Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/ae26b22127d1456115845337980547dc295ea554.roa
File:                     ae26b22127d1456115845337980547dc295ea554.roa (raw, json)
Hash identifier:          b48MZKz74QPInBCl6TjZwlhEPKXzCiAc6s+PmosA0j4=
Subject key identifier:   6C:40:FA:AE:91:B8:E9:AD:8F:D3:5D:88:48:F7:AF:CC:2A:32:85:0F
Certificate issuer:       /CN=bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06
Certificate serial:       24B18F
Authority key identifier: C5:C3:CF:AC:F3:AA:F1:DA:21:2F:18:CC:2D:EB:6B:A9:6C:D0:71:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/ae26b22127d1456115845337980547dc295ea554.roa
Signing time:             Thu 16 Nov 2023 18:46:48 +0000
ROA not before:           Thu 16 Nov 2023 18:46:48 +0000
ROA not after:            Sun 16 Nov 2025 18:46:48 +0000
asID:                     264820
IP address blocks:        170.80.88.0/22 maxlen: 24
                          2803:dcc0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2404751 (0x24b18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06
        Validity
            Not Before: Nov 16 18:46:48 2023 GMT
            Not After : Nov 16 18:46:48 2025 GMT
        Subject: CN=ae26b22127d1456115845337980547dc295ea554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:1b:28:f5:fa:e9:31:2f:17:46:fa:c2:65:
                    36:94:d3:15:37:81:17:c8:97:e0:56:b3:df:76:78:
                    af:af:08:0c:09:9e:43:42:1c:5d:e8:a9:eb:65:89:
                    0f:c0:14:60:22:3d:ea:91:e0:31:48:e8:e0:eb:d5:
                    96:ce:05:9d:a3:28:94:71:49:70:db:2f:c1:c7:a9:
                    ef:bc:ef:88:e5:e9:f5:0a:5a:9e:c6:8d:46:4d:0c:
                    17:17:41:95:e8:ff:4b:36:8b:78:01:bb:56:30:4c:
                    fd:b2:b5:ad:df:2b:ca:49:81:3f:2e:f6:59:3c:17:
                    da:dd:eb:33:b8:b3:5f:c3:3c:49:6e:29:31:7f:ee:
                    9f:c4:5b:52:70:da:8f:fa:75:2b:ef:b5:c2:10:b5:
                    4f:6a:5c:16:0e:d6:ee:e6:ac:ee:86:1a:85:4b:b7:
                    e8:0c:59:10:7d:4a:c4:10:bd:6e:36:dc:ef:92:bd:
                    7c:af:49:2d:fa:f4:8d:b5:4a:c5:ce:b0:65:a8:d1:
                    19:bc:15:21:d5:db:9d:37:0c:85:9d:17:f2:87:9e:
                    ff:b2:21:bd:3e:98:75:07:03:e7:8e:d3:93:d8:9b:
                    f0:57:8c:c9:a4:fe:8d:90:cd:6d:68:69:07:67:4e:
                    28:27:75:de:71:39:4c:61:68:c6:85:1e:09:f1:1a:
                    ff:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:40:FA:AE:91:B8:E9:AD:8F:D3:5D:88:48:F7:AF:CC:2A:32:85:0F
            X509v3 Authority Key Identifier:
                keyid:C5:C3:CF:AC:F3:AA:F1:DA:21:2F:18:CC:2D:EB:6B:A9:6C:D0:71:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/ae26b22127d1456115845337980547dc295ea554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.88.0/22
