Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/e7cfa67977da8e2714e2bb7d1ddc3e11e313c1ca.roa
File:                     e7cfa67977da8e2714e2bb7d1ddc3e11e313c1ca.roa (raw, json)
Hash identifier:          XZntbv/f7QttUViTL7uYZ5LZz9KOjm151SqaPP6EBPI=
Subject key identifier:   25:E6:FA:39:53:D5:31:B7:D5:19:AE:23:CD:EC:B1:9A:28:C9:2C:AA
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       211656
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/e7cfa67977da8e2714e2bb7d1ddc3e11e313c1ca.roa
Signing time:             Wed 03 May 2023 18:31:38 +0000
ROA not before:           Tue 02 May 2023 18:31:36 +0000
ROA not after:            Sat 03 May 2025 18:31:36 +0000
asID:                     264668
IP address blocks:        177.234.192.0/18 maxlen: 24
                          200.24.128.0/19 maxlen: 24
                          167.250.180.0/23 maxlen: 23
                          167.250.180.0/22 maxlen: 24
                          2803:2540::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168406 (0x211656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: May  2 18:31:36 2023 GMT
            Not After : May  3 18:31:36 2025 GMT
        Subject: CN=e7cfa67977da8e2714e2bb7d1ddc3e11e313c1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:cc:69:e7:51:7e:9e:e1:27:a4:ce:b1:b4:
                    b5:98:9f:b7:24:82:e9:e3:95:ca:4a:38:d1:38:4b:
                    a8:7d:c8:b0:f6:c6:38:d5:51:62:bf:48:0a:a7:fd:
                    58:3c:48:a4:01:81:a3:ac:c5:94:1e:1d:39:08:3c:
                    9a:18:d9:1e:1d:16:63:be:77:de:b0:ab:80:06:c3:
                    c9:02:71:93:73:03:e8:09:3c:42:26:4d:94:7c:57:
                    aa:d0:55:d4:62:c5:4f:fa:03:b5:05:f7:32:b5:7d:
                    8d:82:bc:7b:81:92:69:80:b1:9e:2d:10:15:46:b3:
                    25:13:c4:5c:26:35:d3:50:f7:97:10:26:94:ef:b2:
                    5a:be:37:f9:56:05:d6:35:9a:8a:27:6b:10:75:fa:
                    d3:56:e4:81:9b:c1:c3:d3:e5:af:4d:f8:c4:f0:28:
                    af:b3:ba:07:b0:17:54:f9:ec:2d:22:99:d9:23:20:
                    c4:82:77:78:1d:57:76:ec:ec:bf:36:53:17:04:15:
                    2b:74:1d:ff:54:8f:55:17:c1:42:98:10:b7:b3:b1:
                    87:1f:bd:f3:33:cf:b8:43:f0:7e:54:3a:b7:ea:70:
                    6d:f5:23:52:bf:19:67:8d:e8:5d:a0:83:39:ab:0d:
                    73:6c:1d:42:b6:07:8f:10:ae:06:53:97:1e:7b:5f:
                    86:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E6:FA:39:53:D5:31:B7:D5:19:AE:23:CD:EC:B1:9A:28:C9:2C:AA
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/e7cfa67977da8e2714e2bb7d1ddc3e11e313c1ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.180.0/22
                  177.234.192.0/18
                  200.24.128.0/19
                IPv6:
                  2803:2540::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:e1:55:af:8b:47:29:3d:9a:b5:71:1f:ff:66:fa:d8:58:
         47:81:c6:ef:1f:00:2a:ec:47:4a:cf:87:33:c5:5c:b5:2b:aa:
         7a:4b:77:99:f2:08:fd:74:6a:a3:5c:d7:d0:b2:bc:c9:c4:78:
         fe:2b:0e:cb:65:37:12:2f:b9:1d:dd:3d:8f:18:d3:7a:86:ba:
         05:af:3c:9d:22:11:29:a8:80:a3:f7:20:55:a4:ee:49:50:7f:
         0f:c0:8a:ac:f8:b0:39:88:9d:db:fc:8e:33:38:16:50:47:4c:
         4e:4f:c1:b0:64:30:58:80:65:99:d3:bb:41:fa:9f:9e:44:f2:
         09:61:eb:b6:5c:54:0d:cd:53:97:20:e6:d6:29:6d:4f:97:8c:
         27:ae:13:e8:ff:97:ec:ca:05:b8:bc:9d:80:13:8a:ae:70:39:
         de:9d:d9:ab:be:25:10:89:2f:17:07:89:aa:6c:50:13:5f:4e:
         ef:72:f8:e3:23:e4:60:80:17:28:a0:9b:2b:34:44:23:f7:73:
         c6:82:4d:11:2c:21:8b:94:ac:f3:01:8e:a9:a6:7f:78:94:1c:
         9e:e8:49:34:df:0c:9b:33:55:ae:78:6f:dd:5f:5d:84:f2:2a:
         f8:b8:d5:5a:92:91:ee:4b:f3:6e:d7:8d:9e:53:f6:0e:94:46:
         2e:4e:06:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----