Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3233322e302f32312d3234203d3e20323635353534.roa
File:                     3230312e3135392e3233322e302f32312d3234203d3e20323635353534.roa (raw, json)
Hash identifier:          +IpXJt+WaAQGFCnYDc+LeyZGQDrXr4mdP8V3iNvCxF0=
Subject key identifier:   1D:6E:02:DC:B5:98:2A:2D:F7:4B:AA:9A:74:D0:F0:E4:8E:06:58:37
Certificate issuer:       /CN=DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E
Certificate serial:       022F0F8057F6B6F08E766BD64FD6476149984794
Authority key identifier: DF:E8:C1:96:5C:AF:4A:5F:DC:69:B9:28:E3:B8:18:B7:97:47:EF:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3233322e302f32312d3234203d3e20323635353534.roa
Signing time:             Wed 03 Jul 2024 14:35:00 +0000
ROA not before:           Wed 03 Jul 2024 14:30:00 +0000
ROA not after:            Wed 02 Jul 2025 14:35:00 +0000
asID:                     265554
IP address blocks:        201.159.232.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2f:0f:80:57:f6:b6:f0:8e:76:6b:d6:4f:d6:47:61:49:98:47:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E
        Validity
            Not Before: Jul  3 14:30:00 2024 GMT
            Not After : Jul  2 14:35:00 2025 GMT
        Subject: CN=1D6E02DCB5982A2DF74BAA9A74D0F0E48E065837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:aa:dc:50:77:2d:a0:cd:c0:83:02:3e:14:4e:
                    7e:08:a7:06:c3:f9:bc:03:aa:80:f9:42:9a:c1:45:
                    0d:01:a6:fd:74:54:5e:e2:73:a3:54:f4:a5:41:d7:
                    62:a8:7f:94:03:7a:ed:c2:29:2a:33:6c:74:2d:1b:
                    28:c0:71:7a:12:cc:ae:dc:94:92:19:14:1c:bb:06:
                    86:f9:73:73:4d:70:04:68:b9:64:25:7b:a2:6b:1e:
                    17:50:e4:18:b3:03:1e:21:32:ff:2c:f3:b1:b9:11:
                    72:ad:a8:a1:8b:f1:86:9d:7a:48:29:93:ed:7c:24:
                    a1:95:ed:f4:1b:82:48:b8:57:77:4b:c0:a0:00:4d:
                    e5:7d:92:d7:52:ea:2b:d9:c5:2e:ee:69:2e:b0:6f:
                    9d:a3:87:69:7d:a7:63:c9:7f:57:01:d3:72:83:9f:
                    83:9d:cc:18:e7:c3:39:a5:7d:7a:74:c4:af:50:4b:
                    ba:43:15:83:1f:68:ac:5a:6c:25:a3:ac:73:51:db:
                    8a:6a:34:2d:ff:63:3a:ee:17:90:fc:15:4d:56:36:
                    6f:7d:60:b4:82:18:7a:32:66:fc:08:b7:ce:cc:6e:
                    ea:1c:a0:ec:b9:60:d4:91:6b:fa:57:0f:a6:30:d1:
                    6e:f2:4b:a4:13:91:b1:bb:ca:c3:ee:ee:a1:18:3a:
                    35:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6E:02:DC:B5:98:2A:2D:F7:4B:AA:9A:74:D0:F0:E4:8E:06:58:37
            X509v3 Authority Key Identifier:
                keyid:DF:E8:C1:96:5C:AF:4A:5F:DC:69:B9:28:E3:B8:18:B7:97:47:EF:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3233322e302f32312d3234203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:0a:f4:36:8f:fa:0b:d6:ad:ec:d6:d9:f9:c7:48:35:bf:ac:
         9c:ba:45:8a:58:fe:8f:28:ad:f4:ca:11:67:58:84:93:12:1d:
         ec:32:b9:5e:6a:ca:74:8d:12:21:9d:7e:a6:1d:87:8b:8c:40:
         89:dc:0d:95:84:16:79:7c:ab:80:6d:2a:82:19:05:f1:d9:c5:
         cc:eb:40:ff:f6:b9:c5:fb:96:38:d0:23:b7:fc:37:1f:34:ad:
         24:0b:ba:fd:59:18:03:1f:d1:29:76:fd:d8:21:88:29:55:06:
         82:b7:21:c0:b8:8d:62:11:b6:2b:30:44:d8:40:43:fa:45:be:
         10:b5:4e:8d:7c:df:7c:28:1a:7d:06:b2:5b:fd:e0:94:e4:2d:
         8e:5a:f5:f0:a7:35:38:ba:77:0c:2e:26:51:44:e2:ea:d6:b1:
         0f:e6:35:81:3d:b0:3f:3d:45:03:c4:f6:8d:cb:44:39:a7:9b:
         9d:f2:96:f4:a4:1d:64:7c:d2:64:d7:59:d3:96:00:d9:79:b2:
         e8:4c:b9:b0:f8:c9:f5:89:75:96:26:9f:f8:7a:30:de:92:e0:
         fd:7a:5e:77:2b:97:49:8a:c9:1b:48:3c:dc:cd:88:44:08:e3:
         f4:04:40:d7:8e:97:da:0f:1b:c2:47:bf:a1:19:78:6d:4f:77:
         35:af:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----