Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c24cc83f-3ffc-4023-ad4f-42ebd1c265f1/f72328dab5a2e7b6cfa06da78402ab03d4420572.roa
File:                     f72328dab5a2e7b6cfa06da78402ab03d4420572.roa (raw, json)
Hash identifier:          Zq/yxp1U+u6RALuZd7syaYEtq+HhVbUVzRiOP92OvYo=
Subject key identifier:   01:93:AC:46:66:EE:1C:B5:07:15:83:C5:33:B1:1B:50:07:6A:14:48
Certificate issuer:       /CN=38f06920dcf8a8c8d06d7ce6911b82064078b63e
Certificate serial:       052C
Authority key identifier: 47:30:A9:8D:B2:84:C4:2D:4A:4A:60:76:03:79:28:71:04:FF:D3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38f06920dcf8a8c8d06d7ce6911b82064078b63e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c24cc83f-3ffc-4023-ad4f-42ebd1c265f1/f72328dab5a2e7b6cfa06da78402ab03d4420572.roa
Signing time:             Mon 19 Sep 2022 17:25:52 +0000
ROA not before:           Mon 19 Sep 2022 13:45:31 +0000
ROA not after:            Thu 19 Sep 2024 13:45:31 +0000
asID:                     52387
IP address blocks:        168.232.96.0/22 maxlen: 24
                          190.97.120.0/21 maxlen: 24
                          2800:d10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324 (0x52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f06920dcf8a8c8d06d7ce6911b82064078b63e
        Validity
            Not Before: Sep 19 13:45:31 2022 GMT
            Not After : Sep 19 13:45:31 2024 GMT
        Subject: CN=f72328dab5a2e7b6cfa06da78402ab03d4420572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d1:d5:fe:65:9a:58:29:2a:38:7d:80:50:e9:
                    bf:76:6b:b6:ec:d5:24:5b:e4:80:2d:e6:0b:c3:0b:
                    57:80:88:28:b7:39:cb:70:f4:f8:72:8a:de:6d:92:
                    ad:65:1f:0a:cb:5c:6b:41:c2:a0:58:4f:be:28:29:
                    2e:40:8d:bb:eb:47:c4:77:92:02:57:f5:6c:4e:41:
                    a9:5c:74:a5:4d:74:c2:8e:8c:b4:62:1e:91:de:d2:
                    d0:54:a4:d8:f2:d5:77:72:cb:4a:b0:44:5b:6a:1c:
                    9f:0d:14:02:13:36:ff:37:23:54:8a:fe:66:ef:f4:
                    b1:cf:98:55:39:48:31:ef:af:79:74:a3:f2:1c:d0:
                    28:d7:01:64:ac:30:28:cd:8b:b2:25:f2:1d:88:f9:
                    e0:0f:bc:19:23:7e:7f:dc:43:1f:2a:14:2b:dd:51:
                    d2:15:6c:46:55:85:35:3b:5e:80:9d:fe:3f:14:4a:
                    8d:f2:3f:c9:6b:01:23:6a:e5:71:05:27:f7:52:39:
                    f0:a4:b5:7d:d5:fa:95:3e:61:4a:2e:e2:8a:ab:51:
                    f2:82:e2:9b:94:36:89:a8:7a:e4:10:fd:36:63:57:
                    47:6b:e7:a9:7f:c8:24:68:24:ea:0d:a7:ee:b7:6f:
                    21:9e:ce:33:6c:d3:ee:dc:94:12:17:e7:a1:13:f6:
                    e3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:93:AC:46:66:EE:1C:B5:07:15:83:C5:33:B1:1B:50:07:6A:14:48
            X509v3 Authority Key Identifier:
                keyid:47:30:A9:8D:B2:84:C4:2D:4A:4A:60:76:03:79:28:71:04:FF:D3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38f06920dcf8a8c8d06d7ce6911b82064078b63e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c24cc83f-3ffc-4023-ad4f-42ebd1c265f1/f72328dab5a2e7b6cfa06da78402ab03d4420572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c24cc83f-3ffc-4023-ad4f-42ebd1c265f1/38f06920dcf8a8c8d06d7ce6911b82064078b63e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.96.0/22
                  190.97.120.0/21
                IPv6:
                  2800:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:88:e5:0c:d7:f3:c4:00:eb:dc:8c:b7:94:98:17:fc:a8:30:
         c1:8a:79:2c:97:ce:47:b7:66:9a:68:db:ce:eb:79:df:a1:e8:
         80:5e:97:99:e7:05:79:54:f6:f9:4f:bc:07:e8:30:d9:c6:f1:
         0b:8c:4c:87:40:53:5c:1a:ba:9e:38:a7:ba:e7:0f:76:f3:03:
         61:13:0d:41:d8:e4:40:8c:b5:13:8d:e6:6c:5d:fd:b7:ed:9b:
         16:d1:93:70:ce:24:6d:d3:67:a9:62:cd:44:14:62:17:ee:75:
         83:0d:8b:5d:30:0a:68:38:91:40:5f:82:6d:fb:77:62:4a:0a:
         1e:15:f8:00:4b:47:71:25:f4:4b:66:b9:57:5f:aa:eb:a9:ce:
         c9:ba:ac:6d:5a:5d:fc:93:e0:d6:22:66:98:fc:4c:b9:70:e2:
         7a:54:70:f3:3c:4a:cb:c4:e7:6e:07:60:b4:8c:ce:58:22:54:
         1a:9e:9c:a4:0c:95:d1:e9:81:54:ec:1e:80:fb:b9:ca:39:b6:
         68:7f:80:93:97:f9:a7:53:12:d9:f8:b2:37:f6:61:13:b5:6a:
         e0:06:ea:5c:c5:d2:cd:7b:14:32:13:6a:1a:77:16:b3:0d:f5:
         b5:c4:6a:11:a0:fb:d9:35:7c:02:72:4c:2c:9b:ea:5e:bf:6d:
         ac:ca:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----