Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/54e7022e7ad8562c26ed1a79fd4e42b79d896601.roa
File:                     54e7022e7ad8562c26ed1a79fd4e42b79d896601.roa (raw, json)
Hash identifier:          JPb2IJZMUcOWPFW4qezxP5hQBlBR5aI/OqwDgmdo3xw=
Subject key identifier:   C7:E7:28:D8:FA:D6:AE:19:49:42:20:1D:56:4F:E9:01:9E:0E:B4:1A
Certificate issuer:       /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial:       25DDBB
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/54e7022e7ad8562c26ed1a79fd4e42b79d896601.roa
Signing time:             Mon 18 Sep 2023 11:36:39 +0000
ROA not before:           Sun 17 Sep 2023 11:36:31 +0000
ROA not after:            Mon 18 Sep 2028 11:36:31 +0000
asID:                     12956
IP address blocks:        181.199.208.0/20 maxlen: 24
                          168.195.56.0/22 maxlen: 24
                          190.98.128.0/18 maxlen: 24
                          2800:240::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2481595 (0x25ddbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
        Validity
            Not Before: Sep 17 11:36:31 2023 GMT
            Not After : Sep 18 11:36:31 2028 GMT
        Subject: CN=54e7022e7ad8562c26ed1a79fd4e42b79d896601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:53:a0:79:3a:f2:8f:df:11:0d:83:38:9d:
                    8d:db:cc:12:0f:3d:11:89:db:34:4e:e1:1b:87:e8:
                    28:46:8a:cb:04:c8:e1:3f:56:6f:6b:30:bb:79:8d:
                    37:c7:a7:f0:bf:11:b0:6f:51:be:6b:e3:28:35:34:
                    43:30:78:c7:86:95:be:2b:71:69:a7:4d:ed:aa:3e:
                    4d:32:f0:9e:d4:e7:5a:90:ac:67:e7:65:1a:48:e7:
                    00:d8:74:a0:9b:52:b8:bb:5b:46:32:e3:6a:69:06:
                    a9:55:35:3f:af:85:ac:2e:a6:7a:1b:b4:13:17:5f:
                    11:bd:80:5a:f1:cc:eb:2b:8a:b8:af:da:d2:fb:69:
                    10:5e:d9:2b:20:83:0a:4a:af:a0:82:48:e1:0f:c1:
                    06:1a:40:08:a3:0a:34:89:3f:99:db:ae:cb:f4:68:
                    03:27:7e:db:25:2d:b5:10:2a:9b:8f:74:58:08:8a:
                    b2:be:8e:4b:fa:00:f3:b0:50:98:da:44:23:c0:d1:
                    23:41:75:c1:8b:26:42:1b:3a:7e:69:bc:ca:8d:95:
                    7d:4d:fd:64:10:b7:a8:db:f1:77:28:7b:4b:0b:08:
                    d4:9d:d3:a6:57:94:8b:52:d7:8a:d2:ae:36:07:14:
                    ec:f8:be:e7:be:6c:30:05:be:c5:3d:67:06:47:da:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E7:28:D8:FA:D6:AE:19:49:42:20:1D:56:4F:E9:01:9E:0E:B4:1A
            X509v3 Authority Key Identifier:
                keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/54e7022e7ad8562c26ed1a79fd4e42b79d896601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.56.0/22
                  181.199.208.0/20
                  190.98.128.0/18
                IPv6:
                  2800:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:a4:12:18:f1:93:b3:37:c5:06:fd:6c:0e:a1:32:31:37:96:
         a3:15:6e:59:5e:77:d3:90:ad:11:b5:7c:cb:5f:c9:3e:55:50:
         88:b2:98:0d:82:26:8a:a7:fc:00:19:9a:7f:ca:f6:44:ba:69:
         a4:23:34:d1:78:e8:62:35:c7:e9:ec:56:3e:90:c5:23:07:d5:
         ab:19:a1:96:c5:26:80:32:1e:23:d9:8f:66:16:a1:3d:c1:98:
         1f:a0:2a:66:08:66:5e:16:9e:37:25:74:2c:28:b4:30:fd:36:
         4b:e7:db:33:6f:cb:18:6f:50:6e:ae:af:3c:eb:c6:c6:65:fb:
         5c:1e:ef:ad:30:73:da:c6:99:e0:ad:d4:bb:3d:22:f9:4b:ee:
         ce:94:9d:7c:a6:0c:ad:cc:42:83:35:c0:28:c1:23:38:ff:e9:
         08:4c:8c:e2:05:f2:3a:37:74:72:f7:51:ee:cb:29:e2:d5:99:
         3b:34:6a:83:19:13:14:1f:cf:07:1d:25:53:a8:f8:c0:72:f9:
         3c:89:6f:83:a6:b3:2a:57:a2:25:9b:64:f2:82:46:be:43:56:
         7f:c7:96:de:c1:73:7e:db:0a:9c:48:f4:a2:2a:a6:8a:c0:fc:
         89:63:91:1c:72:e0:1d:81:e4:98:07:51:fc:02:ba:f3:d1:0c:
         52:f9:a1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----