Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/b39553a97a91277118500ccf82deffacc4ec8c6c.roa
File:                     b39553a97a91277118500ccf82deffacc4ec8c6c.roa (raw, json)
Hash identifier:          7iyMgWLll61hfhN4OaB4/g8MjWmTsclz/9rI3ZTnxPA=
Subject key identifier:   C2:5C:DD:BD:B2:0C:E3:00:E2:A0:8E:8A:76:58:FC:D1:7B:91:38:1B
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       05CA95
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/b39553a97a91277118500ccf82deffacc4ec8c6c.roa
Signing time:             Tue 11 Jul 2023 12:39:35 +0000
ROA not before:           Mon 10 Jul 2023 12:39:35 +0000
ROA not after:            Fri 11 Jul 2025 12:39:35 +0000
asID:                     16629
IP address blocks:        152.173.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379541 (0x5ca95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Jul 10 12:39:35 2023 GMT
            Not After : Jul 11 12:39:35 2025 GMT
        Subject: CN=b39553a97a91277118500ccf82deffacc4ec8c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:05:9c:3b:fc:7b:64:e1:cc:e1:6b:e0:ee:
                    7a:cd:66:93:dd:07:12:0e:00:db:ea:bd:f6:28:dd:
                    f6:2e:96:6a:cf:e3:39:48:fc:0f:c7:91:21:34:fd:
                    7c:c1:bd:14:88:c1:c2:8e:02:df:f0:89:94:ce:b8:
                    d0:db:24:45:cf:4b:65:b8:c9:ea:e3:3a:c0:f9:aa:
                    80:4f:a4:5c:80:53:e7:71:ae:7e:6f:cb:de:d4:20:
                    61:ef:4f:68:9e:52:1a:16:55:58:06:b6:a2:5b:8c:
                    97:17:cd:22:b4:3b:83:7e:ed:b2:46:81:03:43:89:
                    e6:07:4e:9c:cb:01:47:96:ec:7c:f7:1f:fe:72:7e:
                    fa:dd:d0:9a:e4:56:72:0d:8f:a5:93:63:ef:b6:44:
                    c7:44:f9:6f:b0:40:f5:17:81:fe:bf:9f:20:9a:53:
                    fa:b8:61:88:b7:f9:47:b0:fe:0c:f7:c1:3f:81:95:
                    b5:e0:cb:2e:61:91:b8:ea:75:ad:1d:b9:62:84:05:
                    96:d2:f4:4a:a9:dd:10:d8:51:80:3c:7c:51:76:72:
                    a0:e0:6e:4b:c3:f7:7e:4a:d6:f8:82:70:f6:a8:32:
                    f6:ff:26:71:a7:a7:1b:d0:8e:df:bb:7c:5c:14:52:
                    84:19:6d:12:78:61:d0:f7:17:b2:f7:a3:8c:ee:d4:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5C:DD:BD:B2:0C:E3:00:E2:A0:8E:8A:76:58:FC:D1:7B:91:38:1B
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/b39553a97a91277118500ccf82deffacc4ec8c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.173.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:d5:dd:55:ee:31:80:ab:47:3a:b2:f8:a8:c9:a8:4a:cf:f6:
         94:b8:1e:6a:df:67:82:aa:5c:48:e3:92:60:43:13:fc:d3:db:
         a5:c2:c3:4c:d7:8a:b5:56:95:fc:07:2f:78:5a:83:89:7f:c9:
         d9:33:af:69:91:00:4f:b8:86:00:5c:bc:fa:fa:16:f9:67:de:
         7d:e6:a2:e6:6b:8f:03:31:af:02:e1:29:9a:ab:d1:d4:e3:73:
         29:2b:74:6f:63:42:5e:7e:be:e0:ff:b0:49:17:15:ef:b8:62:
         bd:5e:57:7c:72:6b:52:d7:6d:cb:58:a0:4d:9e:ab:ef:60:8a:
         96:c0:38:89:48:8e:56:87:a6:96:2a:f8:48:5d:ef:b5:78:69:
         eb:8a:b9:41:18:5b:97:df:e6:ef:4a:8e:9e:2b:89:2c:95:3c:
         f3:7a:b9:87:2b:fb:3a:8b:48:36:31:fe:98:cb:bb:f3:a5:97:
         97:86:75:ce:ed:7b:1a:d9:d8:46:2a:45:db:77:bc:45:5d:ec:
         39:e0:82:78:6b:96:15:91:15:a9:06:a6:8d:df:36:55:db:e0:
         ad:cd:94:7c:a4:16:71:e2:aa:dd:ef:16:18:d4:4d:13:ff:e9:
         1e:6b:ca:3e:5c:29:c8:3b:11:54:83:8d:84:1e:e0:fc:e5:fb:
         fd:88:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----