Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/8405c70969bb2a43e0b22e5c2a23d1beabd7a528.roa
File:                     8405c70969bb2a43e0b22e5c2a23d1beabd7a528.roa (raw, json)
Hash identifier:          tBNY2QPXlm0d0RftfL3wl3IuUINPMiDtFFskF0YVhWE=
Subject key identifier:   7D:15:51:8A:DA:55:6A:DB:6E:55:B1:ED:D1:F3:DF:C7:5E:50:9D:F5
Certificate issuer:       /CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Certificate serial:       184EE8
Authority key identifier: 7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/8405c70969bb2a43e0b22e5c2a23d1beabd7a528.roa
Signing time:             Thu 11 Jan 2024 18:06:07 +0000
ROA not before:           Thu 11 Jan 2024 18:06:06 +0000
ROA not after:            Sun 11 Jan 2026 18:06:06 +0000
asID:                     264658
IP address blocks:        167.250.212.0/22 maxlen: 22
                          2803:4540::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593064 (0x184ee8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
        Validity
            Not Before: Jan 11 18:06:06 2024 GMT
            Not After : Jan 11 18:06:06 2026 GMT
        Subject: CN=8405c70969bb2a43e0b22e5c2a23d1beabd7a528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:a6:07:c4:f3:ac:c4:57:12:0d:df:95:f3:
                    c6:93:63:c1:fe:25:12:55:72:c3:5b:e0:6f:ec:ed:
                    8f:c9:bb:66:dc:77:20:f8:33:a4:fe:8f:bb:37:a6:
                    72:f8:57:fe:a1:8d:3c:78:82:cb:35:0e:5a:11:d8:
                    e5:9a:a7:ea:53:13:8e:53:79:9b:57:51:72:67:b3:
                    e0:53:db:d3:57:b7:92:7a:d3:18:59:ae:9e:83:c0:
                    d3:db:60:78:12:88:d6:01:3d:a9:83:61:0a:49:ed:
                    ef:52:19:18:e4:be:6b:8a:4b:24:f1:22:55:da:4f:
                    f6:6b:b1:4f:b5:9f:72:bb:b0:01:fa:74:73:3f:f2:
                    3f:cf:ef:d7:20:ef:f3:91:f2:99:f1:06:e5:f0:0d:
                    75:70:92:d2:6e:9c:56:1c:83:ad:5c:fe:47:f3:c3:
                    3a:d5:a7:33:14:7b:df:4a:22:67:5a:37:59:ee:2a:
                    7a:58:b8:06:1b:35:57:e0:08:3b:b6:83:c2:28:3b:
                    65:e3:2c:61:0a:a8:12:f0:ca:5f:5d:a7:c7:aa:d2:
                    26:a2:32:f5:7c:70:57:af:df:76:00:51:66:1a:f3:
                    4e:4c:ce:5e:4d:d0:e3:69:ea:70:79:ae:77:8c:e0:
                    41:e5:02:73:8c:4d:05:4b:e3:62:a2:17:ed:1e:c4:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:51:8A:DA:55:6A:DB:6E:55:B1:ED:D1:F3:DF:C7:5E:50:9D:F5
            X509v3 Authority Key Identifier:
                keyid:7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/8405c70969bb2a43e0b22e5c2a23d1beabd7a528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/569d9c53d2d7a2dabbb573b437a4edbd78719117.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.212.0/22
                IPv6:
                  2803:4540::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:62:2a:93:f9:00:89:c8:23:cd:4e:af:4e:87:6b:31:db:52:
         22:44:41:7b:5c:0c:6a:c7:6c:1a:98:f2:46:c9:a9:26:94:af:
         e4:1e:80:23:6b:eb:72:eb:c0:a9:08:3e:7c:b5:a2:a4:de:7f:
         d9:85:4e:7d:1c:1b:64:ac:37:25:42:11:86:a5:42:b3:3d:b5:
         68:3e:6a:83:35:2e:d0:83:1c:e4:e9:89:bf:c5:14:ab:fe:74:
         4b:22:7a:77:62:60:7f:a3:dd:3f:9d:f8:45:27:5e:48:d4:67:
         4c:25:72:d8:1c:4b:f6:10:53:c6:08:37:48:af:eb:65:42:c2:
         5c:ba:a9:be:2a:52:67:98:57:b7:e8:c3:5a:de:78:56:c2:98:
         91:cc:59:41:c4:af:19:84:4b:42:1e:13:7d:bb:e9:95:12:dd:
         0f:e7:21:c8:a1:33:4a:d6:7d:40:63:e1:1a:6a:bc:1f:86:dc:
         6a:93:db:10:0a:94:45:36:43:80:68:3e:34:2d:f3:b3:ca:a9:
         16:8a:0f:05:ab:dc:85:d0:7e:94:d4:f7:46:bd:af:92:00:4b:
         a3:d6:b5:0c:8c:ed:78:97:4e:8a:aa:4a:73:1c:70:aa:e2:d6:
         05:f8:19:a9:2a:c9:3d:c7:d4:51:d5:ed:48:2c:27:b7:5d:22:
         37:5b:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----