Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/61cbf8e170875b41f94836957ca67ba8af416ace.roa
File:                     61cbf8e170875b41f94836957ca67ba8af416ace.roa (raw, json)
Hash identifier:          dtbux1H9GjxP9KT5ybOV7gOPtMpD1MRfUU4L2Zs3zNQ=
Subject key identifier:   B7:77:D3:40:D6:5C:1E:C1:EA:31:BA:B7:97:85:B6:18:D6:2F:F3:4A
Certificate issuer:       /CN=f1e750e661607322fb98ea988d7624f49cbc68cb
Certificate serial:       20B9CE
Authority key identifier: F8:B0:D5:31:73:34:5B:2F:37:5D:D4:B4:27:59:C7:B4:BD:4E:BC:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1e750e661607322fb98ea988d7624f49cbc68cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/61cbf8e170875b41f94836957ca67ba8af416ace.roa
Signing time:             Tue 06 Jun 2023 09:58:07 +0000
ROA not before:           Mon 05 Jun 2023 09:58:07 +0000
ROA not after:            Fri 06 Jun 2025 09:58:07 +0000
asID:                     21351
IP address blocks:        161.22.64.0/18 maxlen: 24
                          2803:1680:3000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2144718 (0x20b9ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1e750e661607322fb98ea988d7624f49cbc68cb
        Validity
            Not Before: Jun  5 09:58:07 2023 GMT
            Not After : Jun  6 09:58:07 2025 GMT
        Subject: CN=61cbf8e170875b41f94836957ca67ba8af416ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:4d:28:76:06:21:4d:9d:71:42:5e:a2:fb:
                    35:7e:7d:da:bc:84:46:0a:79:08:81:45:e1:cb:c5:
                    1b:87:ce:c9:a9:62:61:bb:b7:58:57:12:72:da:13:
                    7f:86:c2:66:ef:14:51:73:f6:d9:b4:5a:0b:b1:56:
                    e2:10:6e:6e:40:0c:5f:6f:4b:5f:b6:79:dc:09:0e:
                    c8:36:62:f4:4b:d4:41:d8:d7:93:67:43:d2:a3:9b:
                    19:d3:87:d0:d7:ce:43:8b:9d:ae:8e:68:b9:d1:2d:
                    06:3e:43:f3:15:10:b4:ae:f8:7e:91:80:71:a3:7a:
                    78:78:7a:f6:0a:4d:b7:c6:ab:c2:22:94:5e:8f:08:
                    77:a2:db:26:c4:73:82:17:84:34:39:0e:fa:e9:71:
                    9f:ad:68:56:62:b4:a0:40:04:cc:b6:ab:10:41:23:
                    4c:f1:fd:45:a1:63:63:57:e0:fa:34:e4:01:ca:19:
                    62:67:07:c5:75:a5:5d:7d:02:27:9e:a7:10:c7:02:
                    d9:29:f6:9f:f5:c5:be:3d:0c:65:da:36:38:85:4e:
                    51:47:a7:4f:72:41:fb:2d:1f:31:19:73:46:8f:86:
                    d6:b4:b6:20:bd:3a:26:1d:d6:b3:7d:99:c8:ad:f9:
                    6b:f9:fd:37:92:26:27:ab:05:4a:1d:16:44:d1:2c:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:77:D3:40:D6:5C:1E:C1:EA:31:BA:B7:97:85:B6:18:D6:2F:F3:4A
            X509v3 Authority Key Identifier:
                keyid:F8:B0:D5:31:73:34:5B:2F:37:5D:D4:B4:27:59:C7:B4:BD:4E:BC:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1e750e661607322fb98ea988d7624f49cbc68cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/61cbf8e170875b41f94836957ca67ba8af416ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a8328fa-7639-42a5-af2b-42bd3b4ef5fa/f1e750e661607322fb98ea988d7624f49cbc68cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.64.0/18
                IPv6:
                  2803:1680:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:07:41:58:23:92:e0:86:fe:bc:bc:6e:59:d8:bf:db:f0:a3:
         50:36:89:f9:bc:93:68:36:14:64:e1:49:57:af:cc:b0:8a:c5:
         cd:8e:5d:78:c7:08:0e:5d:6c:00:4d:4e:cc:e1:ff:fb:eb:03:
         35:55:df:29:27:aa:4f:ab:40:55:b6:bd:e7:df:4c:a7:db:2a:
         e3:96:ae:8e:7e:6c:eb:9a:29:e2:f7:4b:11:30:23:4e:07:db:
         24:e8:1b:a4:27:cf:49:c2:1d:ff:41:00:e1:5a:4f:80:cd:ac:
         fa:1f:dd:65:00:28:ca:72:e0:4e:9b:d6:ea:9c:15:a5:ad:3f:
         0f:94:ef:19:bd:bc:9c:c0:25:10:48:8a:37:09:08:78:35:3e:
         e3:78:ed:09:79:fd:09:65:f7:64:bf:fa:ed:8b:3a:6d:0a:b3:
         1e:7a:64:61:e0:1c:ef:05:0c:7c:0b:db:8a:0c:c7:5e:fd:b9:
         4b:d0:75:cf:df:83:da:1e:68:96:3c:60:be:52:ec:92:2f:72:
         36:b2:f9:65:07:7e:6b:88:93:ce:c3:57:26:c1:24:de:91:73:
         8b:3e:92:b9:66:c9:49:04:23:00:5a:ed:6e:f1:5b:da:c6:e3:
         fe:b3:d9:3b:d3:a8:e3:16:41:ea:23:b2:a9:4e:d7:81:a7:b8:
         e0:96:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----