Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/2daccf69364398c4f2377d7bde44c07ae781dd8b.roa
File:                     2daccf69364398c4f2377d7bde44c07ae781dd8b.roa (raw, json)
Hash identifier:          xxnL4XXTdTbSMP5dOEmmt9pKEZxjF0ZMMI8Q57gn1F8=
Subject key identifier:   0A:6D:9B:D4:2C:FE:56:37:0C:B5:D8:53:A8:3D:BD:93:72:6B:9C:05
Certificate issuer:       /CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Certificate serial:       158694
Authority key identifier: 84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/2daccf69364398c4f2377d7bde44c07ae781dd8b.roa
Signing time:             Wed 05 Apr 2023 21:46:47 +0000
ROA not before:           Tue 04 Apr 2023 21:46:46 +0000
ROA not after:            Sat 05 Apr 2025 21:46:46 +0000
asID:                     265639
IP address blocks:        170.246.88.0/22 maxlen: 24
                          2803:6c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1410708 (0x158694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
        Validity
            Not Before: Apr  4 21:46:46 2023 GMT
            Not After : Apr  5 21:46:46 2025 GMT
        Subject: CN=2daccf69364398c4f2377d7bde44c07ae781dd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:d9:b8:c7:e8:c0:92:88:42:6c:3b:d1:fb:
                    a2:e9:67:43:b9:24:9f:41:f5:c1:b9:23:ca:b3:46:
                    ad:bf:c8:f9:bc:41:a8:0e:a9:c0:04:09:ae:da:8c:
                    cc:4b:59:63:2e:69:e2:28:af:55:0d:4a:e4:dd:76:
                    16:35:61:55:8a:cf:89:dd:83:be:a0:77:24:0b:17:
                    b2:d2:b4:48:49:49:d0:62:8f:5b:83:2d:ee:04:67:
                    d1:db:6d:fa:82:0e:66:bd:96:73:bd:b0:24:03:22:
                    ce:7d:21:f7:2f:6f:3a:aa:39:e1:4c:67:15:4c:e1:
                    6d:86:1d:00:c8:5d:28:2b:0f:0d:57:0a:69:42:b9:
                    f5:e0:4b:6e:fe:8f:5b:4a:21:7f:d6:4e:8a:be:50:
                    97:c3:a4:fc:77:3a:dc:87:c2:c1:4e:e8:f4:db:b5:
                    39:f5:c8:ec:4a:ca:31:4d:06:57:c6:0b:b5:3d:8d:
                    db:0d:30:ba:ad:7d:93:c3:bd:e5:87:be:97:7b:ca:
                    b6:35:b0:b4:8c:bc:e2:7a:66:33:54:66:ab:15:3d:
                    c2:63:e4:5e:69:9c:19:55:45:a4:24:6f:fe:67:4b:
                    1e:5b:bf:8d:f5:7f:aa:aa:c0:08:5c:81:8b:60:35:
                    64:77:e1:e5:f0:40:37:ab:30:8b:dd:1e:83:ff:43:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:9B:D4:2C:FE:56:37:0C:B5:D8:53:A8:3D:BD:93:72:6B:9C:05
            X509v3 Authority Key Identifier:
                keyid:84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/2daccf69364398c4f2377d7bde44c07ae781dd8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.88.0/22
                IPv6:
