Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/4e274b88d02ce6f8e1e068e1997212320e960ba7.roa
File:                     4e274b88d02ce6f8e1e068e1997212320e960ba7.roa (raw, json)
Hash identifier:          MVb2ZLYpKNHWcfaDH8Zo/xAwvw0QfLVmzbm0SJ9kA08=
Subject key identifier:   20:38:2C:1F:5A:BC:BC:DD:64:BD:83:ED:F8:96:EC:54:3E:4C:1D:76
Certificate issuer:       /CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Certificate serial:       104B26
Authority key identifier: EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/4e274b88d02ce6f8e1e068e1997212320e960ba7.roa
Signing time:             Fri 04 Nov 2022 22:37:54 +0000
ROA not before:           Tue 22 Jun 2021 03:00:00 +0000
ROA not after:            Thu 29 Jun 2023 03:00:00 +0000
asID:                     27775
IP address blocks:        186.179.128.0/17 maxlen: 24
                          190.98.0.0/17 maxlen: 24
                          190.98.0.0/19 maxlen: 24
                          190.98.32.0/19 maxlen: 24
                          190.98.64.0/19 maxlen: 24
                          190.98.96.0/19 maxlen: 24
                          200.1.156.0/22 maxlen: 24
                          200.2.160.0/20 maxlen: 24
                          200.2.176.0/20 maxlen: 24
                          2803:a200::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1067814 (0x104b26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
        Validity
            Not Before: Jun 22 03:00:00 2021 GMT
            Not After : Jun 29 03:00:00 2023 GMT
        Subject: CN=4e274b88d02ce6f8e1e068e1997212320e960ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cb:45:42:1c:08:fb:5f:a9:79:15:8f:65:92:
                    2a:8a:03:32:98:7e:59:a4:93:70:7c:c3:17:55:3b:
                    6f:0c:0f:cd:2e:d3:8c:93:c4:48:3e:5d:ae:d9:09:
                    61:10:87:49:8e:ad:6c:36:a5:5f:15:b1:ba:87:1e:
                    5e:67:13:88:67:38:9f:14:60:a4:6a:bf:e4:6d:25:
                    b4:f7:26:0b:11:9c:5c:de:c4:2d:ea:58:f8:28:74:
                    0d:59:a4:c6:6f:ff:2e:bd:57:90:6c:de:32:ca:6d:
                    32:c0:fa:2c:01:b5:62:9b:ab:80:5c:2f:13:76:2a:
                    72:83:f1:d8:20:da:12:98:4b:08:9c:b5:8c:21:7d:
                    5f:8c:29:20:5f:23:30:9c:ef:8d:6a:f5:2b:50:2d:
                    03:c6:65:4c:a4:d9:b0:6f:fc:ca:b6:4a:0c:cd:09:
                    b1:66:9f:db:6e:98:c6:78:8f:de:6a:ff:a5:c7:3a:
                    ce:85:b0:39:2c:2f:2d:d8:49:f5:52:52:29:d4:40:
                    c0:a9:82:d9:de:57:b8:7c:c6:04:c0:db:3f:4a:b4:
                    9d:1f:ef:09:39:65:30:d7:81:04:4e:10:4a:27:ce:
                    e8:5f:5a:90:ec:68:02:05:94:b0:96:05:9a:fc:fc:
                    43:54:d7:99:3a:9c:48:23:55:6c:fe:5a:96:e0:b3:
                    84:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:38:2C:1F:5A:BC:BC:DD:64:BD:83:ED:F8:96:EC:54:3E:4C:1D:76
            X509v3 Authority Key Identifier:
                keyid:EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/4e274b88d02ce6f8e1e068e1997212320e960ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/5f073dc50d388f5e4b8416173329e5c9fb55bacc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.128.0/17
                  190.98.0.0/17
                  200.1.156.0/22
                  200.2.160.0/19
                IPv6:
                  2803:a200::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:ef:b5:0d:ae:80:1e:eb:ca:4c:f3:97:40:67:f3:84:9d:70:
         0a:d8:b0:e0:81:a7:38:f2:0c:57:2f:09:85:3c:95:cd:8a:0e:
         5f:17:19:9e:33:89:4f:3e:e5:d7:93:35:f0:a5:01:4a:74:92:
         9b:fb:59:a5:ce:6f:e3:5e:8c:80:0d:9e:00:0f:73:23:43:04:
         9f:06:6a:9e:44:07:10:f3:57:12:74:9b:8e:7b:00:d9:bc:53:
         10:31:2e:c7:44:4e:99:4b:a9:72:34:60:5c:0c:d5:fe:b8:04:
         3b:72:7e:63:4a:38:36:92:a3:72:e5:4e:af:6f:69:ba:cb:d1:
         c5:d7:80:36:50:9f:7c:42:d3:1b:9a:e2:f9:5a:57:51:8f:62:
         0d:98:49:62:12:48:63:ed:5e:f7:7d:da:d4:47:fd:c4:e1:a8:
         ea:32:64:f0:da:2c:8e:29:bf:cc:65:7a:1c:84:ef:a6:2e:f0:
         89:1c:8b:0d:3c:d7:2b:a0:c6:c4:97:28:56:09:13:5f:f7:45:
         0b:45:35:92:d0:36:a9:fd:4e:5b:b4:56:ec:44:8b:d6:31:da:
         01:b0:e5:67:68:6f:a7:ff:5f:8e:67:fd:b9:81:ce:4c:58:0c:
         fc:61:64:67:e2:32:04:46:6d:87:de:0a:2e:d9:e1:60:a6:4d:
         ca:6b:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----