Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/e72ea1198c70e858a09be33d460014ad0376d430.roa
File:                     e72ea1198c70e858a09be33d460014ad0376d430.roa (raw, json)
Hash identifier:          iOIe7b9jFVBS9f4us4Zi49sD0+HUCwEmRDJ7i43FKXk=
Subject key identifier:   F6:FC:F1:6B:5D:BB:71:3E:72:3B:EE:6C:6F:CB:D7:62:9F:EE:15:D6
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       20EB9A
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/e72ea1198c70e858a09be33d460014ad0376d430.roa
Signing time:             Mon 27 Feb 2023 17:13:09 +0000
ROA not before:           Mon 22 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     26613
IP address blocks:        190.152.95.0/24 maxlen: 24
                          2800:370:4::/48 maxlen: 64
                          2800:370:18::/48 maxlen: 64
                          2800:370:3e::/48 maxlen: 64
                          2800:370:4007::/48 maxlen: 64
                          2800:370:2a::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157466 (0x20eb9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 22 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=e72ea1198c70e858a09be33d460014ad0376d430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:8d:6e:83:7c:c7:66:ad:81:0d:3e:eb:2c:
                    8e:10:88:ef:5a:94:d4:04:a5:4c:65:bc:0f:d8:95:
                    58:42:8e:f4:1f:9a:dd:33:91:79:40:34:a5:cc:da:
                    72:03:06:8d:72:ef:5f:3f:b7:0c:01:19:bd:b3:82:
                    c3:ec:3b:fc:8e:c0:35:d0:07:79:ec:7e:61:e9:66:
                    8d:53:bf:50:2b:61:78:c2:07:ae:14:f3:43:78:79:
                    c4:2b:3e:2c:e5:35:ac:dc:e2:db:d2:b3:77:3f:8f:
                    d3:37:0e:3b:b8:ac:a7:83:62:50:5d:ac:97:80:d8:
                    92:40:54:1e:11:d0:c1:72:40:af:5b:81:97:8d:9c:
                    05:33:f5:f4:62:c7:50:6c:2e:c4:86:84:25:c6:18:
                    c3:5b:c3:ae:c8:28:b6:be:7e:86:12:7e:64:13:e4:
                    ce:f9:63:49:f7:f9:31:cb:16:72:ac:81:5f:76:16:
                    15:bf:df:0a:30:53:1a:da:cb:9e:c1:46:22:f0:b4:
                    0d:0a:0f:15:df:e5:3b:ae:6d:61:29:a3:b4:48:05:
                    06:58:c6:0f:e0:69:62:7c:4f:5d:cb:86:15:c7:a7:
                    98:c3:36:a1:ce:d6:2d:b7:15:16:e2:fe:d2:2d:70:
                    34:2e:b5:23:09:14:7d:e7:89:df:72:00:ef:a1:46:
                    a8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FC:F1:6B:5D:BB:71:3E:72:3B:EE:6C:6F:CB:D7:62:9F:EE:15:D6
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/e72ea1198c70e858a09be33d460014ad0376d430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.152.95.0/24
                IPv6:
                  2800:370:4::/48
                  2800:370:18::/48
                  2800:370:2a::/48
                  2800:370:3e::/48
                  2800:370:4007::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:66:8c:f5:4d:8c:3f:7e:c1:bd:c6:10:81:7c:90:ba:b7:61:
         15:b6:24:65:5f:e7:da:08:e1:5f:af:21:82:8c:cb:06:5d:4b:
         b6:25:0a:53:ae:d2:89:e8:5c:10:bb:83:f8:a1:32:c5:d5:b1:
         81:9f:63:13:45:a9:ee:74:1d:ce:cf:c0:d3:db:b1:2b:d9:f9:
         47:92:68:df:4c:18:c0:62:59:9a:77:d3:eb:91:80:fb:81:c5:
         4f:42:4d:7f:64:d3:0e:70:b0:27:23:c5:0b:16:b4:58:a7:db:
         f2:16:97:18:7b:a3:66:b9:01:52:1c:59:1f:ed:9e:bd:20:bb:
         ad:6b:8d:f0:6c:8b:8e:20:87:af:32:36:d5:b5:ae:5b:97:0f:
         f3:97:0e:b9:77:d9:ba:58:30:ca:42:3c:62:9d:dc:d0:67:8d:
         1c:ef:23:87:64:9f:cf:22:5e:7b:66:eb:5e:da:fb:bb:2e:c1:
         60:e3:4e:5c:7c:a5:d9:dd:87:36:27:74:68:03:1c:58:80:44:
         dd:82:85:73:ad:7f:bb:18:ce:0d:01:7f:94:86:ec:a2:dc:1a:
         1e:3b:22:fa:b0:69:66:8c:18:08:39:47:1d:84:0d:d0:fc:d2:
         d0:c2:69:7d:87:41:8e:0a:61:1d:b1:75:c1:b1:9b:01:c6:95:
         d0:39:bb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----