Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6eb975e-95cc-435b-93e7-5336029da54a/90406f9bf89b8e2160f434b6a529a2918089d18d.roa
File:                     90406f9bf89b8e2160f434b6a529a2918089d18d.roa (raw, json)
Hash identifier:          ccwYCQv33rjLajfaJN0CR5xvRIzw2IT9TrfZvzd3/EI=
Subject key identifier:   CB:0D:41:EC:6F:E0:7F:01:83:CE:BD:47:AC:53:31:83:D5:E1:3D:5B
Certificate issuer:       /CN=6e1291537c801e1886268f46675ed50433e38e93
Certificate serial:       221C63
Authority key identifier: 78:2B:BB:89:A9:2C:DC:88:66:B2:A9:12:DB:EF:87:57:DA:B9:07:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e1291537c801e1886268f46675ed50433e38e93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6eb975e-95cc-435b-93e7-5336029da54a/90406f9bf89b8e2160f434b6a529a2918089d18d.roa
Signing time:             Thu 21 Sep 2023 20:20:21 +0000
ROA not before:           Wed 20 Sep 2023 20:20:21 +0000
ROA not after:            Sun 21 Sep 2025 20:20:21 +0000
asID:                     264642
IP address blocks:        181.177.0.0/18 maxlen: 24
                          186.190.128.0/19 maxlen: 24
                          2803:cf00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235491 (0x221c63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1291537c801e1886268f46675ed50433e38e93
        Validity
            Not Before: Sep 20 20:20:21 2023 GMT
            Not After : Sep 21 20:20:21 2025 GMT
        Subject: CN=90406f9bf89b8e2160f434b6a529a2918089d18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:16:87:7c:0f:9e:82:da:24:22:90:54:bf:68:
                    37:3d:0b:c8:b4:4c:73:d6:6e:bd:68:f7:27:74:d0:
                    1c:09:f6:14:81:cf:60:f8:c5:6c:9c:e6:ab:53:6a:
                    2a:4c:ee:42:98:2d:d9:2c:44:0e:8b:6a:5f:5b:63:
                    b7:7a:35:c6:0c:1e:89:e3:f5:a5:84:a8:bd:ea:8a:
                    60:0b:5a:22:d4:13:6d:51:35:82:65:c5:d2:bd:f5:
                    e9:02:4d:38:96:7b:19:37:af:8b:1c:e7:16:9e:38:
                    d6:32:f5:71:2c:3f:6d:cb:ec:84:93:4f:4b:69:d6:
                    10:c8:d3:e9:b0:b0:13:58:37:ee:0a:97:63:3a:af:
                    ae:d5:4b:25:32:47:5f:18:bb:98:84:01:88:9d:14:
                    de:49:4c:50:28:87:d3:dd:cb:68:3d:58:b1:55:a6:
                    0e:1a:dd:71:30:e7:c6:57:8a:ee:0b:6d:2c:bc:c1:
                    b5:0f:76:fb:ee:15:a1:1d:6b:45:70:e9:e7:dc:41:
                    65:fb:4b:b4:e1:2f:ad:79:26:47:4d:3e:81:7f:03:
                    aa:b6:c9:a6:f6:4f:a0:8d:bb:15:7e:10:be:33:2f:
                    60:f3:bb:ea:16:01:fa:97:c6:25:b7:bf:3c:f4:af:
                    04:d4:ca:4e:53:18:d2:52:75:41:90:ec:4b:59:70:
                    36:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0D:41:EC:6F:E0:7F:01:83:CE:BD:47:AC:53:31:83:D5:E1:3D:5B
            X509v3 Authority Key Identifier:
                keyid:78:2B:BB:89:A9:2C:DC:88:66:B2:A9:12:DB:EF:87:57:DA:B9:07:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e1291537c801e1886268f46675ed50433e38e93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6eb975e-95cc-435b-93e7-5336029da54a/90406f9bf89b8e2160f434b6a529a2918089d18d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6eb975e-95cc-435b-93e7-5336029da54a/6e1291537c801e1886268f46675ed50433e38e93.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.0.0/18
                  186.190.128.0/19
                IPv6:
                  2803:cf00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:06:7e:63:50:06:e7:2b:fc:25:cc:eb:a5:95:00:31:b7:72:
         0d:4b:bc:7a:f4:e5:e2:72:89:f6:d2:86:b0:5b:3e:34:a8:ed:
         3e:84:e6:fd:09:f4:d9:c1:8a:fe:6c:1b:6b:43:37:b8:c3:21:
         a7:82:b9:71:1f:01:b0:ea:81:30:0d:47:97:04:6d:43:32:de:
         cc:2a:03:e3:31:30:6d:c4:3f:9c:f0:62:2c:65:8b:02:ee:c3:
         1e:52:c0:24:ba:f5:ab:17:e0:aa:b8:f5:08:f5:33:2e:cd:78:
         96:ac:dc:ea:75:b9:08:5f:c9:be:bb:6a:8c:94:7d:da:d2:43:
         2a:a1:54:e7:fd:49:6e:e3:70:2e:6c:1b:18:04:38:6c:32:c8:
         3f:f5:bd:7a:6b:c2:bf:12:fc:b7:6c:ec:29:52:8b:78:71:30:
         1b:67:f3:bb:99:c9:ad:e1:31:6c:64:9f:e6:6e:8b:7a:6f:83:
         34:3d:21:8f:69:86:d3:4c:39:05:17:01:db:c4:05:4c:06:f8:
         c1:a7:8b:91:e4:c2:27:ec:52:a5:1f:38:00:3b:31:78:7c:45:
         4a:ab:7e:9a:d5:15:3b:3a:af:4b:13:4d:a0:8b:41:70:54:2e:
         59:58:6c:6b:d3:97:8f:83:88:3d:3e:0d:c2:2a:14:07:9a:df:
         2d:9d:b2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----