Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ab4024c7-60fb-4f48-963e-2d1377b61304/9d524461e949c506529bdbd9399146efef2b79ac.roa
File:                     9d524461e949c506529bdbd9399146efef2b79ac.roa (raw, json)
Hash identifier:          0X/SeeytXiheiKUl48Nd3iXATfQTo0JNRTLHatQvSJA=
Subject key identifier:   B8:F6:BE:F9:52:C5:DB:72:D3:7C:E8:6C:90:6C:29:BC:3B:80:A5:19
Certificate issuer:       /CN=d7316fc96d2d5973d8887515fc14f7342915f202
Certificate serial:       11BCE5
Authority key identifier: 38:60:AD:1F:CA:BD:33:D9:08:79:B2:60:85:5A:6E:FD:67:74:80:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7316fc96d2d5973d8887515fc14f7342915f202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ab4024c7-60fb-4f48-963e-2d1377b61304/9d524461e949c506529bdbd9399146efef2b79ac.roa
Signing time:             Sat 12 Aug 2023 08:30:01 +0000
ROA not before:           Fri 11 Aug 2023 08:30:01 +0000
ROA not after:            Sun 10 Aug 2025 08:30:01 +0000
asID:                     52327
IP address blocks:        190.111.177.0/24 maxlen: 24
                          201.77.2.0/23 maxlen: 24
                          2803:a1e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162469 (0x11bce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7316fc96d2d5973d8887515fc14f7342915f202
        Validity
            Not Before: Aug 11 08:30:01 2023 GMT
            Not After : Aug 10 08:30:01 2025 GMT
        Subject: CN=9d524461e949c506529bdbd9399146efef2b79ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:71:62:d0:06:58:65:4f:48:98:56:a0:a6:99:
                    a2:9d:32:e0:31:56:3b:53:3f:5a:49:02:d4:95:53:
                    d3:78:78:19:a7:ba:2d:6e:ec:00:d3:a9:3c:04:5d:
                    02:cf:83:d5:a6:1c:69:f5:ec:24:00:d2:af:59:5e:
                    8f:83:28:0c:13:e7:cf:83:dc:d5:ca:b7:57:42:08:
                    61:ae:c6:09:66:e6:19:ad:3b:c9:58:91:87:4b:51:
                    8b:66:3d:55:b0:ea:f3:59:c2:81:f1:1d:82:aa:c9:
                    b7:2c:2b:b1:fd:b0:d7:5d:82:fc:0a:8a:41:59:d2:
                    d1:54:b8:09:73:ff:59:f4:cb:69:a9:3b:f1:98:73:
                    7e:50:e2:ca:6a:ee:63:ac:59:1b:28:13:97:a8:ff:
                    bd:e4:ad:28:39:b8:de:55:f9:4b:f6:f9:0e:e3:9b:
                    a0:e6:db:7d:7b:5d:31:28:1d:2e:d5:8a:6e:59:5d:
                    13:0c:8a:57:4a:2d:e2:46:8d:19:66:cc:be:cb:e6:
                    ef:77:5d:af:e6:28:63:71:42:27:58:dc:a6:26:b4:
                    b1:57:1e:db:83:7a:43:e2:14:47:cf:98:1b:bf:35:
                    48:18:43:5b:55:31:34:37:18:9c:96:fa:8f:d6:b7:
                    65:39:f5:f3:70:9e:91:e6:34:a5:60:71:84:5a:58:
                    4d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F6:BE:F9:52:C5:DB:72:D3:7C:E8:6C:90:6C:29:BC:3B:80:A5:19
            X509v3 Authority Key Identifier:
                keyid:38:60:AD:1F:CA:BD:33:D9:08:79:B2:60:85:5A:6E:FD:67:74:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7316fc96d2d5973d8887515fc14f7342915f202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ab4024c7-60fb-4f48-963e-2d1377b61304/9d524461e949c506529bdbd9399146efef2b79ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ab4024c7-60fb-4f48-963e-2d1377b61304/d7316fc96d2d5973d8887515fc14f7342915f202.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.177.0/24
                  201.77.2.0/23
                IPv6:
                  2803:a1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:33:d7:63:11:aa:aa:61:1e:3b:d3:66:2c:58:e7:52:6d:ae:
         c0:59:d3:cd:5e:f1:08:07:7d:d2:d4:2c:80:41:bd:23:cf:49:
         42:b6:39:31:cb:42:73:db:e6:1b:8b:13:cd:4d:e2:eb:21:8c:
         a5:40:9e:97:0e:32:7b:2c:90:ac:de:44:89:63:dc:82:35:e1:
         f6:79:4b:23:f6:0c:36:d6:b6:8f:48:ad:e4:00:16:8e:05:07:
         32:b7:ae:f2:1a:dc:9a:31:1f:26:29:bf:ae:6f:d7:bd:3b:0c:
         a3:8a:36:2e:1b:00:bb:14:e9:db:1f:21:10:9a:e2:ec:83:00:
         ad:99:52:59:fc:0c:fa:5d:23:ad:94:fc:a0:3d:13:49:f7:a1:
         cd:46:22:50:a0:1e:cf:36:24:cc:75:17:ad:a7:8c:43:ee:3e:
         8f:98:c0:e7:1c:8c:7d:7a:3f:0a:b4:c8:14:0c:73:e8:79:13:
         87:e3:21:99:fb:23:65:73:a2:a7:be:92:43:1a:36:dc:5d:c2:
         1a:9b:f1:d7:d2:4a:b0:0a:a4:8b:e3:8e:7b:00:e1:a1:37:4a:
         e7:33:38:0c:e5:a1:fb:09:d8:e8:f0:bd:61:82:9b:d6:48:fe:
         19:eb:78:d5:54:d0:b3:f8:17:54:55:7a:ca:c8:11:f3:f2:d3:
         d6:0a:ce:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----