Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a22b875-4ab9-4486-b6fb-5c03e7688a1d/afa0f4f0d6cf33ee65a05aeec3e38b706508f624.roa
File:                     afa0f4f0d6cf33ee65a05aeec3e38b706508f624.roa (raw, json)
Hash identifier:          Se3q03w+6NiEFP+KwbKzokVv2e9wawi052An4nek74o=
Subject key identifier:   DC:F9:04:97:26:AF:C1:88:27:96:8E:9E:AE:C6:12:AF:C6:9A:CA:E6
Certificate issuer:       /CN=310483b0cf60b6c0a68a5a5176e8254e0a55b879
Certificate serial:       17DD77
Authority key identifier: 4A:24:2E:1A:5D:54:09:EF:21:95:20:13:AC:27:01:04:35:B5:86:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/310483b0cf60b6c0a68a5a5176e8254e0a55b879.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a22b875-4ab9-4486-b6fb-5c03e7688a1d/afa0f4f0d6cf33ee65a05aeec3e38b706508f624.roa
Signing time:             Thu 07 Dec 2023 21:17:43 +0000
ROA not before:           Thu 07 Dec 2023 21:17:43 +0000
ROA not after:            Sun 07 Dec 2025 21:17:43 +0000
asID:                     270004
IP address blocks:        187.102.216.0/22 maxlen: 24
                          2803:d1e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564023 (0x17dd77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310483b0cf60b6c0a68a5a5176e8254e0a55b879
        Validity
            Not Before: Dec  7 21:17:43 2023 GMT
            Not After : Dec  7 21:17:43 2025 GMT
        Subject: CN=afa0f4f0d6cf33ee65a05aeec3e38b706508f624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:25:eb:e9:fc:6c:9c:44:99:f2:83:0f:52:
                    54:c4:20:c0:55:e3:66:4d:9e:6e:25:2d:72:cb:e0:
                    20:50:9f:01:2b:5d:56:a8:bb:fa:17:2a:95:5a:3e:
                    31:09:64:fc:4f:8b:74:5e:06:33:43:39:1f:c5:33:
                    93:22:bf:50:15:8e:50:74:f5:d5:1a:36:ec:97:00:
                    0d:5c:3c:28:25:75:df:02:45:48:91:bb:73:05:a1:
                    ea:6e:0f:6c:0a:4b:ba:f6:62:d4:7d:95:73:3f:23:
                    d8:87:ed:ff:41:50:24:c8:cb:da:0a:25:5e:de:68:
                    ec:7a:90:40:f1:f5:31:47:bc:a6:5b:0d:de:da:31:
                    b9:7d:b0:03:d1:2d:3b:f2:62:73:83:4e:73:bf:95:
                    c2:ed:5f:fd:37:0e:5c:ce:43:d5:fb:d9:b8:24:f0:
                    84:7b:0f:1c:2d:04:5f:ab:02:81:2c:76:60:b7:4c:
                    50:75:9e:44:1d:b8:53:ee:cd:11:9e:08:c7:b7:30:
                    a6:b7:92:31:72:31:f1:c8:3e:2f:ce:e4:26:bc:ee:
                    b1:66:6b:c3:9e:25:2f:3c:5a:22:39:4b:31:55:ff:
                    b8:9a:f2:18:eb:2d:f6:39:f7:58:f0:a5:a8:ed:9d:
                    b8:f3:62:00:23:8c:a9:1a:13:84:c7:f1:53:76:e7:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F9:04:97:26:AF:C1:88:27:96:8E:9E:AE:C6:12:AF:C6:9A:CA:E6
            X509v3 Authority Key Identifier:
                keyid:4A:24:2E:1A:5D:54:09:EF:21:95:20:13:AC:27:01:04:35:B5:86:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/310483b0cf60b6c0a68a5a5176e8254e0a55b879.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a22b875-4ab9-4486-b6fb-5c03e7688a1d/afa0f4f0d6cf33ee65a05aeec3e38b706508f624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a22b875-4ab9-4486-b6fb-5c03e7688a1d/310483b0cf60b6c0a68a5a5176e8254e0a55b879.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.216.0/22
                IPv6:
                  2803:d1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:42:c7:b6:bc:46:b4:6a:71:41:95:ce:4b:1b:b5:d4:1e:dd:
         53:56:64:02:d8:9e:f3:96:b7:1d:6e:6c:83:67:a8:eb:6e:e7:
         9d:40:56:e2:9c:0d:d4:b3:6e:cb:b9:d7:4f:64:61:ee:66:1d:
         b3:1c:b6:4f:8d:01:00:61:27:54:87:0c:6e:5e:f5:85:53:81:
         6d:8b:3c:35:53:69:79:21:73:3e:38:4f:66:77:4f:5c:80:89:
         99:f3:25:f6:1c:52:ee:5c:43:ca:73:06:1a:9c:f3:84:6d:af:
         22:f2:f8:2e:1f:ff:c0:3a:fd:bd:7e:bf:95:84:6e:4c:73:8a:
         72:c5:ab:94:d4:07:9d:04:d8:d4:b1:01:65:9c:aa:b4:12:11:
         76:3c:83:23:dc:f1:23:cf:19:1b:43:db:57:30:55:e7:a6:d4:
         7a:0a:63:b4:54:c8:a6:51:4a:8c:9f:5c:65:8a:5e:4b:22:6e:
         fa:00:6c:5d:a1:c9:f8:c8:7b:96:f4:d2:22:01:b3:6d:7b:69:
         58:c4:84:e6:6a:b2:1a:f2:04:5f:b4:e2:d7:f7:e6:a2:6a:0f:
         08:d6:34:21:fd:d7:ef:66:a3:22:23:23:95:8c:03:ee:cc:1d:
         61:ce:9a:59:79:ff:7d:f5:9e:1a:ef:f1:3e:e4:f1:54:68:14:
         0a:a9:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----