Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/aa42750c9406cd280f81b4c337ae5a2e8d4d5db8.roa
File:                     aa42750c9406cd280f81b4c337ae5a2e8d4d5db8.roa (raw, json)
Hash identifier:          cN9B4IXj6CrlldC22z53SJQeb3RrtQ+6YH1KWQb4mpA=
Subject key identifier:   39:00:CD:4A:A5:F5:63:63:D7:64:B2:ED:C6:0E:D5:2D:BF:0D:13:EF
Certificate issuer:       /CN=23e6b47caf00c16218d730db4db550ca6fcb92ad
Certificate serial:       061595
Authority key identifier: F4:74:C7:30:BE:A0:94:F6:A8:BB:71:30:62:7C:D7:60:DF:A0:56:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23e6b47caf00c16218d730db4db550ca6fcb92ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/aa42750c9406cd280f81b4c337ae5a2e8d4d5db8.roa
Signing time:             Wed 21 Dec 2022 04:37:04 +0000
ROA not before:           Tue 20 Dec 2022 04:34:34 +0000
ROA not after:            Sat 21 Dec 2024 04:34:34 +0000
asID:                     271922
IP address blocks:        179.63.52.0/22 maxlen: 24
                          2803:df10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398741 (0x61595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e6b47caf00c16218d730db4db550ca6fcb92ad
        Validity
            Not Before: Dec 20 04:34:34 2022 GMT
            Not After : Dec 21 04:34:34 2024 GMT
        Subject: CN=aa42750c9406cd280f81b4c337ae5a2e8d4d5db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:f7:d7:52:fe:db:19:09:c3:a4:bb:9e:4e:
                    17:57:46:a7:9a:c9:0d:74:c1:d9:5c:91:ec:05:4c:
                    4d:94:06:b6:77:de:d5:62:fd:26:1a:7b:76:bf:ea:
                    e7:73:06:62:af:92:61:14:1b:dd:fc:ce:11:e4:2b:
                    79:f7:2a:ef:ae:e8:38:ce:17:7c:9d:34:44:82:66:
                    61:19:c0:cd:cd:50:70:ed:5a:fb:2f:f3:bf:bb:92:
                    21:70:dd:83:fd:a5:34:f8:8b:aa:3a:21:ec:83:b7:
                    61:77:af:fc:00:2a:98:20:75:89:3c:39:5b:20:d2:
                    3f:c8:8e:d7:b0:c8:f6:f1:86:ee:65:f4:d8:4e:6f:
                    99:28:3f:8b:c5:d1:a7:fb:47:1c:8f:e6:9a:93:ba:
                    74:6c:57:4a:c2:2c:5a:b6:6f:22:6e:b1:87:5c:ad:
                    db:a6:15:92:0d:fd:f1:78:94:1c:9a:46:c2:64:08:
                    a7:6c:16:5c:d6:0f:0e:03:64:75:8c:f2:ea:4f:9e:
                    4d:c7:09:8c:3e:ba:2c:30:a7:27:27:22:92:b1:2f:
                    f6:c3:48:16:2d:23:44:cc:5c:29:ea:57:ec:48:1d:
                    19:8b:de:19:26:61:76:2d:84:fb:36:8b:5b:bc:f4:
                    db:d1:ef:8a:0b:6f:42:d8:90:4d:6a:01:3a:bc:0b:
                    32:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:00:CD:4A:A5:F5:63:63:D7:64:B2:ED:C6:0E:D5:2D:BF:0D:13:EF
            X509v3 Authority Key Identifier:
                keyid:F4:74:C7:30:BE:A0:94:F6:A8:BB:71:30:62:7C:D7:60:DF:A0:56:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23e6b47caf00c16218d730db4db550ca6fcb92ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/aa42750c9406cd280f81b4c337ae5a2e8d4d5db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/23e6b47caf00c16218d730db4db550ca6fcb92ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.52.0/22
                IPv6:
                  2803:df10::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:55:aa:ca:ab:7f:87:c5:57:58:55:b1:a2:7a:5b:7c:28:91:
         4c:84:26:32:01:58:36:28:b1:f4:43:1c:e8:59:f5:25:d0:9c:
         52:5b:4a:b2:00:6a:ba:dc:19:0d:ca:70:cb:6e:45:15:92:63:
         28:f7:59:08:b5:50:c1:77:1c:00:a8:4f:15:b4:15:70:29:9a:
         cd:c8:a4:56:c8:d3:b9:c2:c9:92:c3:96:1d:88:c8:a4:48:93:
         65:b3:d9:20:67:fb:b2:68:bf:d2:07:1b:db:17:b1:12:a7:e2:
         7f:8a:3f:3d:7a:3c:00:a2:94:84:45:8f:27:e1:da:35:a7:d6:
         89:45:63:c3:99:1c:0a:85:25:73:f1:64:00:ab:52:e7:0c:8c:
         19:c1:bc:11:67:27:71:46:24:fb:0e:cb:1a:77:ac:8a:8c:4d:
         b5:7c:ca:93:e3:18:a0:c1:51:81:1b:fc:5b:db:c0:96:98:6a:
         72:cc:d9:82:14:91:05:83:4c:21:a1:dd:61:5b:61:04:35:47:
         75:41:c1:95:ab:65:f8:13:c0:a0:99:ae:6e:76:9d:93:49:0f:
         a2:5b:27:4d:50:ee:d3:ad:fe:33:52:86:38:8f:6f:54:f2:db:
         80:56:a8:27:ce:9d:50:19:3e:68:0a:39:91:bd:ad:4e:f5:aa:
         68:13:45:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----