Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/3d80140fb4acae3ea40f194b9d06d7dab1b9f59a.roa
File:                     3d80140fb4acae3ea40f194b9d06d7dab1b9f59a.roa (raw, json)
Hash identifier:          bbhjMyLlhNjIgX6f3uXMa0HcCh8qnMkdLOh0lJKglPM=
Subject key identifier:   6E:DA:E3:5C:82:9F:E8:B0:EE:5D:62:BA:19:C5:B0:C8:22:FB:EE:2A
Certificate issuer:       /CN=3fd7e91493678e5c49e72c20d07d4a277e63f224
Certificate serial:       202B5E
Authority key identifier: 53:47:76:B6:35:82:22:3D:B7:70:E1:E7:C8:FC:AB:13:24:64:75:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fd7e91493678e5c49e72c20d07d4a277e63f224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/3d80140fb4acae3ea40f194b9d06d7dab1b9f59a.roa
Signing time:             Wed 12 Apr 2023 15:50:35 +0000
ROA not before:           Sat 20 Mar 2021 03:00:00 +0000
ROA not after:            Sun 24 Mar 2030 03:00:00 +0000
asID:                     27960
IP address blocks:        179.60.96.0/20 maxlen: 23
                          190.122.32.0/20 maxlen: 23
                          190.122.48.0/20 maxlen: 23
                          200.49.120.0/21 maxlen: 23
                          2803:d080::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108254 (0x202b5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd7e91493678e5c49e72c20d07d4a277e63f224
        Validity
            Not Before: Mar 20 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2030 GMT
        Subject: CN=3d80140fb4acae3ea40f194b9d06d7dab1b9f59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:1c:c5:fe:72:9f:77:3b:d1:e7:da:52:59:
                    fa:8f:75:ff:51:96:f4:c2:55:a1:fe:ee:36:fc:ca:
                    c9:70:a6:28:f3:64:19:aa:37:b5:f4:f3:c5:a0:d0:
                    15:59:da:92:6b:43:05:02:1a:90:a1:42:f8:06:bd:
                    75:a2:72:16:ae:fd:e2:d3:30:17:e8:16:d0:99:b7:
                    ea:62:a7:24:2a:ad:8b:f1:78:36:25:b6:50:6f:c6:
                    8e:02:93:1e:0f:47:b7:dc:eb:7d:ae:0a:82:f1:40:
                    0c:19:61:ca:c9:97:ec:bf:c0:f0:3d:e3:b4:69:be:
                    27:ee:44:f6:39:fe:cd:24:fc:10:46:b0:cf:7e:f8:
                    77:4c:15:1a:a3:6e:d0:8c:37:37:0a:41:9b:d6:73:
                    b1:9a:41:bf:92:08:7b:c1:2e:60:a3:8b:c5:16:72:
                    a3:57:c6:c3:f5:5d:83:c6:a8:3e:e3:14:da:0e:b4:
                    78:c7:fa:dd:5a:c5:84:fe:3e:c2:62:d8:55:48:61:
                    b0:35:7b:75:9a:92:2c:75:37:5d:88:95:38:2e:d3:
                    f0:54:43:1d:22:f9:92:e8:10:86:4a:f7:6c:2d:e1:
                    b4:b8:bc:93:7c:c0:2f:31:80:78:aa:84:26:97:8b:
                    e6:e6:57:64:34:e5:e1:ad:57:de:28:b9:49:8e:4a:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DA:E3:5C:82:9F:E8:B0:EE:5D:62:BA:19:C5:B0:C8:22:FB:EE:2A
            X509v3 Authority Key Identifier:
                keyid:53:47:76:B6:35:82:22:3D:B7:70:E1:E7:C8:FC:AB:13:24:64:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fd7e91493678e5c49e72c20d07d4a277e63f224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/3d80140fb4acae3ea40f194b9d06d7dab1b9f59a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/3fd7e91493678e5c49e72c20d07d4a277e63f224.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.96.0/20
                  190.122.32.0/19
                  200.49.120.0/21
                IPv6:
                  2803:d080::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:fd:cf:04:fd:9c:fa:08:a6:96:c9:2c:d2:a2:af:7a:db:
         27:2d:b8:d8:5b:97:b9:53:29:ad:7e:39:f3:81:2a:2a:fd:5d:
         9c:06:a1:f6:cf:70:84:50:cb:ca:9c:a5:06:99:fe:9a:5f:5e:
         6f:3e:53:5a:c7:83:4b:7d:2e:fc:b4:09:c9:a9:57:62:6e:2d:
         77:c3:5e:42:c2:44:30:4e:c1:d6:fe:82:4e:cf:cb:0e:37:22:
         92:2e:11:57:c3:08:86:4c:79:71:85:95:d8:a3:9f:6a:57:b6:
         6e:08:05:a0:e8:3c:15:95:0f:6d:9b:10:7c:7d:f8:05:ab:6d:
         d5:45:80:98:50:e2:4e:2e:13:15:49:23:0c:a5:37:e9:7c:a2:
         1c:3b:f9:6c:e9:db:91:ed:9c:81:0e:e8:57:6f:68:8d:92:24:
         08:d4:84:a9:99:3f:c0:7b:15:d4:2b:0c:32:a7:14:d4:6c:d9:
         b1:44:15:b5:b4:17:eb:0e:c3:39:b3:a1:a2:88:13:25:b6:a1:
         0d:ba:c1:d8:53:49:e9:8a:4e:89:93:ba:00:0e:e0:a9:0c:3e:
         15:b6:4c:29:64:2f:f0:ca:04:5a:7c:62:eb:68:b8:a5:11:a6:
         81:b5:65:f7:2d:39:35:78:59:a1:6e:47:04:e6:3f:a3:1e:8f:
         f9:8d:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----