                  2803:6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:6d:2b:90:ab:96:99:a9:b7:8b:ee:d1:02:c5:c6:99:d0:2e:
         1c:c6:a1:d9:84:02:f0:78:0d:9d:81:c0:78:06:06:5b:c3:2f:
         d0:d8:e7:14:b4:a4:c4:05:9a:89:5e:82:ad:4e:21:11:01:54:
         16:b7:b1:42:5f:fc:20:8a:8c:a5:0e:9b:1d:bb:50:37:a2:bb:
         f5:be:c0:be:f4:0b:d9:8e:cd:0f:a8:ee:d8:83:24:e5:46:3a:
         36:90:a6:23:5b:e9:bf:cc:87:70:72:17:bd:f0:bd:98:9e:f1:
         cf:d2:90:e1:ae:88:97:0c:ca:cd:13:98:18:c2:fc:75:2c:99:
         23:79:05:5f:4a:5c:51:d2:fa:0f:2c:78:86:7f:ed:ac:a9:c7:
         a7:23:1c:d1:c1:11:19:fa:b5:57:6e:2d:b7:31:47:99:fe:9c:
         4c:ee:b1:af:31:fe:4c:3b:48:28:bb:40:83:27:51:38:bf:5b:
         bd:fe:ce:cf:fb:74:5d:ee:7c:b0:fa:e3:49:2d:b4:9b:0d:4a:
         3c:0c:9e:90:e6:ed:f4:5a:fd:e3:44:8a:e6:24:16:7a:6c:9c:
         07:cb:35:eb:36:e5:c7:28:2d:bc:f8:79:3c:58:5d:a0:9f:15:
         dd:da:ce:44:e8:a1:31:a5:62:3c:69:2d:1f:4e:65:a4:ac:99:
         7e:7e:ae:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDFYaUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUw
MWYxZjBmM2EyYWNkZmQxMjExNDM2ODNkMGE5Y2ZjMTY1N2RhNjcwHhcNMjMwNDA0
MjE0NjQ2WhcNMjUwNDA1MjE0NjQ2WjAzMTEwLwYDVQQDEygyZGFjY2Y2OTM2NDM5
OGM0ZjIzNzdkN2JkZTQ0YzA3YWU3ODFkZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqZ7ZuMfowJKIQmw70fui6WdDuSSfQfXBuSPKs0atv8j5vEGo
DqnABAmu2ozMS1ljLmniKK9VDUrk3XYWNWFVis+J3YO+oHckCxey0rRISUnQYo9b
gy3uBGfR2236gg5mvZZzvbAkAyLOfSH3L286qjnhTGcVTOFthh0AyF0oKw8NVwpp
Qrn14Etu/o9bSiF/1k6KvlCXw6T8dzrch8LBTuj027U59cjsSsoxTQZXxgu1PY3b
DTC6rX2Tw73lh76Xe8q2NbC0jLziemYzVGarFT3CY+ReaZwZVUWkJG/+Z0seW7+N
9X+qqsAIXIGLYDVkd+Hl8EA3qzCL3R6D/0O9gQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAptm9Qs/lY3DLXYU6g9vZNya5wFMB8GA1UdIwQYMBaAFIS97Fj5htw9xVHc
zP20tc5Ov6edMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTAxZjFm
MGYzYTJhY2RmZDEyMTE0MzY4M2QwYTljZmMxNjU3ZGE2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODZkOGYxYzMtYTcyNy00MDY1LTkxZDMtMzUwYmMz
ZGI1YmE0LzJkYWNjZjY5MzY0Mzk4YzRmMjM3N2Q3YmRlNDRjMDdhZTc4MWRkOGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NmQ4ZjFjMy1hNzI3LTQwNjUtOTFkMy0zNTBi
YzNkYjViYTQvNTAxZjFmMGYzYTJhY2RmZDEyMTE0MzY4M2QwYTljZmMxNjU3ZGE2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqr2WDANBAIAAjAHAwUAKAMGwDANBgkqhkiG9w0BAQsFAAOC
AQEADG0rkKuWmam3i+7RAsXGmdAuHMah2YQC8HgNnYHAeAYGW8Mv0NjnFLSkxAWa
iV6CrU4hEQFUFrexQl/8IIqMpQ6bHbtQN6K79b7AvvQL2Y7ND6ju2IMk5UY6NpCm
I1vpv8yHcHIXvfC9mJ7xz9KQ4a6IlwzKzROYGML8dSyZI3kFX0pcUdL6Dyx4hn/t
rKnHpyMc0cERGfq1V24ttzFHmf6cTO6xrzH+TDtIKLtAgydROL9bvf7Oz/t0Xe58
sPrjSS20mw1KPAyekObt9Fr940SK5iQWemycB8s16zblxygtvPh5PFhdoJ8V3drO
ROihMaViPGktH05lpKyZfn6uLA==
-----END CERTIFICATE-----