Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/447d16057f953d17f5e900c5ba431f5b65899af7.roa
File:                     447d16057f953d17f5e900c5ba431f5b65899af7.roa (raw, json)
Hash identifier:          oxG0OERob9JMf1Joq1WBw/RI+RpYdP1GPbVL03WvT/U=
Subject key identifier:   E0:93:49:D2:ED:0E:8A:89:A3:6A:9F:7C:B5:AA:DF:54:AC:22:4F:B9
Certificate issuer:       /CN=076e25208e9086c7775f52e507d559615ec76616
Certificate serial:       28289C
Authority key identifier: 6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/447d16057f953d17f5e900c5ba431f5b65899af7.roa
Signing time:             Fri 12 Apr 2024 16:16:30 +0000
ROA not before:           Fri 12 Apr 2024 16:16:30 +0000
ROA not after:            Sun 12 Apr 2026 16:16:30 +0000
asID:                     262589
IP address blocks:        143.0.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2631836 (0x28289c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076e25208e9086c7775f52e507d559615ec76616
        Validity
            Not Before: Apr 12 16:16:30 2024 GMT
            Not After : Apr 12 16:16:30 2026 GMT
        Subject: CN=447d16057f953d17f5e900c5ba431f5b65899af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cb:22:3d:5c:c8:7a:12:2c:ac:c5:dd:dd:30:
                    4d:56:64:38:3f:52:e9:e0:95:e9:bf:9b:b1:f2:09:
                    c5:ce:fa:73:d1:69:1b:d4:5d:c6:0f:de:f2:11:0e:
                    3b:eb:90:15:56:14:fb:17:3e:df:78:02:fa:0b:6e:
                    2c:35:e8:6f:4e:39:27:42:c6:83:fb:11:78:44:6b:
                    2a:72:c1:29:36:97:e1:2b:95:d9:9c:64:3e:25:1c:
                    11:80:f7:a6:b4:59:50:a0:c2:82:f2:a4:73:0b:96:
                    2c:f7:db:7c:41:cc:54:fe:ca:11:72:d2:e1:cb:d7:
                    52:fb:a0:69:5b:32:71:59:f4:d5:62:54:af:c4:1a:
                    11:43:40:d9:bf:70:a9:55:6c:f1:2f:69:3d:eb:53:
                    c9:ec:26:24:0e:88:26:0a:55:3b:ef:f9:67:08:36:
                    33:ed:3a:fd:f1:b5:31:83:fc:a0:1f:ff:02:1c:a1:
                    71:f9:bc:c2:ef:2d:6e:12:83:01:16:97:fd:aa:6a:
                    b4:3a:e1:d2:1d:ff:03:28:8d:f3:bf:24:c8:ef:52:
                    c1:61:0d:07:0a:4e:9f:73:70:aa:04:10:f8:34:ec:
                    ce:f6:48:33:b2:44:15:30:cc:dc:7a:4e:4a:8b:99:
                    ef:34:e8:5c:ed:54:35:bc:cf:f3:88:a1:db:b6:49:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:93:49:D2:ED:0E:8A:89:A3:6A:9F:7C:B5:AA:DF:54:AC:22:4F:B9
            X509v3 Authority Key Identifier:
                keyid:6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/447d16057f953d17f5e900c5ba431f5b65899af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/076e25208e9086c7775f52e507d559615ec76616.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:02:24:42:ee:64:d6:a8:9a:3d:5b:88:0d:0a:f0:d9:09:69:
         e7:10:02:3d:a1:8c:08:10:1c:e7:ca:8c:85:cc:19:eb:3c:26:
         9b:47:8d:ce:1d:a3:f2:1b:a8:16:22:86:77:5f:01:0c:8e:c2:
         05:a3:75:3e:40:b7:24:f6:6e:58:df:24:f2:f7:8d:fe:f8:bc:
         0f:5a:0f:3f:30:b7:0b:a6:e8:36:86:85:68:a1:c8:c9:ff:fc:
         eb:5e:16:06:b8:4e:a6:12:b8:30:39:1c:a9:60:f6:aa:8a:ec:
         1e:29:43:ff:b1:b2:a2:a8:f3:50:0d:7e:c4:24:7a:e6:62:12:
         a2:72:8d:31:98:ea:16:95:3b:51:f7:2a:4c:52:cf:0a:52:31:
         dc:36:a2:e8:7e:04:06:40:d5:3b:e4:36:d4:3c:df:6c:1e:f3:
         67:ec:6e:ba:e8:77:ca:1f:42:67:32:d0:9b:02:b6:d8:ce:27:
         b0:40:12:4a:75:e2:76:45:6a:c6:d3:e8:6b:fc:2d:83:22:e0:
         24:a4:f2:dc:bf:7b:18:c8:66:02:3f:41:11:d5:c8:f2:f0:bd:
         fc:1a:5d:e5:29:a6:b9:97:2d:1d:a0:49:cb:99:38:c1:55:d7:
         74:ed:ee:72:16:13:86:f9:5f:40:90:ac:35:aa:c0:e0:5f:9a:
         4b:26:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----