Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/abd53cd6bd6a3364faeddffb1d647e2c9e8ce97c.roa
File:                     abd53cd6bd6a3364faeddffb1d647e2c9e8ce97c.roa (raw, json)
Hash identifier:          UXc5p5wXVKuCYOD/uHwDTwbAb5hrubIeFUBXwJnQ524=
Subject key identifier:   E6:B9:B0:B9:ED:15:7F:57:57:6D:D8:5F:D1:6E:7F:3A:CD:D5:26:DA
Certificate issuer:       /CN=00f895a901e0aed32bfbbc27ec311633b2051670
Certificate serial:       03A4
Authority key identifier: 37:7B:B5:9D:EF:14:62:E3:C5:35:D7:B2:0A:05:E2:E1:E9:A3:4F:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00f895a901e0aed32bfbbc27ec311633b2051670.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/abd53cd6bd6a3364faeddffb1d647e2c9e8ce97c.roa
Signing time:             Wed 29 Jun 2022 23:05:20 +0000
ROA not before:           Wed 29 Jun 2022 03:00:00 +0000
ROA not after:            Sat 29 Jun 2024 03:00:00 +0000
asID:                     262218
IP address blocks:        170.79.108.0/22 maxlen: 22
                          186.159.116.0/22 maxlen: 22
                          2803:3000::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00f895a901e0aed32bfbbc27ec311633b2051670
        Validity
            Not Before: Jun 29 03:00:00 2022 GMT
            Not After : Jun 29 03:00:00 2024 GMT
        Subject: CN=abd53cd6bd6a3364faeddffb1d647e2c9e8ce97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c6:a0:3f:0d:d8:a6:ba:e4:ed:f1:b6:eb:d0:
                    a1:02:ab:b6:40:fd:21:2f:b9:e3:59:b2:fa:82:b7:
                    c4:3d:b2:61:9a:5d:4f:52:ef:6c:43:7f:08:dc:bd:
                    90:1e:a1:35:16:a2:c0:ea:cb:e1:b1:bc:88:fd:ef:
                    ea:ce:4b:60:42:1e:e8:25:20:66:ef:36:b0:7f:23:
                    f5:97:96:13:8f:34:e3:9c:18:38:d6:c9:ea:72:80:
                    8d:bd:a3:10:6f:d9:08:8d:cf:85:80:f1:b4:41:be:
                    ed:7c:b2:8d:1b:6e:61:1f:83:ba:be:5f:f4:77:52:
                    1b:5d:86:de:9e:4e:9e:32:cf:d2:b4:d2:93:a8:04:
                    7c:81:e2:5d:57:3e:23:99:35:21:94:04:cd:c5:0d:
                    f5:4e:e7:61:40:38:48:f0:9c:8f:9b:3d:fd:83:42:
                    f1:06:48:76:db:9e:76:2d:bd:0d:be:f3:db:9c:a3:
                    47:42:6c:18:6d:21:8b:de:e5:3b:2f:b6:73:44:71:
                    17:24:06:6d:1d:82:1e:dc:a2:93:68:bd:34:dd:0b:
                    9a:90:7c:24:b6:8e:fc:9f:63:87:f4:3d:0b:eb:f0:
                    ab:d5:7d:41:90:a5:39:00:21:3a:0b:38:5f:cb:43:
                    dd:e0:47:6e:11:42:e4:0a:5a:fd:53:29:c3:1b:b8:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B9:B0:B9:ED:15:7F:57:57:6D:D8:5F:D1:6E:7F:3A:CD:D5:26:DA
            X509v3 Authority Key Identifier:
                keyid:37:7B:B5:9D:EF:14:62:E3:C5:35:D7:B2:0A:05:E2:E1:E9:A3:4F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00f895a901e0aed32bfbbc27ec311633b2051670.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/abd53cd6bd6a3364faeddffb1d647e2c9e8ce97c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/00f895a901e0aed32bfbbc27ec311633b2051670.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.108.0/22
                  186.159.116.0/22
                IPv6:
                  2803:3000::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:f6:c6:1f:a8:c9:83:fb:1b:70:50:8a:72:63:19:78:a4:56:
         7d:73:e9:eb:7a:b2:40:c2:30:bd:d0:22:11:f2:d8:31:46:af:
         aa:08:95:66:42:43:b0:38:ae:75:3f:2e:4e:9b:7a:46:e1:8d:
         ad:76:6b:b1:16:d1:97:54:a7:13:83:d7:c6:8b:3a:29:cd:d6:
         65:c3:76:c9:1f:0a:4f:eb:b1:17:ae:0b:a6:f7:e8:b9:e9:a2:
         9e:33:ce:75:e0:ab:e1:90:8d:fa:e8:3c:8e:1d:82:e3:52:a7:
         1f:a1:a4:31:60:16:4d:8d:f1:22:41:d0:b9:61:c0:e7:f9:d8:
         6b:4f:5c:c7:4e:79:dd:07:61:63:01:61:28:57:f5:06:08:43:
         9a:2b:94:da:9e:df:c8:34:fe:33:ad:77:c0:e1:21:bc:48:94:
         8e:38:94:9d:f4:fb:9c:f9:30:20:14:2b:a9:df:ee:f1:f0:be:
         28:eb:b2:c3:fd:a8:ae:4e:76:83:47:e1:6a:95:8f:35:fb:bc:
         76:64:f1:36:0c:06:48:71:4f:c5:0d:db:a2:fc:ee:06:28:c4:
         85:52:1d:2a:79:42:85:80:47:f2:88:df:ed:b9:c6:db:bc:62:
         a3:bb:80:19:70:72:21:8d:c6:4d:b3:3f:08:f5:90:c6:aa:4d:
         e7:e6:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----