Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27dc5c9e-a56e-41dc-b978-aa7bb11cb61a/f172ae7772c6951846c4acd162cd00d03820f9f2.roa
File:                     f172ae7772c6951846c4acd162cd00d03820f9f2.roa (raw, json)
Hash identifier:          kLsqUISZ3SUtrSsfIAuQYOJ8tqvW9yq2GzRV/evnCFQ=
Subject key identifier:   9A:E1:AA:2F:A8:C7:54:D3:83:69:4A:CC:30:E4:6F:A9:EA:42:94:8E
Certificate issuer:       /CN=a3ae922638ff81e225680ea4c3aac3257c696ced
Certificate serial:       02A4
Authority key identifier: 2E:3B:A7:9E:FC:E5:D6:CA:A3:4C:00:96:20:C0:30:2A:7F:5A:EB:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3ae922638ff81e225680ea4c3aac3257c696ced.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27dc5c9e-a56e-41dc-b978-aa7bb11cb61a/f172ae7772c6951846c4acd162cd00d03820f9f2.roa
Signing time:             Mon 19 Sep 2022 17:32:52 +0000
ROA not before:           Mon 19 Sep 2022 17:30:34 +0000
ROA not after:            Thu 19 Sep 2024 17:30:34 +0000
asID:                     264725
IP address blocks:        170.231.176.0/22 maxlen: 24
                          2803:6740::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3ae922638ff81e225680ea4c3aac3257c696ced
        Validity
            Not Before: Sep 19 17:30:34 2022 GMT
            Not After : Sep 19 17:30:34 2024 GMT
        Subject: CN=f172ae7772c6951846c4acd162cd00d03820f9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:47:a2:c4:55:f1:f4:28:e9:68:f4:61:23:
                    05:5f:34:6d:c3:67:a0:3f:e5:b6:03:ee:b7:14:13:
                    c1:d5:0a:00:95:af:46:03:ae:ad:aa:f4:a7:5a:ce:
                    b8:4c:f4:4c:b5:b8:cf:64:92:a1:0c:96:32:56:9b:
                    33:75:71:7a:e0:42:bd:2d:30:63:15:3c:1e:54:70:
                    55:a9:95:78:ca:33:bd:3a:31:fc:18:92:6f:6b:64:
                    9b:f3:2b:ea:27:ef:c2:32:95:22:e6:49:a0:1e:1a:
                    fe:59:29:69:8a:70:e0:3b:31:9a:79:1c:28:6a:9d:
                    a3:20:f1:04:52:c3:be:59:90:24:07:10:b7:0b:e3:
                    e4:c1:ee:2f:da:9f:da:62:73:56:a0:fc:7d:74:71:
                    3c:00:87:ef:e0:28:a7:3b:85:90:84:f5:fa:07:ef:
                    f0:a1:e5:2c:9c:48:5a:b8:30:96:a5:00:44:2e:36:
                    59:19:05:7f:65:d3:a8:a5:9d:72:4e:6f:b5:67:f6:
                    61:eb:0e:74:22:78:63:38:88:6a:63:48:8f:80:6a:
                    50:e2:bb:f6:0f:f4:86:59:09:c6:56:c1:52:26:3b:
                    ac:ed:88:28:5e:1c:eb:aa:49:43:64:3c:eb:33:bc:
                    cb:ee:3a:84:85:f6:5e:cd:bc:4b:5d:57:a7:a8:dd:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E1:AA:2F:A8:C7:54:D3:83:69:4A:CC:30:E4:6F:A9:EA:42:94:8E
            X509v3 Authority Key Identifier:
                keyid:2E:3B:A7:9E:FC:E5:D6:CA:A3:4C:00:96:20:C0:30:2A:7F:5A:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3ae922638ff81e225680ea4c3aac3257c696ced.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27dc5c9e-a56e-41dc-b978-aa7bb11cb61a/f172ae7772c6951846c4acd162cd00d03820f9f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27dc5c9e-a56e-41dc-b978-aa7bb11cb61a/a3ae922638ff81e225680ea4c3aac3257c696ced.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.176.0/22
                IPv6:
                  2803:6740::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:11:e1:9f:ab:07:ad:84:0d:d0:bc:45:ad:e4:72:56:53:11:
         c5:1f:e0:9c:10:50:f4:f8:00:2f:4c:ce:a9:69:52:d1:70:fe:
         01:7d:6f:ef:a4:82:aa:c3:17:d8:94:b9:1a:c1:21:49:49:91:
         8f:5d:9c:0d:7c:6c:ae:9a:22:36:cc:25:10:b0:db:40:ab:41:
         a4:b3:fd:dc:9e:38:65:69:70:71:d1:a3:10:22:88:ec:9f:c6:
         f0:bd:01:85:e8:a0:0d:91:51:71:98:40:f1:2a:a3:6d:33:85:
         eb:93:f3:b8:b4:9d:7c:d0:d2:90:da:e7:02:90:e2:ac:cf:2d:
         7f:62:a5:b0:cb:79:7c:30:5e:76:ac:2b:43:50:24:01:db:57:
         15:ba:d4:e3:6c:28:d2:dc:ff:79:91:5e:43:ec:1a:ba:41:1a:
         a6:c8:5b:02:a1:a3:0b:b2:a6:60:cd:b9:1b:3c:69:f4:f6:f5:
         fe:ae:ed:b0:ea:8d:b6:23:d4:83:69:03:8e:fd:9c:d6:6e:c9:
         99:55:a5:e0:bc:eb:61:4b:c3:03:24:47:82:42:8a:39:8d:7d:
         d9:70:82:f1:b6:52:d4:c3:3b:9c:b0:6a:fa:f2:82:9e:db:2b:
         dd:9c:b9:b5:b1:df:ec:d8:ba:94:ba:53:17:b8:24:25:97:b7:
         d5:54:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----