Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27d416bc-9599-4e3b-8e42-276f12886dfd/54421b705753b3eaa2821d6d3177663e532b0baf.roa
File:                     54421b705753b3eaa2821d6d3177663e532b0baf.roa (raw, json)
Hash identifier:          W5Ah6OuKz/2lJ/88GmIWCHNETQYDwsb6nqdOJ5UHcF0=
Subject key identifier:   9A:D6:AD:DE:B1:1B:DC:E0:4D:53:11:3C:B3:AB:C1:47:E3:30:B0:19
Certificate issuer:       /CN=d502571a0bec0848866bae47873a9e92f5232d23
Certificate serial:       0C4326
Authority key identifier: AD:38:E2:4E:88:49:B5:92:EF:F3:8F:D8:3E:E4:35:71:0A:32:5A:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d502571a0bec0848866bae47873a9e92f5232d23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27d416bc-9599-4e3b-8e42-276f12886dfd/54421b705753b3eaa2821d6d3177663e532b0baf.roa
Signing time:             Thu 25 May 2023 21:24:51 +0000
ROA not before:           Wed 24 May 2023 21:24:51 +0000
ROA not after:            Sun 25 May 2025 21:24:51 +0000
asID:                     16629
IP address blocks:        170.84.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803622 (0xc4326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d502571a0bec0848866bae47873a9e92f5232d23
        Validity
            Not Before: May 24 21:24:51 2023 GMT
            Not After : May 25 21:24:51 2025 GMT
        Subject: CN=54421b705753b3eaa2821d6d3177663e532b0baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:53:92:77:07:14:ea:04:2c:1a:46:bc:94:5c:
                    d3:a1:b8:52:99:37:23:19:af:1d:0d:e2:40:54:bb:
                    16:2b:d9:4a:66:e0:18:f4:7b:2d:e8:2f:f3:43:ba:
                    53:46:d0:d8:16:27:e3:d5:21:7f:10:ab:b8:d2:65:
                    67:31:84:2d:f6:5e:dc:1a:aa:94:e7:c8:df:b2:2b:
                    d6:c5:59:6e:24:cd:58:39:d7:9e:e7:67:fe:92:88:
                    1f:7e:84:af:99:53:05:0f:02:91:70:29:64:14:de:
                    5f:6c:92:92:34:4c:3c:ba:01:f9:28:22:32:37:2c:
                    41:9e:e9:d0:52:08:d7:dd:ed:64:11:7a:cd:78:4b:
                    ce:33:10:bb:f8:f1:d8:28:fb:53:31:e2:c5:5c:88:
                    6b:ae:1d:a3:72:93:33:d2:7f:9a:9d:b6:e4:cc:61:
                    f1:ef:08:0d:69:07:c4:a1:d1:52:40:27:64:75:88:
                    e0:7b:68:a1:93:0c:42:4e:20:ed:99:3f:ce:a6:1f:
                    01:54:49:28:2d:49:ec:16:0f:03:0b:94:ee:e0:cf:
                    06:d6:1b:8e:f6:42:f0:3d:21:50:da:65:6d:4e:55:
                    d2:55:4b:01:2a:ec:cf:a4:e0:90:a5:9f:62:b5:e9:
                    8a:77:f2:ec:55:41:0b:2b:b9:c0:01:d7:fc:15:b7:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D6:AD:DE:B1:1B:DC:E0:4D:53:11:3C:B3:AB:C1:47:E3:30:B0:19
            X509v3 Authority Key Identifier:
                keyid:AD:38:E2:4E:88:49:B5:92:EF:F3:8F:D8:3E:E4:35:71:0A:32:5A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d502571a0bec0848866bae47873a9e92f5232d23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27d416bc-9599-4e3b-8e42-276f12886dfd/54421b705753b3eaa2821d6d3177663e532b0baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27d416bc-9599-4e3b-8e42-276f12886dfd/d502571a0bec0848866bae47873a9e92f5232d23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:f9:90:d1:6a:4a:c0:60:56:71:c0:7c:de:33:5c:ba:95:1b:
         45:0e:7e:80:aa:f2:06:b1:81:7d:90:a2:05:11:98:62:e7:aa:
         cf:ef:c0:12:83:bf:73:d6:57:b8:74:3f:15:7b:41:c2:5c:3d:
         88:f7:52:1a:7a:a1:d5:d0:b3:e8:dc:33:fa:66:5d:a7:0b:d7:
         9a:40:3f:55:5a:dc:8d:c5:af:ed:f5:20:d7:88:29:e1:aa:f1:
         2a:80:d3:40:73:8b:f3:a4:f5:79:71:c9:1c:c8:8c:54:0a:b1:
         25:e5:20:82:c4:12:03:3d:85:fc:6f:19:9d:54:1f:0a:08:a9:
         ce:9a:67:1c:b5:c1:b1:24:c3:83:51:c8:13:51:1f:89:ef:5d:
         3c:ba:52:6b:b1:21:61:04:b6:94:dd:a1:d2:88:ff:b2:ef:ab:
         af:93:17:af:d0:1a:69:2d:d7:4f:8d:16:a5:3d:a4:6a:cb:33:
         b4:3a:33:9d:77:66:58:34:1b:f4:e7:07:14:fe:ce:ef:48:88:
         7e:24:1d:00:60:89:36:9d:c0:12:cb:a7:27:7f:ec:5f:ce:13:
         41:a1:fd:2c:e3:66:37:ab:88:5a:08:33:a1:88:83:64:49:6e:
         3e:ae:87:ac:1a:fb:f9:77:9b:fe:69:96:92:a7:5f:b0:39:a0:
         66:c1:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----