Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/6fb6d840fd2fd2b60891b4a98d18f8c1f0281f4c.roa
File:                     6fb6d840fd2fd2b60891b4a98d18f8c1f0281f4c.roa (raw, json)
Hash identifier:          BnaW6KM0dFfhhCPMVW/F9W4W1Zf65PEZZMJtSaG/vkU=
Subject key identifier:   14:2D:A7:33:0B:8B:9C:45:8D:07:02:C9:CA:B5:E8:8D:1F:76:AA:C4
Certificate issuer:       /CN=5dbe213308e1f657ad90814bcb8813d9fd9c8c4c
Certificate serial:       03B246
Authority key identifier: 3B:90:04:1A:AC:83:67:A2:CE:39:A6:10:AF:03:79:B5:70:EA:BB:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/6fb6d840fd2fd2b60891b4a98d18f8c1f0281f4c.roa
Signing time:             Fri 06 Oct 2023 12:38:53 +0000
ROA not before:           Thu 05 Oct 2023 12:38:53 +0000
ROA not after:            Mon 06 Oct 2025 12:38:53 +0000
asID:                     263213
IP address blocks:        191.97.96.0/22 maxlen: 24
                          2803:e280::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242246 (0x3b246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dbe213308e1f657ad90814bcb8813d9fd9c8c4c
        Validity
            Not Before: Oct  5 12:38:53 2023 GMT
            Not After : Oct  6 12:38:53 2025 GMT
        Subject: CN=6fb6d840fd2fd2b60891b4a98d18f8c1f0281f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:17:42:77:9b:71:41:0d:c7:8a:0a:1c:b6:
                    ac:da:f8:f2:96:d5:f9:d7:24:fb:f1:eb:0f:8e:68:
                    d0:c8:a1:a8:e2:b3:4c:15:52:a7:e6:24:5c:09:07:
                    87:99:e5:ea:e4:f2:f3:a1:8f:b1:cd:07:9f:5d:95:
                    c8:54:ba:5c:f3:63:4a:b7:18:e5:38:47:91:e7:ee:
                    e3:87:f5:6e:40:b9:50:ea:d2:af:0f:c7:c6:0e:60:
                    ca:f8:f2:9a:e9:c9:e5:01:f5:7b:9e:bd:ec:49:24:
                    90:2b:43:9f:92:83:d6:9d:10:02:60:d7:f1:59:a6:
                    da:22:aa:51:94:cb:93:86:22:ae:46:c5:6d:f2:e9:
                    c3:9a:11:f2:1b:e2:c2:fe:a8:1f:40:8e:11:91:4b:
                    69:96:5e:10:c8:9e:2b:d6:91:4f:4e:3e:77:5c:4f:
                    76:c3:da:29:91:23:ad:40:df:a4:49:e4:2e:22:57:
                    b2:9e:d0:8c:b4:be:34:f2:2a:8a:d2:67:87:a3:05:
                    19:14:85:db:85:f0:73:64:26:a8:a3:99:3e:9a:bc:
                    11:78:fa:1c:22:8a:10:76:2f:1c:79:b8:f5:6f:f9:
                    24:c3:7f:c4:7a:3b:56:cc:8e:03:af:2b:83:a0:26:
                    c4:cf:d0:de:bd:ea:b6:7a:62:68:f4:0c:04:46:9a:
                    c4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2D:A7:33:0B:8B:9C:45:8D:07:02:C9:CA:B5:E8:8D:1F:76:AA:C4
            X509v3 Authority Key Identifier:
                keyid:3B:90:04:1A:AC:83:67:A2:CE:39:A6:10:AF:03:79:B5:70:EA:BB:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/6fb6d840fd2fd2b60891b4a98d18f8c1f0281f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.96.0/22
                IPv6:
                  2803:e280::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:4e:ab:c7:f8:0b:3c:94:2c:aa:af:8a:16:1f:9e:b6:60:31:
         fc:29:5f:b4:ec:90:a5:18:72:bf:89:33:1c:07:3d:a2:94:3a:
         82:26:4e:05:76:31:3b:87:56:ab:2d:c4:ea:b2:f6:08:ef:20:
         db:05:2a:c1:f7:93:40:f7:70:11:2f:2e:b3:b8:8e:2a:8b:e7:
         c0:45:ab:b6:b9:d9:90:fe:2a:2c:8c:95:44:9f:c6:c2:b1:83:
         5d:e0:a3:f2:cb:46:71:3e:8a:69:35:c8:3d:d6:18:b1:6f:6c:
         77:46:47:ee:ff:c8:6f:7a:ed:09:5f:3e:17:bc:32:77:32:f8:
         07:5a:14:81:a5:49:f4:e7:d1:22:92:6f:6b:53:06:36:38:01:
         fb:5a:4c:8f:3a:4c:a6:ca:fc:cd:09:15:8a:8a:ee:ed:b6:9d:
         a5:da:67:c7:1c:16:54:b3:a3:28:49:45:1e:b7:8f:4d:3a:52:
         55:e8:43:8c:f4:88:d9:3d:f0:ee:26:f4:a9:aa:75:a8:e5:94:
         fd:db:84:42:48:f7:d0:3f:c3:57:b4:9d:1b:95:c4:ea:59:7c:
         7a:f5:c6:be:c1:af:11:5e:4a:27:3f:9d:d2:82:01:86:13:5e:
         5f:c5:98:d3:ef:eb:51:cf:87:77:7e:f5:6c:41:7b:25:41:85:
         b2:0a:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----