Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/3fd0e846c7fd55a15e4f8b8fe7d0081cf0d82c51.roa
File:                     3fd0e846c7fd55a15e4f8b8fe7d0081cf0d82c51.roa (raw, json)
Hash identifier:          7YraGpV2znDlkxbKZi/XK6KpVDy4Kh7hjNQZCb4Dfdo=
Subject key identifier:   06:86:CA:29:41:06:19:FB:6B:A8:6A:97:36:03:59:B0:B4:2C:87:E7
Certificate issuer:       /CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
Certificate serial:       2838B9
Authority key identifier: 4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/3fd0e846c7fd55a15e4f8b8fe7d0081cf0d82c51.roa
Signing time:             Sat 02 Mar 2024 16:08:38 +0000
ROA not before:           Sat 02 Mar 2024 16:08:38 +0000
ROA not after:            Mon 02 Mar 2026 16:08:38 +0000
asID:                     271923
IP address blocks:        164.163.48.0/22 maxlen: 24
                          2803:87c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2635961 (0x2838b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
        Validity
            Not Before: Mar  2 16:08:38 2024 GMT
            Not After : Mar  2 16:08:38 2026 GMT
        Subject: CN=3fd0e846c7fd55a15e4f8b8fe7d0081cf0d82c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:b6:47:13:36:72:21:e2:12:d7:2f:4f:55:
                    f3:2d:52:c2:c7:79:56:b1:13:fb:c2:29:c3:19:32:
                    53:ed:fd:ea:ca:ed:31:8d:0f:7d:24:83:fe:b8:b1:
                    1f:8f:01:55:bc:4c:7e:21:d9:42:40:aa:8e:06:13:
                    10:2c:b8:30:00:3c:6b:69:35:6a:08:2e:9c:66:2e:
                    3c:4e:78:43:ab:06:be:69:c0:ca:f8:8b:f0:c7:d8:
                    ff:6c:e8:8c:06:42:60:0e:3c:77:d5:48:39:78:e1:
                    5e:0a:63:87:b2:8f:e2:6e:2f:20:11:0c:69:b5:c6:
                    1b:9f:8e:78:03:92:d0:6e:7d:fc:e7:d4:68:d7:bb:
                    45:7d:73:b1:8b:10:e6:f7:02:5f:dc:53:36:fc:1a:
                    50:54:48:40:f3:c8:1d:90:a1:6f:53:90:35:18:aa:
                    31:09:ba:dc:82:f2:01:db:44:ce:b9:10:56:1a:9f:
                    1d:cc:47:ae:d2:d4:e9:e4:26:cf:4f:1c:37:d8:2b:
                    14:63:ec:eb:b1:4f:d7:36:3a:d0:a5:28:3f:f6:09:
                    9c:b1:a0:68:e2:d9:75:9b:b2:5a:82:ae:f9:06:c2:
                    81:f0:d3:ea:de:0a:aa:eb:aa:f3:74:59:30:5e:9f:
                    37:2f:04:b3:fc:3f:59:cf:15:64:14:f0:49:7b:c9:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:86:CA:29:41:06:19:FB:6B:A8:6A:97:36:03:59:B0:B4:2C:87:E7
            X509v3 Authority Key Identifier:
                keyid:4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/3fd0e846c7fd55a15e4f8b8fe7d0081cf0d82c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/904a59874ab57a97e46cd1d939a2312a85fe9c71.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.48.0/22
                IPv6:
                  2803:87c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:03:6c:82:73:ff:41:23:d5:b3:2d:4a:15:d1:3f:cf:31:a5:
         b7:30:d6:cc:ba:d0:7c:7f:43:61:b4:a5:32:3b:bd:6d:84:5f:
         6b:1c:e8:82:bb:f2:ec:c8:22:d9:b4:dc:f5:94:0b:b4:77:16:
         2f:df:87:0d:10:22:4c:9c:8d:33:29:0e:92:3b:1f:1e:76:b7:
         2e:f8:a8:9b:4b:9d:a0:77:09:0f:b0:be:d8:d8:63:c4:80:a2:
         b0:f0:f0:8d:10:69:cc:e2:2b:84:ab:b0:60:4d:e9:e1:d3:e2:
         f8:d0:10:85:ca:5f:c2:9e:15:a0:84:62:26:5a:ab:0f:1e:f0:
         de:53:a4:a8:7b:4c:22:ee:92:dd:df:fc:46:a9:85:6a:60:7f:
         42:cc:4b:02:2a:e8:47:11:ec:1a:c4:1d:d4:6d:ba:e2:db:83:
         53:67:4b:6f:50:5d:96:1f:56:01:d4:2e:90:7a:2b:46:5b:8c:
         d8:2b:6a:ca:9d:52:e1:45:de:15:a3:2b:51:14:ca:59:b3:3d:
         0d:4b:66:d8:e7:78:e0:da:49:74:02:4f:c7:1a:ad:14:36:a3:
         10:80:e2:a5:52:c9:ed:83:74:10:95:ba:3b:ac:63:ba:b4:74:
         ad:ee:0a:9e:f4:05:b9:5d:94:ee:1e:02:7d:e0:d8:ac:b6:0f:
         23:fb:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----