Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/e16febb630f3b7c9061b2b0ef06f76f025546bbe.roa
File:                     e16febb630f3b7c9061b2b0ef06f76f025546bbe.roa (raw, json)
Hash identifier:          nTrBfeSu49y4smRRfsxkF4/48b+8lFPyHiNDf310cxo=
Subject key identifier:   E1:84:D0:4C:17:7C:9F:49:6C:7E:F9:16:74:5E:D8:CD:E1:82:B0:1D
Certificate issuer:       /CN=3ec2580c7b1428c52b125216e3788d1f223af85f
Certificate serial:       177128
Authority key identifier: D1:17:91:28:50:01:02:52:FE:D7:CD:F1:D3:6D:F5:FA:E3:8E:1D:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ec2580c7b1428c52b125216e3788d1f223af85f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/e16febb630f3b7c9061b2b0ef06f76f025546bbe.roa
Signing time:             Tue 01 Aug 2023 08:30:00 +0000
ROA not before:           Mon 31 Jul 2023 08:30:00 +0000
ROA not after:            Wed 30 Jul 2025 08:30:00 +0000
asID:                     262186
IP address blocks:        177.93.32.0/19 maxlen: 24
                          181.225.96.0/20 maxlen: 24
                          186.96.96.0/19 maxlen: 24
                          186.148.160.0/19 maxlen: 24
                          186.179.96.0/20 maxlen: 24
                          186.190.224.0/21 maxlen: 24
                          190.2.208.0/21 maxlen: 24
                          190.13.80.0/21 maxlen: 24
                          191.97.0.0/20 maxlen: 24
                          191.102.64.0/18 maxlen: 24
                          192.144.112.0/22 maxlen: 24
                          200.69.64.0/19 maxlen: 24
                          2803:1a00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1536296 (0x177128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec2580c7b1428c52b125216e3788d1f223af85f
        Validity
            Not Before: Jul 31 08:30:00 2023 GMT
            Not After : Jul 30 08:30:00 2025 GMT
        Subject: CN=e16febb630f3b7c9061b2b0ef06f76f025546bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:35:4c:9f:d1:39:23:41:fb:35:40:36:d6:db:
                    11:c0:41:29:9a:0f:d0:08:fd:4e:eb:31:f9:44:bf:
                    d4:c4:f8:c0:c5:80:50:c0:7a:a5:01:b6:c0:69:96:
                    b8:05:e0:a0:e6:59:ff:71:07:79:c6:f7:79:23:f9:
                    e3:18:c3:3e:8a:4f:8d:f2:ff:3f:d8:2c:cf:22:6e:
                    38:91:0b:aa:c6:83:46:91:2d:89:be:c8:27:06:7a:
                    44:c1:b2:97:7a:15:42:7b:08:36:b7:73:ea:c3:ef:
                    2e:48:3e:10:57:58:55:36:14:7e:05:22:2d:07:30:
                    dd:a1:90:96:60:a3:01:fd:8c:2a:1d:82:54:5e:8b:
                    ee:fd:1a:b0:c7:95:73:39:bf:0f:d1:78:bc:a5:d1:
                    e2:9a:2e:03:4e:45:e7:12:c1:c5:69:b8:0f:83:2e:
                    19:c3:97:a1:67:f2:54:b5:f8:e0:95:00:59:8a:f2:
                    07:35:1f:e4:c6:25:c7:8c:0f:1d:5a:a5:f2:34:4b:
                    df:54:32:bb:64:07:26:9a:1e:c2:90:7b:1c:07:27:
                    43:55:b8:fc:89:ee:ec:b8:a7:07:b5:97:c5:dd:5e:
                    51:85:8c:75:75:9f:c6:cc:c8:b8:5a:4c:60:36:f4:
                    04:bf:5a:94:36:0e:19:62:84:41:73:31:a8:8f:03:
                    ca:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:84:D0:4C:17:7C:9F:49:6C:7E:F9:16:74:5E:D8:CD:E1:82:B0:1D
            X509v3 Authority Key Identifier:
                keyid:D1:17:91:28:50:01:02:52:FE:D7:CD:F1:D3:6D:F5:FA:E3:8E:1D:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ec2580c7b1428c52b125216e3788d1f223af85f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/e16febb630f3b7c9061b2b0ef06f76f025546bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/3ec2580c7b1428c52b125216e3788d1f223af85f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.32.0/19
                  181.225.96.0/20
                  186.96.96.0/19
                  186.148.160.0/19
                  186.179.96.0/20
                  186.190.224.0/21
                  190.2.208.0/21
                  190.13.80.0/21
                  191.97.0.0/20
                  191.102.64.0/18
                  192.144.112.0/22
                  200.69.64.0/19
                IPv6:
                  2803:1a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:67:4b:c6:2a:95:7d:13:5a:a4:a4:fe:12:37:d1:5d:50:77:
         d3:df:c1:9c:e5:51:8e:32:99:11:36:0c:c9:69:b8:9e:92:57:
         9c:67:9e:40:6a:ac:9b:2d:62:2c:a6:02:3c:2d:58:9c:a3:54:
         a4:aa:c2:a5:62:83:7a:84:1b:55:65:13:d7:38:d2:d0:6a:04:
         66:69:70:bb:b5:c4:fc:ca:80:f8:7a:ac:eb:4c:e7:42:e5:1e:
         e1:89:f4:03:09:6a:ad:03:43:cc:b4:88:2e:2c:32:9d:7d:cf:
         48:57:ea:3b:eb:71:dc:99:bf:01:9c:d5:00:99:17:0d:b3:d4:
         02:ec:86:89:2e:12:cf:f4:c3:40:a3:10:a8:91:57:61:94:9d:
         b1:67:49:eb:0a:03:59:49:af:47:5a:56:e5:90:b8:b9:f3:ca:
         78:b7:bb:d8:86:3a:07:55:75:c3:a2:9c:2b:6d:43:43:85:28:
         0a:6a:ef:17:03:dd:62:15:0a:9b:65:3b:ee:a3:80:8a:18:42:
         b4:b2:7f:b8:21:2d:de:33:c4:03:c8:07:82:59:72:85:06:03:
         7e:3e:d3:18:fc:f3:43:9c:74:3c:d2:92:46:db:3b:33:3b:65:
         e9:6c:e4:0f:de:3a:85:c4:14:15:cc:62:9a:52:cb:82:f8:51:
         f5:93:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----