                IPv6:
                  2803:dcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:2c:0b:08:6b:15:5e:d7:e6:e9:46:61:e5:3c:7d:24:12:d9:
         b4:67:39:6d:e5:5f:d4:e8:7e:fb:b7:14:cc:c3:53:1e:5f:46:
         ce:0f:f2:41:45:94:15:a4:ab:d1:0a:8f:14:d9:ed:55:df:44:
         6e:8a:2a:cf:3b:88:3d:e4:91:bc:fc:35:1b:bb:28:7c:10:04:
         00:57:54:28:9b:0c:02:9b:8e:a3:36:16:ae:92:b5:c3:13:5a:
         db:c0:63:7d:f9:fb:30:47:bd:a9:d0:3f:db:6a:97:2d:b2:47:
         23:8e:ec:d2:bd:d0:fb:58:4e:8b:81:11:6a:4e:5a:97:ef:27:
         44:c0:76:97:a3:2d:d4:14:c7:0e:89:c1:50:08:9a:a0:57:66:
         76:ab:4c:5c:bb:fb:a7:a9:f8:ec:8f:fb:83:38:f3:31:48:c4:
         ef:97:a8:ac:77:bc:1a:8d:ca:77:9a:e3:5e:3a:f1:e4:c4:7e:
         9b:5b:e1:9a:c3:3a:e0:47:f6:df:93:bf:7e:26:a0:ae:9d:b2:
         cb:01:65:b0:19:23:e9:b7:95:ea:4f:f4:ec:c0:5f:d6:ec:7d:
         d1:3d:5c:3a:67:2f:d3:e6:63:b5:0b:56:98:eb:42:f8:51:66:
         43:fa:9e:d8:9c:63:62:22:2d:b2:c1:19:db:e9:f6:b4:0f:6d:
         66:7c:4c:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJLGPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
OWFkMDE5NTVhYmQ1ZGM1M2ViYzNhYzc3YTlkOTZjYTdmNThkMDYwHhcNMjMxMTE2
MTg0NjQ4WhcNMjUxMTE2MTg0NjQ4WjAzMTEwLwYDVQQDEyhhZTI2YjIyMTI3ZDE0
NTYxMTU4NDUzMzc5ODA1NDdkYzI5NWVhNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlx0bKPX66TEvF0b6wmU2lNMVN4EXyJfgVrPfdnivrwgMCZ5D
Qhxd6KnrZYkPwBRgIj3qkeAxSOjg69WWzgWdoyiUcUlw2y/Bx6nvvO+I5en1Clqe
xo1GTQwXF0GV6P9LNot4AbtWMEz9srWt3yvKSYE/LvZZPBfa3eszuLNfwzxJbikx
f+6fxFtScNqP+nUr77XCELVPalwWDtbu5qzuhhqFS7foDFkQfUrEEL1uNtzvkr18
r0kt+vSNtUrFzrBlqNEZvBUh1dudNwyFnRfyh57/siG9Pph1BwPnjtOT2JvwV4zJ
pP6NkM1taGkHZ04oJ3XecTlMYWjGhR4J8Rr/zQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFGxA+q6RuOmtj9NdiEj3r8wqMoUPMB8GA1UdIwQYMBaAFMXDz6zzqvHaIS8Y
zC3ra6ls0HHrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmY5YWQw
MTk1NWFiZDVkYzUzZWJjM2FjNzdhOWQ5NmNhN2Y1OGQwNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzMxMjhkZWQtNTAwZC00ZjRmLWFhNjUtZjExM2E3
ZTUwODVkL2FlMjZiMjIxMjdkMTQ1NjExNTg0NTMzNzk4MDU0N2RjMjk1ZWE1NTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MzEyOGRlZC01MDBkLTRmNGYtYWE2NS1mMTEz
YTdlNTA4NWQvYmY5YWQwMTk1NWFiZDVkYzUzZWJjM2FjNzdhOWQ5NmNhN2Y1OGQw
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqpQWDANBAIAAjAHAwUAKAPcwDANBgkqhkiG9w0BAQsFAAOC
AQEAcCwLCGsVXtfm6UZh5Tx9JBLZtGc5beVf1Oh++7cUzMNTHl9Gzg/yQUWUFaSr
0QqPFNntVd9EbooqzzuIPeSRvPw1G7sofBAEAFdUKJsMApuOozYWrpK1wxNa28Bj
ffn7MEe9qdA/22qXLbJHI47s0r3Q+1hOi4ERak5al+8nRMB2l6Mt1BTHDonBUAia
oFdmdqtMXLv7p6n47I/7gzjzMUjE75eorHe8Go3Kd5rjXjrx5MR+m1vhmsM64Ef2
35O/fiagrp2yywFlsBkj6beV6k/07MBf1ux90T1cOmcv0+ZjtQtWmOtC+FFmQ/qe
2JxjYiItssEZ2+n2tA9tZnxMcw==
-----END CERTIFICATE-----