Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/e9cb76d9e39886574513b6b5c37e030f51813df3.roa
File:                     e9cb76d9e39886574513b6b5c37e030f51813df3.roa (raw, json)
Hash identifier:          y4n6Ln2HX7ecrsiyFCFOMTBV0ovUu81ZZoQlEcOIS+A=
Subject key identifier:   05:DB:C5:A8:B5:7C:C4:66:21:BF:CE:7C:35:D8:31:F7:4A:DB:30:EA
Certificate issuer:       /CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
Certificate serial:       125BF6
Authority key identifier: E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/e9cb76d9e39886574513b6b5c37e030f51813df3.roa
Signing time:             Mon 11 Oct 2021 16:42:01 +0000
ROA not before:           Thu 12 Aug 2021 03:00:00 +0000
ROA not after:            Sat 12 Aug 2023 03:00:00 +0000
asID:                     23243
IP address blocks:        181.189.128.0/24 maxlen: 24
                          181.189.144.0/21 maxlen: 24
                          181.189.152.0/24 maxlen: 24
                          190.111.17.0/24 maxlen: 24
                          190.111.24.0/24 maxlen: 24
                          190.111.29.0/24 maxlen: 24
                          200.94.249.0/24 maxlen: 24
                          200.94.251.0/24 maxlen: 24
                          2803:3a00::/37 maxlen: 48
                          2803:3a00:1800::/37 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1203190 (0x125bf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
        Validity
            Not Before: Aug 12 03:00:00 2021 GMT
            Not After : Aug 12 03:00:00 2023 GMT
        Subject: CN=e9cb76d9e39886574513b6b5c37e030f51813df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:36:f2:33:b9:6b:f9:94:93:c5:d0:59:2f:
                    62:0b:1f:73:d4:a2:fd:d3:96:25:b7:ec:8c:f6:4a:
                    5d:13:d2:ad:4d:73:c5:04:6e:64:38:cc:b7:ce:99:
                    0e:e5:82:98:0b:c1:6c:f0:6b:6e:5b:90:ed:c8:ae:
                    58:7c:f0:01:60:07:86:11:91:97:14:c9:51:be:fd:
                    b6:19:cc:df:15:a0:3f:b2:4c:96:13:b5:b4:ee:a6:
                    7d:cb:c8:82:06:24:14:51:7c:76:0e:09:f2:16:7d:
                    d5:08:21:6c:51:bd:4d:17:fd:15:b4:95:09:0d:88:
                    9d:52:a3:64:a0:42:b9:8c:0b:81:4a:33:bf:36:d1:
                    1b:39:e1:c7:b1:0f:a5:57:55:ab:00:f8:e3:5f:5a:
                    9c:11:6e:26:7f:b5:f6:01:cb:6b:25:3d:7f:71:7a:
                    69:25:b9:1b:2b:c8:d2:f7:45:25:3e:c2:c4:af:73:
                    bf:9e:72:2b:93:9c:6e:87:a8:38:f1:dc:39:30:8f:
                    23:08:a7:2e:a0:cb:70:c8:5d:ba:52:21:fc:fb:a0:
                    06:0d:84:02:67:99:c8:e7:fe:69:bb:43:ff:a2:5b:
                    91:8d:40:6d:ed:5d:33:ff:4f:6a:d3:2e:69:49:08:
                    41:e4:70:a4:74:f6:70:4b:27:53:c1:84:c6:e0:79:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DB:C5:A8:B5:7C:C4:66:21:BF:CE:7C:35:D8:31:F7:4A:DB:30:EA
            X509v3 Authority Key Identifier:
                keyid:E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/e9cb76d9e39886574513b6b5c37e030f51813df3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9fa677563ca5bfe6068216c74122a5d7cb2db27a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.128.0/24
                  181.189.144.0-181.189.152.255
                  190.111.17.0/24
                  190.111.24.0/24
                  190.111.29.0/24
                  200.94.249.0/24
                  200.94.251.0/24
                IPv6:
                  2803:3a00::/37
                  2803:3a00:1800::/37

    Signature Algorithm: sha256WithRSAEncryption
         da:2a:d6:20:d7:6f:ee:c6:5d:6e:ce:b9:4a:50:8a:fe:c9:ab:
         d8:7b:c2:a3:69:31:03:37:94:bb:6e:9f:2e:44:eb:b8:0e:72:
         2e:1e:7c:97:47:55:58:71:a4:90:cc:3f:6b:94:d0:34:3d:2a:
         cf:9b:50:bf:2f:dd:5c:fa:7c:80:66:18:e8:38:d8:c8:cb:f5:
         f0:06:eb:f3:fc:e8:5a:ab:da:f7:9c:33:37:d8:d1:70:33:4f:
         9d:5c:dc:b7:f9:1c:94:2e:2e:45:7e:73:49:09:f3:7b:00:f7:
         50:fb:ed:e7:6d:28:bc:f0:65:d8:4c:9b:5e:3c:2f:f6:91:d2:
         62:83:10:95:15:2a:24:91:e3:52:e7:4a:39:bb:31:08:9a:01:
         96:52:94:fd:b5:d6:46:ce:d8:73:64:53:72:95:8c:35:05:dc:
         52:89:0e:a0:20:7c:9a:b5:3e:55:61:1d:77:ee:fa:1c:d9:8b:
         47:b5:a4:51:23:16:ed:ac:0d:81:61:ec:3a:c4:73:af:ae:ec:
         bf:f7:dc:b2:ba:37:7c:82:9e:26:42:bc:88:6c:e6:44:ab:5c:
         21:e6:0b:70:63:66:cc:c7:97:32:26:f0:63:30:02:2e:01:d8:
         53:24:99:53:bf:bc:b7:68:5e:44:45:66:da:b4:f4:73:00:89:
         91:e1:dc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----