Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f62ed58f77d96a0a3b193cda690b999b28ecff77.roa
File:                     f62ed58f77d96a0a3b193cda690b999b28ecff77.roa (raw, json)
Hash identifier:          xiMDemDjIoXd7jDUwWcmsXklhnohbranJACPRP6FM8g=
Subject key identifier:   A1:43:A2:B2:46:85:DC:CD:F8:4C:9F:97:B4:90:32:3C:07:48:E7:28
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       2882EE
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f62ed58f77d96a0a3b193cda690b999b28ecff77.roa
Signing time:             Fri 03 Nov 2023 14:15:36 +0000
ROA not before:           Fri 03 Nov 2023 14:15:36 +0000
ROA not after:            Mon 03 Nov 2025 14:15:36 +0000
asID:                     3816
IP address blocks:        186.171.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2654958 (0x2882ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Nov  3 14:15:36 2023 GMT
            Not After : Nov  3 14:15:36 2025 GMT
        Subject: CN=f62ed58f77d96a0a3b193cda690b999b28ecff77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:87:f3:18:7c:5c:d0:64:d6:ce:7a:6e:9b:3b:
                    7f:a2:ce:a3:b4:ec:c6:ed:e3:2f:6f:19:49:b8:7f:
                    ca:18:3a:25:21:52:1b:ae:ed:c9:49:f1:a8:38:84:
                    d5:59:a8:9d:cd:d1:25:87:9e:c6:31:cb:fd:75:b1:
                    30:32:96:bc:dc:7e:a6:c4:35:ce:be:3a:72:41:4f:
                    6f:71:0f:69:2a:61:b5:4c:58:e4:aa:04:d8:86:fa:
                    4a:2f:78:fb:21:eb:bd:a2:52:d4:9c:ba:ff:92:0c:
                    c3:6e:06:c6:ad:7f:29:58:f9:e6:8c:6a:68:5c:da:
                    d2:f6:91:a0:5b:59:3a:c5:be:0d:5c:aa:12:0e:6f:
                    02:c9:57:5a:8a:fe:2d:82:dc:49:68:04:54:25:20:
                    de:a6:7d:0c:71:f8:d3:d4:d5:5f:56:68:68:40:81:
                    39:92:a3:b1:04:48:54:a0:62:cf:bb:58:8f:3e:52:
                    89:fc:7e:f2:1a:1b:3f:23:05:ec:b8:b2:1f:47:63:
                    8d:e9:d6:8b:e3:e9:9f:fb:e6:a7:1e:2e:f6:b1:35:
                    22:7a:ae:3a:d6:45:ad:7d:97:40:82:8f:49:6d:62:
                    90:54:83:ca:08:a5:27:de:15:5f:1b:72:ba:4c:2a:
                    dd:1f:82:f2:af:46:ec:80:a8:e7:d4:66:38:7d:e2:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:43:A2:B2:46:85:DC:CD:F8:4C:9F:97:B4:90:32:3C:07:48:E7:28
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f62ed58f77d96a0a3b193cda690b999b28ecff77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.171.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         68:1a:e3:74:f1:44:da:01:cb:9a:48:0f:2c:c1:29:1a:a5:6b:
         53:55:8e:c1:70:ad:de:67:ed:fa:f7:4b:af:d3:60:94:4c:c9:
         c5:2f:bb:66:ed:cb:c0:85:ac:20:91:e7:63:f9:66:43:53:2a:
         5c:cd:1b:8e:6f:f2:50:bd:45:c4:83:85:d4:43:ba:d0:d9:ce:
         0b:b3:9f:3d:54:cf:62:8c:7f:82:fe:86:d1:66:3c:4e:bc:87:
         4a:23:f5:7b:52:5b:7d:bc:8f:8c:4f:4f:58:f1:06:65:73:bd:
         98:f7:d2:2b:6d:c6:dc:6a:e9:9a:e7:0c:ec:44:23:17:d6:d8:
         99:c5:82:09:07:2d:a4:e7:fa:88:41:8d:e8:a6:22:e3:99:21:
         e2:9a:ea:c8:94:e6:5f:69:1a:11:21:3f:9a:76:c6:fe:74:df:
         05:12:75:f3:ee:21:9e:9c:72:34:ab:36:eb:60:8b:1e:ca:16:
         99:c7:d9:67:e5:c9:0a:3d:50:20:5e:88:81:a8:ae:71:24:8b:
         4e:e5:6a:a7:9b:1f:e2:0c:e9:52:b1:05:c1:fe:9b:c2:3c:75:
         99:2c:fe:db:30:5c:44:a6:0c:5f:fc:11:45:38:6c:9e:f1:18:
         5b:59:e9:f3:57:27:fb:f0:86:e8:9c:23:4a:31:a2:61:ff:07:
         91:09:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----