb6f3bf83d01b2d7870aa55324ca4ab5a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:83:03:21:ca:26:2b:6a:33:36:23:27:f4:d6:
                    a7:81:53:ef:87:6d:00:45:5b:73:e5:7d:7b:8c:98:
                    98:b7:01:a5:eb:91:8e:64:e1:1a:e1:a5:3f:50:ca:
                    e7:44:a0:a4:81:24:78:41:f2:0b:d3:45:cb:e6:c7:
                    8c:98:f1:02:a8:1c:f0:9c:4f:8b:48:be:68:09:75:
                    12:63:bc:7f:f0:da:43:93:8d:3e:64:1f:ba:93:f0:
                    0f:98:a0:e3:3b:05:4e:66:5f:f1:b4:c4:6f:10:42:
                    1f:7b:53:61:6d:79:b4:5d:1c:5f:dd:b2:50:9b:17:
                    81:01:01:a5:30:cf:1e:bc:8f:bb:aa:c5:06:aa:c3:
                    c3:4b:0c:4a:a8:3d:5e:26:46:3b:d7:3e:57:bd:ae:
                    ea:81:ac:3d:5f:62:f7:c6:21:f5:4e:9e:5b:80:3c:
                    96:a9:45:a1:da:8a:e6:de:b8:42:8a:c3:64:30:96:
                    31:13:92:ee:2e:c7:c7:2b:f3:77:67:f1:e7:48:d0:
                    60:61:37:88:68:22:67:76:51:33:b9:34:cb:0b:ba:
                    63:60:00:e6:d9:68:19:8c:2e:7e:f7:22:07:5e:60:
                    7b:5f:50:fd:57:a2:2c:42:e1:32:10:19:ed:45:1c:
                    f9:ef:5f:da:05:97:c8:1e:98:8b:49:fd:a6:08:be:
                    ec:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:46:15:FA:62:2E:CB:D1:D5:59:FD:73:63:92:EE:44:72:CA:FC:B1
            X509v3 Authority Key Identifier:
                keyid:27:9D:AC:70:6E:FC:C5:18:94:86:8D:62:51:D8:59:B1:F4:42:DE:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de4267281632ed5870c17320b110df8594425b92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/10356cb6f3bf83d01b2d7870aa55324ca4ab5a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/de4267281632ed5870c17320b110df8594425b92.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.76.0/22
                  181.197.192.0/18
                  190.1.0.0/18
                  190.97.0.0/18
                  190.211.192.0/19
                IPv6:
                  2800:560::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ad:d3:40:82:ad:0a:6b:c5:06:5c:d8:13:81:4b:3f:ee:b1:
         57:21:f7:93:d0:bc:21:47:98:06:73:12:7d:dc:4c:02:1c:8d:
         3d:30:a5:0e:06:6c:8e:6a:4a:01:01:c9:19:c2:9d:a9:00:a3:
         03:10:3d:43:7d:c2:ed:7c:01:ed:e1:ec:cb:cf:a0:93:d6:43:
         95:a6:b0:28:66:66:b8:47:bf:96:03:6b:e9:60:d3:09:76:95:
         d1:d1:7e:81:cf:cb:c2:e0:61:41:9f:d4:79:e1:c7:cd:3c:61:
         f8:c7:f2:86:b6:b1:b6:0b:bd:a3:84:3a:38:eb:8d:89:ef:f3:
         4c:be:8d:78:98:16:af:ab:61:77:43:cf:d9:61:83:a2:a4:c8:
         76:e7:7b:4b:7d:d5:92:bf:68:7d:44:a6:a0:86:12:ae:2a:7f:
         1e:a6:b0:e1:86:ee:37:15:eb:02:6e:c8:18:cd:dc:45:bc:07:
         b9:ed:c5:03:2f:45:b2:0c:01:2c:65:27:55:8d:4a:aa:75:e8:
         ec:27:4a:98:83:39:f3:8d:a6:7d:15:2c:33:3a:7a:17:93:7c:
         07:f7:6b:c9:08:f5:14:42:d6:7e:af:3c:f4:9d:f9:34:c8:60:
         ec:88:b0:b3:a1:04:d3:46:aa:eb:38:03:39:cc:1a:37:e9:93:
         54:c4:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----