Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e34bd55e-41a7-4306-be7e-0a1586d5cf59/8da84befae965070731da0a7306bd803cce05c86.roa
File:                     8da84befae965070731da0a7306bd803cce05c86.roa (raw, json)
Hash identifier:          7zwyV6MonPHqyhqTwoHQ/whtdMzqpw/ydLyznbpUo0o=
Subject key identifier:   15:63:B8:ED:95:7E:97:09:F1:1F:C6:78:59:61:BB:00:03:33:C2:C8
Certificate issuer:       /CN=c117f0121a5ef011f07c8d516305c00886bef690
Certificate serial:       1355E9
Authority key identifier: 24:1E:39:F9:68:BC:DD:99:50:0C:5C:BA:D4:E0:4B:D3:21:83:45:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c117f0121a5ef011f07c8d516305c00886bef690.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e34bd55e-41a7-4306-be7e-0a1586d5cf59/8da84befae965070731da0a7306bd803cce05c86.roa
Signing time:             Fri 07 Oct 2022 14:52:53 +0000
ROA not before:           Fri 07 Oct 2022 14:52:06 +0000
ROA not after:            Mon 07 Oct 2024 14:52:06 +0000
asID:                     271947
IP address blocks:        177.74.100.0/22 maxlen: 24
                          2803:33e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1267177 (0x1355e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c117f0121a5ef011f07c8d516305c00886bef690
        Validity
            Not Before: Oct  7 14:52:06 2022 GMT
            Not After : Oct  7 14:52:06 2024 GMT
        Subject: CN=8da84befae965070731da0a7306bd803cce05c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5d:0b:50:7f:71:fc:ad:4b:32:3e:9c:7a:8c:
                    a7:80:2a:d4:b2:49:c9:f0:28:60:51:49:b9:9b:c5:
                    39:31:1b:07:63:0b:72:de:77:46:c2:08:43:7b:39:
                    8b:bf:42:c6:54:4f:e6:7b:db:6c:9d:df:0f:8b:29:
                    e0:38:12:f1:a5:07:ae:49:46:24:c7:45:77:7f:5c:
                    65:70:5d:ff:29:e0:d0:58:05:9b:df:1b:81:ae:bc:
                    5f:2e:bf:a7:1b:54:a2:4a:e3:77:92:2f:fe:82:91:
                    88:45:72:71:65:73:c7:66:5f:42:26:b7:f7:72:8e:
                    07:97:cb:60:e6:19:63:ad:f5:f9:0d:9c:54:34:d0:
                    99:d2:f3:cd:d0:34:da:83:4c:3b:50:00:5f:2b:29:
                    3e:6e:2f:1c:78:42:f4:ad:e3:4f:37:60:08:0d:70:
                    ce:b7:af:4e:ba:39:d4:71:9a:f9:10:56:7f:df:d9:
                    b0:dd:73:37:7f:71:48:10:98:58:5c:da:cd:4f:f9:
                    4d:e0:9e:c1:c7:63:26:e4:a3:c2:19:f2:17:89:bf:
                    9d:eb:d7:2a:23:09:5e:51:01:7a:39:fa:d9:60:5a:
                    d5:82:d2:0e:0b:81:16:6d:67:73:08:90:be:78:e7:
                    25:01:f9:6e:e0:99:48:72:fe:fe:48:ef:57:b9:6f:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:63:B8:ED:95:7E:97:09:F1:1F:C6:78:59:61:BB:00:03:33:C2:C8
            X509v3 Authority Key Identifier:
                keyid:24:1E:39:F9:68:BC:DD:99:50:0C:5C:BA:D4:E0:4B:D3:21:83:45:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c117f0121a5ef011f07c8d516305c00886bef690.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e34bd55e-41a7-4306-be7e-0a1586d5cf59/8da84befae965070731da0a7306bd803cce05c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e34bd55e-41a7-4306-be7e-0a1586d5cf59/c117f0121a5ef011f07c8d516305c00886bef690.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.100.0/22
                IPv6:
                  2803:33e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:38:ba:ed:5e:a4:0d:79:e3:4e:20:6d:77:79:fd:fe:b4:
         d6:49:36:ed:19:12:00:10:36:89:dc:a3:9b:bf:7f:2c:79:1f:
         83:d5:03:17:b3:ae:9e:4e:96:bf:ce:77:46:74:97:8c:1b:cf:
         1f:94:1f:86:19:cb:78:37:51:99:69:4e:a4:94:ce:29:fe:c7:
         6c:d9:fa:41:90:6f:cb:da:0a:cd:64:8f:35:ce:da:0f:5b:89:
         d0:11:3f:dc:45:69:3d:d7:43:b4:37:38:35:8b:11:3a:1a:3c:
         a6:ab:42:b4:39:0e:47:9c:f9:b6:93:74:b4:9b:66:06:af:1b:
         55:ec:36:3c:db:23:6f:ea:ec:10:6b:5b:b6:a5:64:1d:2a:c6:
         27:a5:b7:f1:9c:9d:9a:23:0a:f3:59:df:ab:cb:ac:22:cd:62:
         e2:e6:d2:80:b6:97:31:2f:ff:4e:8e:ac:12:33:2e:ba:f4:9b:
         aa:11:fa:ea:d1:9e:ca:fe:bf:09:45:b4:56:3c:69:9c:2b:c0:
         09:fd:f5:73:74:2d:d9:91:86:56:0e:ba:5d:bf:80:f9:3e:d1:
         41:f5:20:64:15:0a:7a:da:45:65:5b:30:cd:9e:37:6a:b8:31:
         2b:2a:d0:c7:02:ba:2f:06:f0:04:1c:d0:f8:a2:27:c8:e0:1b:
         44:fb:ff:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----