Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/dc12da798e4ca8ef179105f657f1fd860266cc1b.roa
File:                     dc12da798e4ca8ef179105f657f1fd860266cc1b.roa (raw, json)
Hash identifier:          o29W4pY8snjIEAxw0IcHyHHEAYwsMW6D1eC6hIfPwwM=
Subject key identifier:   45:9A:00:42:B1:BA:BD:D5:D5:0C:73:34:2C:33:4E:58:63:A4:BD:86
Certificate issuer:       /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial:       1FE504
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/dc12da798e4ca8ef179105f657f1fd860266cc1b.roa
Signing time:             Thu 11 May 2023 19:27:24 +0000
ROA not before:           Wed 10 May 2023 19:27:24 +0000
ROA not after:            Sun 11 May 2025 19:27:24 +0000
asID:                     52392
IP address blocks:        190.99.120.0/21 maxlen: 21
                          2803:b100::/44 maxlen: 44
                          2803:b100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090244 (0x1fe504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
        Validity
            Not Before: May 10 19:27:24 2023 GMT
            Not After : May 11 19:27:24 2025 GMT
        Subject: CN=dc12da798e4ca8ef179105f657f1fd860266cc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:1c:91:6f:17:5d:3d:15:5b:a3:45:7b:f7:
                    f2:96:0d:94:1c:92:5b:0a:2f:57:f2:c2:bb:4b:5f:
                    ec:d0:d5:08:25:b9:e2:d2:e2:4a:cf:8b:3e:36:88:
                    6f:10:e0:34:6c:92:c8:85:86:19:8c:21:32:46:0b:
                    9a:27:fc:b4:65:76:a7:e0:5f:70:e5:18:96:64:9c:
                    28:40:a3:d7:6f:f3:d4:4c:2c:c2:8f:54:18:fe:a1:
                    56:81:7a:a3:32:fa:b4:c5:9b:d1:cf:da:1e:2e:1a:
                    cd:04:04:58:63:a0:46:44:b2:a5:23:34:8c:29:cf:
                    77:af:bc:ec:b4:39:e1:b4:ca:01:07:60:2c:11:2a:
                    f7:5e:40:d9:e6:97:f9:2f:8d:24:66:37:93:a7:21:
                    76:db:72:52:a2:15:87:6a:42:e5:ec:51:b7:4f:2d:
                    1a:57:41:43:6a:ad:7f:05:d1:c9:c7:a9:79:25:54:
                    ac:60:9f:2a:e6:62:09:2a:b5:b6:21:91:2c:4c:29:
                    78:a3:26:71:58:9b:83:7c:0f:55:ca:eb:0d:6b:13:
                    b1:c7:30:c5:a5:f4:cb:ae:57:1a:54:69:86:3d:e1:
                    59:72:57:d1:28:52:57:f3:28:16:65:87:e8:f5:a0:
                    d8:a7:35:ad:a2:c6:2e:2d:aa:bb:38:b9:66:3b:e7:
                    42:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9A:00:42:B1:BA:BD:D5:D5:0C:73:34:2C:33:4E:58:63:A4:BD:86
            X509v3 Authority Key Identifier:
                keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/dc12da798e4ca8ef179105f657f1fd860266cc1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/21
                IPv6:
                  2803:b100::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:82:f4:48:3f:93:04:e3:c4:11:0b:92:7e:60:ef:a6:f4:dd:
         12:82:74:2e:d7:e0:b1:8e:b3:8d:f7:18:98:c2:be:f1:85:64:
         ff:22:8d:33:92:69:73:f4:76:cd:f3:64:89:ec:f2:ee:9a:b0:
         07:6c:15:82:31:8d:dc:c7:4c:f8:ce:45:36:5a:9b:bb:c2:9f:
         d8:88:65:f6:96:55:ff:78:6e:43:32:db:a2:d4:53:60:e2:e4:
         33:b2:15:c8:1a:65:e3:82:18:f8:56:2a:c2:14:f1:e1:f4:65:
         f8:8f:a4:9c:38:a2:97:53:04:04:b8:28:99:4a:09:11:6a:c7:
         4c:d7:7a:54:1a:fc:65:2d:97:a4:15:cd:d9:cd:82:e2:51:98:
         8f:1a:a8:ea:d7:30:47:8b:62:3c:26:7b:a4:3b:93:54:ce:40:
         b4:36:84:cc:fd:bf:52:6a:7d:17:b4:aa:8a:ac:48:2c:08:04:
         5a:54:69:bf:08:66:6a:42:a3:59:86:98:59:5a:71:5d:2e:0f:
         e6:b8:7d:8a:b5:3c:66:c6:47:76:c6:36:65:64:b9:47:10:3b:
         1a:c3:e2:70:c7:92:7a:06:49:fb:d7:ee:bd:7a:4f:92:34:72:
         8d:53:c0:be:9f:00:d8:47:b2:f7:4a:c4:57:7a:f5:fc:22:9f:
         a4:2e:b3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----