Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/2b0d6f49504f623787da1a825df86f3da61568c0.roa
File:                     2b0d6f49504f623787da1a825df86f3da61568c0.roa (raw, json)
Hash identifier:          bDn8s7YKx0ZnPn9ic4j9pFx4GnjXGly6yRaej5YirRE=
Subject key identifier:   DB:F8:A2:0D:EE:71:24:D7:1D:63:34:B6:27:8F:06:5F:67:80:BB:20
Certificate issuer:       /CN=88d44f0918975636ffb95bc864d2ead8021849e5
Certificate serial:       24A642
Authority key identifier: 60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d44f0918975636ffb95bc864d2ead8021849e5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/2b0d6f49504f623787da1a825df86f3da61568c0.roa
Signing time:             Fri 13 Oct 2023 16:16:56 +0000
ROA not before:           Thu 12 Oct 2023 16:16:56 +0000
ROA not after:            Mon 13 Oct 2025 16:16:56 +0000
asID:                     262202
IP address blocks:        170.246.148.0/22 maxlen: 24
                          186.96.80.0/20 maxlen: 24
                          190.57.48.0/21 maxlen: 24
                          200.119.184.0/21 maxlen: 24
                          2803:b800::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2401858 (0x24a642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d44f0918975636ffb95bc864d2ead8021849e5
        Validity
            Not Before: Oct 12 16:16:56 2023 GMT
            Not After : Oct 13 16:16:56 2025 GMT
        Subject: CN=2b0d6f49504f623787da1a825df86f3da61568c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4d:3e:2c:03:7b:98:6c:36:74:63:36:2b:d1:
                    1f:d7:85:5b:b0:52:3a:5a:fd:25:0f:17:a1:5b:0e:
                    e0:db:59:28:88:40:be:19:32:b6:9a:1f:63:e5:2c:
                    44:cd:dd:b4:af:94:db:a4:32:59:d1:2f:99:ff:ec:
                    ec:5e:1c:75:ef:80:42:d3:d6:4a:5a:6b:31:4f:79:
                    7f:ca:bb:c6:30:47:38:80:7e:a5:e6:f5:97:b1:9a:
                    d3:a5:a3:57:f0:35:7b:9d:bb:96:48:c5:7d:2c:7c:
                    50:f4:7b:60:93:b1:49:bd:be:5d:0e:cd:ea:37:b8:
                    e1:a2:9e:db:14:5a:b9:53:92:0f:8d:1d:ae:10:3c:
                    0a:fd:82:4e:c2:be:35:e7:4d:3a:dd:fe:57:9a:f2:
                    dc:5e:30:55:5f:8c:11:d1:28:7e:a4:c8:48:87:0a:
                    57:0b:28:64:75:35:2f:23:d6:98:1e:2b:fe:26:15:
                    58:dc:13:75:e3:7b:50:95:3a:ae:08:1c:39:32:76:
                    17:a4:f5:4f:93:43:b4:e8:de:29:fd:b2:c2:01:6d:
                    e6:90:45:8e:d4:8d:48:63:27:1d:a3:d5:d9:91:51:
                    83:b6:dc:cc:72:97:4a:0a:57:7a:91:a2:e5:ea:c6:
                    b5:5b:42:5e:b8:31:d2:24:4e:7d:05:c2:9a:99:5f:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F8:A2:0D:EE:71:24:D7:1D:63:34:B6:27:8F:06:5F:67:80:BB:20
            X509v3 Authority Key Identifier:
                keyid:60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d44f0918975636ffb95bc864d2ead8021849e5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/2b0d6f49504f623787da1a825df86f3da61568c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/88d44f0918975636ffb95bc864d2ead8021849e5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.148.0/22
                  186.96.80.0/20
                  190.57.48.0/21
                  200.119.184.0/21
                IPv6:
                  2803:b800::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:d0:ab:55:ae:60:9e:e0:3d:57:a3:8d:b9:4e:61:67:4e:c0:
         be:13:32:24:b6:32:07:cf:cc:dd:6e:e3:00:3d:33:f6:87:8f:
         87:3f:b2:35:e2:35:e2:2e:6a:65:37:ec:c9:8b:59:71:78:8d:
         9c:33:da:4e:f5:13:72:26:84:74:ac:ce:50:f1:c3:d3:72:a2:
         34:78:e7:57:b5:26:e3:3d:80:54:2f:e2:a9:e6:41:d7:57:7e:
         d9:09:79:9f:06:1d:cd:97:4e:2e:aa:b2:89:12:a5:e6:42:0f:
         5d:fb:54:ea:60:3a:e1:d5:df:6e:ea:38:8e:74:66:fc:0f:57:
         f5:08:61:5b:cf:ff:b2:23:68:eb:e3:36:0c:e7:03:dd:0e:7c:
         e2:1a:34:3c:be:f9:32:c8:c6:c0:ee:a0:aa:b7:1b:d7:61:d2:
         c0:fb:89:ea:c9:c3:df:15:9a:65:8e:a3:5f:ce:c2:c4:92:83:
         b1:53:06:68:4b:40:95:ba:7a:fd:b4:a6:b0:20:a7:2b:01:db:
         2c:f1:0c:90:0e:71:eb:ff:fb:d2:aa:ca:20:0f:b3:40:39:2c:
         fc:82:f8:79:10:a2:e7:15:e1:99:93:6c:71:c7:b9:fd:e2:9f:
         eb:9c:ff:63:99:80:66:60:9c:67:fc:35:f6:e7:b9:21:dc:3d:
         bf:12:9b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----