Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/b253e92268f690fa0268e23a36882f1b734772bd.roa
File:                     b253e92268f690fa0268e23a36882f1b734772bd.roa (raw, json)
Hash identifier:          9ykGTo/i6iIAoNkcUWL2fegGDyQMKsLqq5wSjljoM1Q=
Subject key identifier:   77:E5:D8:F5:B8:0A:79:72:D4:58:CC:7A:AF:94:9F:5A:D6:28:D7:D7
Certificate issuer:       /CN=53a84133ecea8791e075c28348a5c7805616cc52
Certificate serial:       07630A
Authority key identifier: F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/b253e92268f690fa0268e23a36882f1b734772bd.roa
Signing time:             Fri 27 Jan 2023 18:27:53 +0000
ROA not before:           Wed 25 Jan 2023 18:25:49 +0000
ROA not after:            Mon 27 Jan 2025 18:25:49 +0000
asID:                     272043
IP address blocks:        131.72.136.0/22 maxlen: 22
                          2803:6d10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484106 (0x7630a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a84133ecea8791e075c28348a5c7805616cc52
        Validity
            Not Before: Jan 25 18:25:49 2023 GMT
            Not After : Jan 27 18:25:49 2025 GMT
        Subject: CN=b253e92268f690fa0268e23a36882f1b734772bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:44:e2:28:9b:0a:71:89:12:e6:1b:98:57:
                    c7:e5:a1:dc:c3:18:26:65:f3:59:50:e4:44:9e:dd:
                    2b:30:e6:db:51:26:e4:22:a9:76:fc:4f:86:c0:9d:
                    35:16:44:85:93:f6:a6:dd:b4:ff:a4:9a:21:0d:f3:
                    b4:83:a4:9a:6e:d2:5e:f8:0b:04:92:83:8d:11:3f:
                    04:45:41:72:46:5c:76:eb:4e:2b:98:18:ff:c5:7f:
                    72:55:af:02:9d:6b:69:78:57:d6:38:f3:77:1b:5a:
                    26:e2:fc:fb:64:52:b7:68:68:e8:ec:65:7c:66:50:
                    9b:d3:e6:b1:63:0e:33:58:a1:c7:22:55:75:cc:0c:
                    c3:11:31:2c:47:e5:14:27:80:0f:c1:b9:92:36:c5:
                    71:52:23:0c:e0:22:f3:4f:04:4e:c3:3d:11:8d:f9:
                    bd:90:82:e7:ff:e6:e8:b0:ab:49:e8:21:75:ef:f3:
                    a2:bd:5e:cb:02:c8:d7:a1:f8:a2:89:16:af:43:83:
                    e6:85:e8:cb:58:c0:3d:8c:75:91:b0:c3:15:5f:26:
                    a7:33:74:b4:6e:b9:57:9d:2a:72:0a:93:a3:42:c5:
                    b6:95:cb:e2:72:9f:3a:d0:ca:e9:0d:56:b4:ea:96:
                    3f:09:26:44:39:61:40:c9:66:d9:b3:ac:b0:bc:e6:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:D8:F5:B8:0A:79:72:D4:58:CC:7A:AF:94:9F:5A:D6:28:D7:D7
            X509v3 Authority Key Identifier:
                keyid:F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/b253e92268f690fa0268e23a36882f1b734772bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/53a84133ecea8791e075c28348a5c7805616cc52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.136.0/22
                IPv6:
                  2803:6d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:04:c6:00:4c:cc:89:0b:cf:42:b4:56:4a:dd:40:fd:2c:7f:
         52:97:bc:9b:ac:ee:dd:74:9b:1b:40:1f:b5:57:6e:e3:f9:09:
         4e:c3:0b:23:dc:14:8d:56:5a:cb:23:d3:37:42:f1:48:ac:72:
         52:61:f6:ff:ac:62:38:0b:60:9e:db:50:c8:62:4a:88:15:9f:
         c8:dc:c8:59:f5:29:2a:1a:68:00:f9:62:d9:53:78:68:42:07:
         7a:1b:e3:63:59:89:c8:16:d2:8a:ca:d9:88:3e:66:69:32:cf:
         0e:a5:e9:52:6d:3a:21:81:b1:13:8a:5d:f8:d0:f8:9e:c3:e2:
         9d:be:58:42:fb:87:2c:5c:c2:9f:8f:74:c4:02:5f:c3:a7:02:
         65:44:df:73:a3:3f:2e:6e:b9:c9:e4:95:4a:ad:2f:e8:ae:85:
         5b:dd:08:30:bc:82:dc:0f:70:37:58:b4:86:13:b1:0a:2d:46:
         8b:49:80:1b:41:50:6b:c6:18:2c:8e:25:06:0d:0c:85:1c:f5:
         b4:5a:cb:d5:7d:85:0c:21:4f:e2:5b:7d:5f:ea:e4:a6:2c:85:
         29:9c:cb:42:bf:92:ef:f3:f7:93:22:4c:41:e7:ee:98:a6:ae:
         d0:ef:c9:23:3a:2e:c9:6a:00:58:d1:18:fc:78:ef:ff:79:5a:
         65:2b:45:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----