Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/1506560383e8cae39691bb51cd511677f5978865.roa
File:                     1506560383e8cae39691bb51cd511677f5978865.roa (raw, json)
Hash identifier:          Joty8AuaX42wELGWIT+szuL0WI1AumShwAamfdSfwhQ=
Subject key identifier:   5B:3C:DC:E9:C2:0B:2D:D4:30:06:6D:9C:78:03:B8:82:1D:BA:C7:63
Certificate issuer:       /CN=fa17fa162b8c63daa4db78d5049749365ad3d60b
Certificate serial:       1837
Authority key identifier: 0D:D0:B1:C1:C5:51:BE:21:8B:9B:99:DA:9F:C5:19:33:E6:66:86:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa17fa162b8c63daa4db78d5049749365ad3d60b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/1506560383e8cae39691bb51cd511677f5978865.roa
Signing time:             Sat 08 Oct 2022 13:32:38 +0000
ROA not before:           Sat 08 Oct 2022 01:12:37 +0000
ROA not after:            Tue 08 Oct 2024 01:12:37 +0000
asID:                     264680
IP address blocks:        168.227.4.0/22 maxlen: 24
                          2803:7d40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6199 (0x1837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa17fa162b8c63daa4db78d5049749365ad3d60b
        Validity
            Not Before: Oct  8 01:12:37 2022 GMT
            Not After : Oct  8 01:12:37 2024 GMT
        Subject: CN=1506560383e8cae39691bb51cd511677f5978865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:db:f9:f0:89:8d:87:f6:d7:52:c5:5c:18:
                    db:f6:42:98:7b:00:68:a7:8a:17:83:d4:e9:5f:4c:
                    ec:c7:13:be:79:fa:cd:5c:60:85:9f:c7:0b:df:cb:
                    ef:1a:25:bd:e7:e4:d1:f9:dd:ac:65:70:96:6b:e4:
                    08:52:ec:4b:20:4d:6e:52:05:89:fa:c3:6d:8d:cd:
                    81:fa:74:7d:97:ff:80:b7:6b:13:9e:bf:ec:34:6b:
                    e2:57:49:58:3c:8e:e2:ff:c2:4c:00:21:8e:89:aa:
                    9c:75:b3:39:55:7a:0b:da:6c:e1:a2:dc:7f:03:90:
                    63:e9:d4:5a:8f:e9:9c:70:00:3b:92:72:aa:30:24:
                    55:eb:38:c1:66:d7:ad:84:fa:2c:87:17:51:4d:d4:
                    92:86:57:bd:00:66:3e:e2:45:eb:5b:89:5a:fa:d6:
                    a7:87:5d:25:40:64:05:de:9f:94:16:71:6b:b3:ac:
                    a1:fb:d1:73:7f:3d:9e:d9:f7:9a:f7:ca:ec:10:a2:
                    df:e9:b9:4c:68:a1:15:6a:0f:19:3e:ee:2a:54:c3:
                    8b:c6:f2:7f:6a:29:d5:62:3d:34:5b:3b:7d:b8:c0:
                    9b:9a:a5:d5:16:86:77:c1:70:77:fa:7d:6e:ff:9c:
                    c6:32:e8:bd:bf:85:4b:45:34:97:a1:ed:d8:d9:a5:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3C:DC:E9:C2:0B:2D:D4:30:06:6D:9C:78:03:B8:82:1D:BA:C7:63
            X509v3 Authority Key Identifier:
                keyid:0D:D0:B1:C1:C5:51:BE:21:8B:9B:99:DA:9F:C5:19:33:E6:66:86:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa17fa162b8c63daa4db78d5049749365ad3d60b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/1506560383e8cae39691bb51cd511677f5978865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/fa17fa162b8c63daa4db78d5049749365ad3d60b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.4.0/22
                IPv6:
                  2803:7d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:2a:b6:ea:0e:b3:90:7e:8f:8e:29:8e:f2:4b:e1:d7:cd:02:
         ff:7f:97:cd:7f:02:d0:21:1e:86:fa:3d:57:45:e3:da:9f:bc:
         9a:4d:47:3e:32:a0:12:06:ea:a6:07:3a:92:04:3e:da:36:15:
         12:2a:4e:d0:e1:e9:d8:e1:53:39:26:8b:32:fe:fa:c3:13:9e:
         91:b9:46:43:61:28:4f:82:37:df:2c:75:3f:4c:9f:d9:61:a7:
         f2:cb:e5:a7:0b:0b:34:90:8c:45:7a:60:8f:d6:9b:f7:08:61:
         ab:7a:db:4c:ca:b3:99:3d:73:74:e1:5c:30:78:29:0e:7b:db:
         6a:20:37:75:83:d3:be:20:fe:4f:69:89:3c:c5:bc:d0:cd:d1:
         22:02:1f:4d:c8:ec:27:80:bb:89:a1:af:22:42:d1:1c:35:c7:
         d4:44:52:18:63:32:53:b6:54:71:78:28:cc:1d:e3:61:77:87:
         09:a4:71:2b:51:d4:61:e1:2d:87:c8:7d:95:59:c6:fc:68:7b:
         14:c0:7e:e3:05:5f:90:7c:9a:6e:ee:92:ac:12:01:7b:e3:f2:
         ac:9f:41:e5:a4:6f:7e:9b:27:f1:63:81:0c:60:38:1c:3e:c9:
         93:93:f5:75:de:8d:8b:60:32:f1:17:c6:48:97:ff:3b:56:24:
         78:50:f0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----