Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef1ae59d-e620-4a63-b3ee-898df68f495d/a92ed10a39a497cc3ac2c13e64643c37d402d837.roa
File:                     a92ed10a39a497cc3ac2c13e64643c37d402d837.roa (raw, json)
Hash identifier:          41CeHZPShxhal77WmNmhhfrXbaerRoB60CNW+26Re04=
Subject key identifier:   ED:8D:A5:88:73:00:C6:0A:53:3E:6B:93:3B:C7:3E:2D:CB:CD:EC:85
Certificate issuer:       /CN=11cbbe06d05c3a69a3117ce49a275aad0afa44f6
Certificate serial:       0704
Authority key identifier: 3A:35:64:A0:70:18:CE:6E:39:A9:6D:EC:90:17:51:12:7A:AD:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/11cbbe06d05c3a69a3117ce49a275aad0afa44f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef1ae59d-e620-4a63-b3ee-898df68f495d/a92ed10a39a497cc3ac2c13e64643c37d402d837.roa
Signing time:             Wed 01 Jun 2022 11:07:18 +0000
ROA not before:           Wed 01 Jun 2022 03:00:00 +0000
ROA not after:            Sat 01 Jun 2024 03:00:00 +0000
asID:                     263204
IP address blocks:        179.0.148.0/24 maxlen: 24
                          2801:16:c000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11cbbe06d05c3a69a3117ce49a275aad0afa44f6
        Validity
            Not Before: Jun  1 03:00:00 2022 GMT
            Not After : Jun  1 03:00:00 2024 GMT
        Subject: CN=a92ed10a39a497cc3ac2c13e64643c37d402d837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:3e:d9:da:b3:e8:0b:5c:08:32:1d:d7:ac:
                    b1:ec:c1:3f:fe:f5:97:c9:5b:73:85:9a:59:0b:21:
                    38:bf:38:1d:14:43:2f:97:3d:af:f4:91:55:91:3c:
                    c5:aa:f6:e2:68:35:1a:62:1d:02:f8:8b:62:a9:e8:
                    7e:25:57:a9:35:df:01:b3:e7:e6:42:05:9a:ef:3b:
                    0e:31:03:2b:b7:64:a5:12:42:6c:69:49:ff:03:ad:
                    49:10:31:c8:46:4e:b5:36:92:53:8c:28:c5:67:7c:
                    cd:6e:e5:01:c3:01:56:d1:9e:47:f1:4f:ee:ab:c8:
                    c2:2b:8d:27:6c:ad:69:1c:f6:36:27:d7:15:5b:81:
                    2a:c6:7d:c3:ed:a0:8a:0a:a1:28:83:f0:9e:f0:1e:
                    49:7b:b3:b3:45:f1:53:ec:bc:35:31:88:5f:e3:dd:
                    fc:00:79:02:74:09:65:2c:91:4d:54:23:ec:78:f5:
                    20:fa:52:00:97:4e:eb:d5:68:e3:e5:63:29:43:25:
                    df:03:fc:fa:c5:b1:97:5f:ea:c4:db:b1:18:0c:c3:
                    91:47:a7:0a:ab:c4:ae:78:1d:4f:3c:47:60:bc:d1:
                    fe:4d:cd:c0:b3:6c:f6:5d:68:db:dd:b0:20:d8:f2:
                    21:57:e9:55:44:ba:76:82:95:ac:cb:00:84:1b:ed:
                    fd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8D:A5:88:73:00:C6:0A:53:3E:6B:93:3B:C7:3E:2D:CB:CD:EC:85
            X509v3 Authority Key Identifier:
                keyid:3A:35:64:A0:70:18:CE:6E:39:A9:6D:EC:90:17:51:12:7A:AD:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/11cbbe06d05c3a69a3117ce49a275aad0afa44f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef1ae59d-e620-4a63-b3ee-898df68f495d/a92ed10a39a497cc3ac2c13e64643c37d402d837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef1ae59d-e620-4a63-b3ee-898df68f495d/11cbbe06d05c3a69a3117ce49a275aad0afa44f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.148.0/24
                IPv6:
                  2801:16:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:90:4d:6d:c2:34:c4:4a:22:68:75:a0:0a:10:48:80:82:
         35:ea:50:dd:94:1f:35:e3:6a:fc:08:bc:9a:b8:96:b1:c1:b5:
         cb:98:dc:47:62:eb:28:b1:22:db:f8:1c:a9:59:b9:d1:92:96:
         bd:0d:e6:22:15:87:6d:5a:cd:fb:87:e2:e6:5e:81:e0:b9:d9:
         8d:15:fc:52:4b:78:16:d9:e1:bf:c3:fa:df:3d:55:3d:36:b9:
         2c:fa:ed:4d:f6:0a:f8:10:af:18:95:7a:a4:86:35:28:36:dd:
         84:ed:8e:7a:63:0d:d2:ec:4c:c7:ae:1a:bb:7a:78:13:75:96:
         4b:55:e6:90:f9:2d:9f:48:43:eb:82:9c:36:8e:00:00:fd:e7:
         96:b7:7d:aa:c6:e1:2a:79:ca:9b:c1:c4:12:7b:f5:7b:21:71:
         ae:e9:54:ba:f2:67:15:97:8b:f7:b4:20:bb:1d:80:f4:26:e4:
         b5:12:13:c0:82:e3:65:ca:c7:de:db:11:5f:ed:f1:06:30:e9:
         1f:91:07:35:b6:60:94:0b:f6:ab:6d:7b:76:ac:e0:ce:6b:47:
         05:f2:09:5a:0f:c8:25:80:46:d9:b8:21:e6:b4:bd:74:f3:43:
         e8:f1:d6:e3:e7:a9:68:2f:17:f2:74:99:c5:af:6c:18:57:5e:
         88:72:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----