Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/0ab3180a86f93d7cc4a400b307124c84c7275495.roa
File:                     0ab3180a86f93d7cc4a400b307124c84c7275495.roa (raw, json)
Hash identifier:          VvQM9EL+FQotFHGdl/oFXttmrVOUbPV0hhg48FUoym0=
Subject key identifier:   1E:4C:4F:A0:DA:23:CF:F7:22:E6:EC:5F:56:46:E7:DF:AF:E1:2B:19
Certificate issuer:       /CN=8fed3a03fcdc18750a4ae5c970d165b993a49009
Certificate serial:       1A2292
Authority key identifier: 7D:1C:69:1F:29:90:07:AF:FE:09:E0:67:23:68:18:03:C8:0D:CB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fed3a03fcdc18750a4ae5c970d165b993a49009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/0ab3180a86f93d7cc4a400b307124c84c7275495.roa
Signing time:             Mon 26 Feb 2024 08:30:00 +0000
ROA not before:           Mon 26 Feb 2024 08:30:00 +0000
ROA not after:            Wed 25 Feb 2026 08:30:00 +0000
asID:                     271862
IP address blocks:        177.126.48.0/22 maxlen: 24
                          2803:1410::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712786 (0x1a2292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fed3a03fcdc18750a4ae5c970d165b993a49009
        Validity
            Not Before: Feb 26 08:30:00 2024 GMT
            Not After : Feb 25 08:30:00 2026 GMT
        Subject: CN=0ab3180a86f93d7cc4a400b307124c84c7275495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ef:05:36:87:41:d9:5f:36:5b:95:ff:dc:84:
                    75:11:5f:6d:c7:1a:5c:03:16:c8:fd:f7:85:f1:58:
                    3b:20:58:46:4a:02:1c:aa:34:61:fe:69:50:8a:ba:
                    5e:9d:5b:5a:72:c0:c2:94:7c:51:c3:b0:d1:d4:43:
                    97:f0:92:d7:99:ae:40:c7:fb:e1:95:20:59:8d:a5:
                    bb:bb:58:a1:17:9c:ee:ef:25:52:5b:72:73:8b:dc:
                    5d:a1:a1:53:ea:b4:4c:98:59:00:28:86:a1:b8:4d:
                    7a:ff:ec:5f:57:e7:d3:9f:a5:cd:a9:c2:67:2e:97:
                    d9:9d:d8:73:9c:78:f6:51:fb:93:1a:08:13:0d:95:
                    dc:47:1e:6f:8a:10:3a:d4:96:1e:de:f0:5b:e5:5f:
                    16:2a:69:6c:7f:bf:7c:6b:cc:fa:af:f9:2d:41:cd:
                    de:b0:1a:54:39:eb:4f:06:80:25:ba:86:a2:6d:f2:
                    b0:4b:f4:a9:ca:4b:26:ac:a0:e5:b4:91:93:e5:7a:
                    54:80:9f:72:b2:11:ab:54:8d:7f:eb:22:1a:2c:98:
                    63:58:aa:2a:4c:2a:0f:6b:d3:1e:1b:d6:b5:06:ac:
                    67:be:e7:09:bf:56:88:97:83:40:17:9c:8b:49:9e:
                    cb:8d:fd:e1:ac:a2:4d:77:9e:45:2f:68:a2:70:30:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4C:4F:A0:DA:23:CF:F7:22:E6:EC:5F:56:46:E7:DF:AF:E1:2B:19
            X509v3 Authority Key Identifier:
                keyid:7D:1C:69:1F:29:90:07:AF:FE:09:E0:67:23:68:18:03:C8:0D:CB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fed3a03fcdc18750a4ae5c970d165b993a49009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/0ab3180a86f93d7cc4a400b307124c84c7275495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/8fed3a03fcdc18750a4ae5c970d165b993a49009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.48.0/22
                IPv6:
                  2803:1410::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:b7:3e:e3:b8:f9:8f:e1:94:f0:0f:d3:58:60:9b:63:1f:16:
         76:0f:98:22:9c:9d:70:2d:8e:6c:a6:38:27:f2:9a:81:a8:21:
         79:68:9b:88:b6:c6:fc:40:21:ef:bc:2f:de:e0:c2:e4:53:d4:
         72:2b:79:ca:93:b5:77:7b:aa:e4:ec:85:e9:20:19:cb:b2:f1:
         ba:d9:d8:fe:20:88:51:36:3f:c9:bb:8a:60:43:f0:85:e6:6e:
         8e:d8:b8:79:11:7c:12:8c:71:dd:eb:d7:fe:f1:33:42:a4:bf:
         99:a1:c3:7c:10:ad:9a:e6:0a:60:2c:ed:a9:52:7d:79:a0:9a:
         b3:fa:4d:bb:80:f3:8c:48:80:40:b9:4e:d7:38:e9:5e:92:c3:
         34:4b:60:62:f7:70:89:26:b2:26:36:4a:85:02:6e:ee:51:e5:
         42:3e:9f:11:93:49:e8:32:1d:ad:94:f1:55:70:fe:98:00:82:
         8e:3e:c8:20:53:cf:d0:ba:7d:9e:67:c7:05:0e:7d:da:c2:63:
         b2:45:9a:6e:c4:6c:fd:5a:4d:73:a5:6f:ea:1d:36:a7:30:e4:
         5e:a7:39:df:0a:9e:2c:a3:63:b4:08:e8:91:99:b7:4a:1e:8f:
         8e:2e:18:a5:1b:32:45:8b:26:7f:45:48:41:1c:1e:17:08:c1:
         22:57:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----