Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2c13e0ad-f17d-4909-a74d-f1b0675cb433/0b2951fa0ba2138b2dfa290be864e1511d3f9e2c.roa
File:                     0b2951fa0ba2138b2dfa290be864e1511d3f9e2c.roa (raw, json)
Hash identifier:          nv8RgzgINDetNdh2o2fQAIeo0U+Ry1XE9JTCBYJRtj0=
Subject key identifier:   07:98:9E:D5:60:3E:C3:AB:DA:7E:6A:21:AE:7F:F6:96:0B:10:11:65
Certificate issuer:       /CN=61bb73ceb58daba7846b78a087961dedc7d99577
Certificate serial:       0424
Authority key identifier: 0F:3A:E1:B9:B3:98:12:53:AA:22:AB:C5:04:94:87:2C:A0:28:7A:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61bb73ceb58daba7846b78a087961dedc7d99577.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2c13e0ad-f17d-4909-a74d-f1b0675cb433/0b2951fa0ba2138b2dfa290be864e1511d3f9e2c.roa
Signing time:             Mon 15 May 2023 16:44:35 +0000
ROA not before:           Sun 14 May 2023 16:44:35 +0000
ROA not after:            Thu 15 May 2025 16:44:35 +0000
asID:                     265778
IP address blocks:        164.163.240.0/24 maxlen: 24
                          2801:1d:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61bb73ceb58daba7846b78a087961dedc7d99577
        Validity
            Not Before: May 14 16:44:35 2023 GMT
            Not After : May 15 16:44:35 2025 GMT
        Subject: CN=0b2951fa0ba2138b2dfa290be864e1511d3f9e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:78:c4:1b:18:c1:19:80:b3:a4:79:10:7f:fd:
                    a0:e8:99:e0:e6:4a:96:9f:89:4f:fa:84:94:df:e2:
                    23:f6:93:f6:d0:ef:24:89:8b:c6:86:bd:be:ff:df:
                    44:03:ca:a3:51:ce:48:ea:7e:24:5f:87:8f:15:03:
                    95:05:8b:17:ca:98:b2:5b:d8:5b:67:c1:ef:3d:ba:
                    5a:d4:78:87:30:84:59:cd:4d:80:70:9a:aa:4a:a2:
                    3a:79:5b:18:e4:cb:39:b1:ea:55:a3:a4:14:c6:65:
                    9b:05:f7:b1:e3:02:72:ec:60:ff:03:65:f6:30:00:
                    d7:4f:5e:d0:2f:01:27:16:0b:d0:0d:5e:33:2d:46:
                    5e:e1:df:0f:ac:8a:2e:9e:4c:a3:df:d4:20:2e:04:
                    28:20:7d:f2:65:66:09:8c:b1:e3:d6:d6:39:a2:d6:
                    16:ac:3d:c6:7d:6b:e6:6b:b2:35:a1:fb:73:81:fc:
                    07:83:78:88:6c:d4:ba:8d:66:23:41:76:8c:57:ae:
                    7e:05:62:4d:0d:e7:62:36:1d:fd:fc:d8:37:54:34:
                    6e:86:74:a3:49:90:e4:a2:64:96:8f:6c:29:e5:79:
                    01:3c:ba:e6:1b:c4:43:75:ef:9a:5b:ec:1c:b0:3e:
                    83:ab:2f:b8:6e:54:50:5a:af:86:38:64:8f:4d:77:
                    7f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:98:9E:D5:60:3E:C3:AB:DA:7E:6A:21:AE:7F:F6:96:0B:10:11:65
            X509v3 Authority Key Identifier:
                keyid:0F:3A:E1:B9:B3:98:12:53:AA:22:AB:C5:04:94:87:2C:A0:28:7A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61bb73ceb58daba7846b78a087961dedc7d99577.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2c13e0ad-f17d-4909-a74d-f1b0675cb433/0b2951fa0ba2138b2dfa290be864e1511d3f9e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2c13e0ad-f17d-4909-a74d-f1b0675cb433/61bb73ceb58daba7846b78a087961dedc7d99577.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.240.0/24
                IPv6:
                  2801:1d:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:08:4a:16:5f:2f:d3:ae:f2:0b:9b:da:97:dd:37:4d:95:bb:
         3b:b4:0e:ac:a8:51:2e:20:bc:a9:ae:31:e1:53:bb:b4:db:8c:
         a1:12:b3:60:76:dd:dd:c2:e8:51:1a:e1:e8:a8:ad:2d:04:c8:
         ad:2d:37:ad:a9:a2:c4:57:08:53:c3:ed:7d:d0:6c:d7:ba:69:
         57:09:31:e2:59:24:7c:d1:e3:29:98:0f:2e:9d:9d:4a:b0:14:
         29:dd:c2:af:8c:b6:0b:25:7a:f8:10:88:98:ef:d9:30:70:2b:
         a8:d3:1f:e7:cd:ff:01:a3:0e:65:bd:05:98:0b:26:d1:29:fc:
         9d:c4:d4:57:c9:86:1b:e3:59:0e:66:69:a2:53:c5:cf:52:97:
         0b:c3:fd:9a:1d:d7:06:37:36:00:7c:52:a8:02:79:a9:dd:73:
         64:9e:14:be:6b:2c:8e:eb:53:e3:6c:1e:f6:cd:38:1a:06:3d:
         a3:ba:ea:4e:9e:a7:f4:bd:99:21:5b:4a:4e:da:3e:7d:6d:58:
         e6:f5:46:a4:65:13:f4:1c:00:91:59:b4:55:98:90:06:d2:a2:
         ae:c2:34:fd:9b:4f:b8:04:53:e7:35:34:6d:4e:f3:91:cb:10:
         4e:ae:7b:2b:9c:62:4f:bb:69:86:97:ec:50:44:a7:4b:77:07:
         a1:48:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----