Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/9bb7e2beb6fd11eb4a1c27ed63b89027d47638a2.roa
File:                     9bb7e2beb6fd11eb4a1c27ed63b89027d47638a2.roa (raw, json)
Hash identifier:          C7fRCZImuj9ls8djnrDqQBVgEQRWOVFd1hEPYMQvgRQ=
Subject key identifier:   3E:39:86:0E:16:D5:B7:79:66:D2:D0:6B:19:F9:B6:61:AD:75:69:D0
Certificate issuer:       /CN=6de3b6ab985c62f7bde582620020b65073aceec8
Certificate serial:       22F81C
Authority key identifier: D8:E5:77:6F:5E:C3:EC:8B:3F:27:2B:63:F3:03:DA:37:C5:97:6D:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6de3b6ab985c62f7bde582620020b65073aceec8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/9bb7e2beb6fd11eb4a1c27ed63b89027d47638a2.roa
Signing time:             Mon 11 Sep 2023 20:33:44 +0000
ROA not before:           Sun 10 Sep 2023 20:33:44 +0000
ROA not after:            Thu 11 Sep 2025 20:33:44 +0000
asID:                     394684
IP address blocks:        190.52.96.0/20 maxlen: 24
                          190.114.240.0/21 maxlen: 24
                          200.125.184.0/21 maxlen: 24
                          2800:5e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291740 (0x22f81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de3b6ab985c62f7bde582620020b65073aceec8
        Validity
            Not Before: Sep 10 20:33:44 2023 GMT
            Not After : Sep 11 20:33:44 2025 GMT
        Subject: CN=9bb7e2beb6fd11eb4a1c27ed63b89027d47638a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dd:89:d3:c8:89:64:67:86:d4:fb:6f:20:0f:
                    a9:1a:a5:d8:52:44:fb:ec:01:51:de:7a:d4:d1:ce:
                    5d:b5:a7:44:c8:c0:2d:c1:2c:27:ed:f0:91:c7:e4:
                    c7:00:78:67:85:04:3a:f2:09:24:b0:02:fc:03:82:
                    49:57:c8:f8:73:6d:d7:ad:1a:63:89:60:cb:df:41:
                    b6:ec:ec:d3:eb:02:8e:ca:58:d0:ff:8f:bb:19:50:
                    23:16:f7:7e:88:3d:37:36:41:01:cb:17:e6:77:b5:
                    bc:6d:0b:55:0d:72:27:e1:49:e8:f3:22:6e:96:c4:
                    21:75:ac:e6:fc:b1:b5:c2:d7:4d:c6:bf:6d:2a:d1:
                    ce:50:57:c0:ce:bf:9c:03:74:29:24:58:ca:38:5b:
                    1a:e9:01:8e:24:55:01:92:c8:26:46:c2:52:d6:9f:
                    0d:21:e9:0f:41:0e:da:a8:39:c7:3b:7e:29:99:ef:
                    61:2e:5c:eb:25:91:35:f5:4d:42:a3:9e:c9:c0:d7:
                    fa:52:da:66:94:40:8e:b8:28:67:ce:f1:fb:a3:5e:
                    af:a1:e8:92:9b:4d:15:7b:0c:1a:d6:af:9d:57:5b:
                    4e:cc:52:97:4d:8a:b1:8d:d9:63:71:73:d7:45:de:
                    71:fa:a6:e8:49:f4:dc:57:62:4e:8e:8e:88:54:7c:
                    c4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:39:86:0E:16:D5:B7:79:66:D2:D0:6B:19:F9:B6:61:AD:75:69:D0
            X509v3 Authority Key Identifier:
                keyid:D8:E5:77:6F:5E:C3:EC:8B:3F:27:2B:63:F3:03:DA:37:C5:97:6D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6de3b6ab985c62f7bde582620020b65073aceec8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/9bb7e2beb6fd11eb4a1c27ed63b89027d47638a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/6de3b6ab985c62f7bde582620020b65073aceec8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.96.0/20
                  190.114.240.0/21
                  200.125.184.0/21
                IPv6:
                  2800:5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:b4:db:a5:a0:da:59:44:d8:e1:6d:68:fb:f0:5f:a0:d5:7e:
         91:36:82:2d:64:6c:ad:18:d9:2c:26:eb:99:c3:9e:32:b5:c5:
         16:f2:3b:d5:39:7f:7b:81:25:6c:bc:6a:de:40:2e:12:62:4f:
         2b:d5:29:56:c8:d5:ee:39:07:c7:99:c9:a4:81:b5:22:f9:f8:
         4c:29:2f:a2:b0:06:ad:a3:42:48:a3:2a:00:17:a8:7c:55:50:
         b5:59:98:60:44:50:44:64:88:57:17:ff:81:6e:b7:ab:14:8b:
         90:02:de:92:30:d8:8a:b6:06:55:ba:92:8c:62:af:51:09:eb:
         f0:b1:f3:49:35:03:66:03:d4:e4:51:3e:d1:21:65:e7:14:f3:
         3b:fc:a7:71:31:ab:7d:90:f1:e6:bc:cd:d0:be:d8:f0:21:86:
         e7:99:36:3e:dd:65:ec:a7:d7:56:d8:6f:a9:3f:48:bf:d7:21:
         71:76:49:09:e3:a2:e7:4e:9e:01:52:27:a2:8c:c2:55:61:5c:
         6f:08:45:50:2a:ff:bf:96:3b:36:af:95:55:ed:71:62:37:f9:
         80:00:5d:5f:37:46:a0:30:a4:38:33:41:21:38:ac:26:3b:6a:
         3c:2f:2a:35:83:a0:95:fe:16:53:17:f9:6c:a1:10:a9:1c:29:
         31:0f:b3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----