Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/626eb016c19f53df9e4d8f01999493caac26a6a6.roa
File:                     626eb016c19f53df9e4d8f01999493caac26a6a6.roa (raw, json)
Hash identifier:          /0C0rT6gwZpIBNZFZYMkfyhhEkIBf725HmkbL/rvn5k=
Subject key identifier:   33:FA:67:05:9B:BB:5B:19:E4:79:0A:E1:C1:25:61:3F:EF:F9:E2:E2
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       2268C7
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/626eb016c19f53df9e4d8f01999493caac26a6a6.roa
Signing time:             Wed 19 Jul 2023 01:56:09 +0000
ROA not before:           Tue 18 Jul 2023 01:56:09 +0000
ROA not after:            Sat 19 Jul 2025 01:56:09 +0000
asID:                     269918
IP address blocks:        131.72.168.0/23 maxlen: 23
                          131.72.168.0/24 maxlen: 24
                          131.72.169.0/24 maxlen: 24
                          131.72.170.0/23 maxlen: 23
                          131.72.170.0/24 maxlen: 24
                          131.72.171.0/24 maxlen: 24
                          2803:dd80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2255047 (0x2268c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Jul 18 01:56:09 2023 GMT
            Not After : Jul 19 01:56:09 2025 GMT
        Subject: CN=626eb016c19f53df9e4d8f01999493caac26a6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:3d:3e:4d:63:75:78:b2:07:73:3a:40:52:
                    2b:70:19:48:48:b1:46:b9:f3:f2:24:7c:89:2b:48:
                    3f:65:f6:f3:f7:98:3e:64:76:97:73:ae:ef:a3:2c:
                    94:ed:6f:f1:da:a8:ed:0b:6d:d0:5d:f8:5f:59:93:
                    b7:49:33:ab:45:af:b3:78:e1:95:b5:e2:5b:b8:1a:
                    89:1a:4b:2a:5d:29:65:52:aa:84:c0:1d:02:17:ab:
                    b5:5a:56:2d:31:f0:8e:d0:68:e7:08:9b:6e:d0:d7:
                    98:14:11:f7:07:e3:7b:1e:dd:e4:ff:dd:b0:6e:a6:
                    7d:a5:a1:33:ff:c4:a8:20:4b:e5:73:a5:47:9e:42:
                    c8:34:77:8b:62:17:5c:36:bc:27:2d:70:b5:cb:25:
                    9f:b9:81:48:5a:87:70:4e:ea:67:74:6c:7c:71:6a:
                    7d:05:2d:6d:ad:48:f5:aa:f8:e2:19:37:ab:e2:5b:
                    06:fd:b3:b6:a0:50:6b:ab:ea:63:74:35:1e:4b:7f:
                    9c:e5:37:7b:67:6f:da:a8:5d:8a:9d:6e:b9:12:e8:
                    04:11:e6:20:76:6c:1b:f8:21:02:45:0c:f3:66:cd:
                    76:92:a5:47:89:f7:8f:f9:3b:61:8c:3f:38:e5:9f:
                    ad:dc:31:e7:9d:76:44:43:c4:06:de:c1:ff:05:60:
                    64:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FA:67:05:9B:BB:5B:19:E4:79:0A:E1:C1:25:61:3F:EF:F9:E2:E2
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/626eb016c19f53df9e4d8f01999493caac26a6a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:f4:6d:ab:1e:5a:94:d4:89:66:0e:75:63:6e:7b:ea:d4:fd:
         5a:b1:1e:80:1f:da:19:1c:0d:f1:aa:48:1b:49:e9:32:fa:bc:
         9e:6e:79:3a:90:8d:25:03:38:96:fe:f7:ee:a1:1f:64:3e:f6:
         5a:c5:6f:e7:6d:e1:b8:83:15:7f:bf:19:58:b9:30:44:e7:23:
         c6:61:38:83:5f:2f:d8:c6:1c:6b:a6:b6:80:69:5b:69:19:fd:
         51:ac:c0:fb:33:35:c1:79:03:26:6b:2d:f0:bc:da:95:d9:83:
         40:13:98:91:f5:6a:ce:fa:0c:d2:80:c0:e5:f2:9c:06:97:db:
         b2:de:44:64:75:0a:b5:a8:5c:3e:49:c9:74:2c:40:c3:74:9d:
         5c:ba:13:c9:f0:f5:be:19:5b:b8:b1:66:9c:73:20:83:b7:77:
         36:16:9b:ce:ff:fa:b6:0b:a4:a6:28:9c:87:30:37:84:30:51:
         e8:b8:fc:f1:15:a5:ce:e2:b9:f9:4a:75:e1:1b:5c:4d:a9:93:
         90:79:17:72:88:2d:20:30:88:02:6e:eb:11:ca:56:48:5e:e0:
         25:ea:9a:c6:0a:e7:26:d1:04:bb:f8:93:db:a5:1f:f9:ba:4f:
         f1:26:de:d6:ea:43:eb:35:68:38:47:7d:2e:38:a6:04:00:c0:
         97:66:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----