Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/1f32531db1ba9e9feda754cfad7a7e8c0695a02a.roa
File:                     1f32531db1ba9e9feda754cfad7a7e8c0695a02a.roa (raw, json)
Hash identifier:          lM/eoTHdDwTzTFQGLjjx/fsX9dsfzIHZT1zIfOJFtbc=
Subject key identifier:   CD:81:22:5C:3E:F8:8E:BB:9D:43:97:6E:7D:9F:07:06:77:31:2F:66
Certificate issuer:       /CN=5fea161e2c66e493ae97ef08f4b440569dd42244
Certificate serial:       1D30C6
Authority key identifier: A9:AB:0C:D1:4A:1A:EE:A7:11:2A:E6:C1:29:3E:B3:33:DB:10:19:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fea161e2c66e493ae97ef08f4b440569dd42244.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/1f32531db1ba9e9feda754cfad7a7e8c0695a02a.roa
Signing time:             Wed 18 Jan 2023 18:37:40 +0000
ROA not before:           Tue 17 Jan 2023 18:37:35 +0000
ROA not after:            Sat 18 Jan 2025 18:37:35 +0000
asID:                     264838
IP address blocks:        170.239.188.0/22 maxlen: 24
                          2803:3cc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913030 (0x1d30c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fea161e2c66e493ae97ef08f4b440569dd42244
        Validity
            Not Before: Jan 17 18:37:35 2023 GMT
            Not After : Jan 18 18:37:35 2025 GMT
        Subject: CN=1f32531db1ba9e9feda754cfad7a7e8c0695a02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5e:b9:7a:8f:24:f0:7c:b8:0f:c0:3c:a2:cb:
                    f3:69:50:94:74:64:7e:11:d5:0a:71:80:81:f7:00:
                    f3:0b:62:66:1d:ec:bd:8b:87:c9:bd:f2:c1:5b:1e:
                    d0:85:76:6e:27:58:21:7a:4b:37:16:08:30:1b:2b:
                    80:54:9d:dc:7c:1c:2f:e5:5d:f2:a8:9f:fd:7d:80:
                    ee:b0:58:de:3e:3f:76:5f:b9:45:b6:6b:96:8b:4c:
                    f4:13:f7:b5:08:13:f1:fa:05:6c:ef:a0:f1:17:0b:
                    60:61:f7:b4:6c:3e:7e:b6:7b:89:b0:0f:a9:fb:a3:
                    6b:24:1f:26:69:e0:8e:d8:20:ae:23:17:23:26:ba:
                    3b:f3:f8:eb:63:40:f4:72:9b:33:d0:6f:86:0b:9f:
                    7b:20:d8:92:1f:a5:16:e4:6a:0a:2c:94:79:b7:78:
                    bf:01:c4:e4:0c:f5:56:ce:25:93:c0:40:c3:a6:a1:
                    b2:10:07:8d:cb:b6:e6:df:83:d9:ff:43:bc:96:9c:
                    b6:0d:ee:d4:e1:8d:31:b9:b3:a3:2f:21:db:ef:43:
                    80:a0:8e:08:cc:e6:17:53:23:6c:0a:62:c4:85:88:
                    59:e1:40:54:4e:eb:df:38:89:7a:7c:fa:d1:7e:a3:
                    08:86:7e:5e:d4:1e:24:75:a2:e7:34:cf:c9:72:31:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:81:22:5C:3E:F8:8E:BB:9D:43:97:6E:7D:9F:07:06:77:31:2F:66
            X509v3 Authority Key Identifier:
                keyid:A9:AB:0C:D1:4A:1A:EE:A7:11:2A:E6:C1:29:3E:B3:33:DB:10:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fea161e2c66e493ae97ef08f4b440569dd42244.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/1f32531db1ba9e9feda754cfad7a7e8c0695a02a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/5fea161e2c66e493ae97ef08f4b440569dd42244.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.188.0/22
                IPv6:
                  2803:3cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:c1:e1:57:9e:7d:d3:28:a9:4e:6f:0e:29:ca:ab:1e:ff:0a:
         74:1c:22:c1:e6:39:dd:f4:36:61:a0:bf:be:2a:c4:ae:ba:03:
         ae:e7:bf:99:d2:fc:f5:37:34:b1:91:cc:60:f2:b5:bd:cb:fb:
         95:e6:77:80:18:3f:cf:fd:7d:a4:e0:16:a8:d1:71:75:95:fd:
         65:2b:e3:11:1d:21:d4:08:50:43:54:38:17:ab:81:85:b4:d2:
         e1:ce:54:22:97:36:d3:7e:3d:3a:a1:42:03:f9:9a:e6:3a:d2:
         ba:87:db:2c:29:29:53:fe:eb:1d:18:84:87:a8:19:06:7a:78:
         cd:3f:39:1f:11:4f:d4:ec:34:a1:81:40:42:7e:fb:5d:a8:80:
         96:d1:f2:db:a7:3a:ff:12:f0:91:31:3c:12:54:44:c5:83:74:
         63:d7:de:7b:cf:70:6a:f0:7f:77:bc:3f:3d:b8:58:64:4a:c7:
         6f:cf:df:30:15:3c:69:cd:80:12:66:a6:19:5d:d1:cf:ff:cc:
         ee:5a:2e:d4:ce:d5:f2:80:74:8e:b1:f4:dc:a4:14:f8:e1:cf:
         e5:57:b6:85:d9:cb:a5:2b:34:ba:f0:c0:c3:01:3e:3d:be:db:
         fb:bf:cb:d2:de:6b:02:a5:7e:0a:77:07:c7:22:c4:32:73:a0:
         3a:22:97:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----