Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b42d0195-ba9e-48f5-b178-a075bc2c7810/e98a73fe8920f5f73da363d7d856750f3755fbf7.roa
File:                     e98a73fe8920f5f73da363d7d856750f3755fbf7.roa (raw, json)
Hash identifier:          VMMn2PZVpNxS6Rk+574uik4qllIwucO6ww4WUh3SdAQ=
Subject key identifier:   46:2D:C4:17:1E:49:FA:25:B0:29:CD:8B:1D:C7:F4:7B:10:34:A9:40
Certificate issuer:       /CN=33d6a52b9a8c8465f470041ba9300da336448a74
Certificate serial:       1777A3
Authority key identifier: CF:3A:5E:16:1D:35:25:A8:34:E2:27:D6:E6:A5:5B:A4:CF:1B:1F:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d6a52b9a8c8465f470041ba9300da336448a74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b42d0195-ba9e-48f5-b178-a075bc2c7810/e98a73fe8920f5f73da363d7d856750f3755fbf7.roa
Signing time:             Fri 31 Mar 2023 08:30:00 +0000
ROA not before:           Thu 30 Mar 2023 08:30:00 +0000
ROA not after:            Sat 29 Mar 2025 08:30:00 +0000
asID:                     265654
IP address blocks:        170.246.220.0/22 maxlen: 24
                          2803:96c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537955 (0x1777a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d6a52b9a8c8465f470041ba9300da336448a74
        Validity
            Not Before: Mar 30 08:30:00 2023 GMT
            Not After : Mar 29 08:30:00 2025 GMT
        Subject: CN=e98a73fe8920f5f73da363d7d856750f3755fbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:17:3f:f3:b5:51:35:6b:39:4e:ba:4b:26:
                    42:e7:f1:1d:bc:22:4a:b6:1d:68:6c:39:55:e4:2b:
                    ec:11:81:66:95:5a:bc:b8:e6:c0:99:98:4a:61:d4:
                    b2:d0:7c:7f:97:7e:6e:6b:21:36:fb:2e:83:67:5d:
                    3e:0a:8f:5d:8d:5e:10:ff:5a:03:94:f5:37:2f:77:
                    d0:06:ae:32:42:82:d2:e6:be:77:57:98:df:a3:96:
                    b9:b7:4a:b8:98:fb:ab:cb:6d:10:4b:1b:8b:30:b5:
                    da:0a:44:82:64:13:0b:71:e2:1d:4b:a2:9e:b0:08:
                    49:fa:ef:fa:36:4d:83:a4:a4:0e:0a:77:d3:74:67:
                    68:fd:26:b8:c4:cd:2d:ea:97:31:3c:e6:76:96:f2:
                    17:fb:20:ee:d4:d8:14:ea:a4:4f:af:e0:c0:8c:38:
                    56:7a:5d:8a:22:14:75:aa:f0:21:8a:89:75:c2:ca:
                    3b:8c:bb:d1:e6:f7:d6:81:f9:3f:a3:12:f7:bc:df:
                    b6:4b:d9:f2:5f:55:0c:28:2b:d1:f8:89:38:f4:4f:
                    c6:2e:c1:df:2b:b4:cd:57:9b:c6:d5:23:73:f7:8e:
                    49:1d:1e:89:bf:53:45:cd:db:82:af:d5:95:68:c7:
                    c6:c3:89:1a:21:b3:db:10:64:ab:cb:f0:72:cc:37:
                    1f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2D:C4:17:1E:49:FA:25:B0:29:CD:8B:1D:C7:F4:7B:10:34:A9:40
            X509v3 Authority Key Identifier:
                keyid:CF:3A:5E:16:1D:35:25:A8:34:E2:27:D6:E6:A5:5B:A4:CF:1B:1F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d6a52b9a8c8465f470041ba9300da336448a74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b42d0195-ba9e-48f5-b178-a075bc2c7810/e98a73fe8920f5f73da363d7d856750f3755fbf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b42d0195-ba9e-48f5-b178-a075bc2c7810/33d6a52b9a8c8465f470041ba9300da336448a74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.220.0/22
                IPv6:
                  2803:96c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:4d:89:6e:50:da:6a:70:b9:90:4e:15:d6:77:78:16:5d:
         a4:6a:c8:06:5b:89:ac:a2:72:28:60:60:29:ef:54:74:f1:5f:
         ef:6e:67:2d:45:62:a7:49:b5:b3:62:8c:35:0c:55:ab:f9:fe:
         28:09:bb:d3:b4:47:43:98:43:db:2a:7b:9a:ef:c6:db:a3:7f:
         c8:14:f3:c2:85:be:96:c6:dc:3d:20:bd:40:66:ab:8f:d5:27:
         cd:d4:d4:cd:c8:d7:6a:6e:6c:bb:9e:95:c5:7d:58:d0:0d:0b:
         7f:1c:7d:89:68:59:34:45:eb:30:51:ae:a1:18:69:fd:0c:2b:
         e2:0c:31:f2:3c:14:a0:8a:79:91:6b:a2:fd:af:43:d7:c9:88:
         ce:9b:47:d6:24:8d:ec:32:81:62:0d:18:d3:1c:0e:34:2e:e7:
         95:81:37:6b:22:04:73:0c:40:97:b4:0a:0b:18:a5:ea:51:3a:
         61:50:15:63:00:0a:96:01:1b:18:70:91:be:d9:c8:f7:eb:70:
         1d:23:5d:02:17:c5:0d:95:30:01:cc:be:2a:f6:1f:68:2e:30:
         b4:d1:79:e3:0d:fe:b9:a8:c7:cc:7a:13:b5:2d:7d:ba:ae:93:
         75:4c:84:cc:86:51:d4:e3:11:52:c5:8e:64:7c:64:5b:83:0a:
         75:fb:e4:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDF3ejMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
ZDZhNTJiOWE4Yzg0NjVmNDcwMDQxYmE5MzAwZGEzMzY0NDhhNzQwHhcNMjMwMzMw
MDgzMDAwWhcNMjUwMzI5MDgzMDAwWjAzMTEwLwYDVQQDEyhlOThhNzNmZTg5MjBm
NWY3M2RhMzYzZDdkODU2NzUwZjM3NTVmYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlgIXP/O1UTVrOU66SyZC5/EdvCJKth1obDlV5CvsEYFmlVq8
uObAmZhKYdSy0Hx/l35uayE2+y6DZ10+Co9djV4Q/1oDlPU3L3fQBq4yQoLS5r53
V5jfo5a5t0q4mPury20QSxuLMLXaCkSCZBMLceIdS6KesAhJ+u/6Nk2DpKQOCnfT
dGdo/Sa4xM0t6pcxPOZ2lvIX+yDu1NgU6qRPr+DAjDhWel2KIhR1qvAhiol1wso7
jLvR5vfWgfk/oxL3vN+2S9nyX1UMKCvR+Ik49E/GLsHfK7TNV5vG1SNz945JHR6J
v1NFzduCr9WVaMfGw4kaIbPbEGSry/ByzDcfuQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFEYtxBceSfolsCnNix3H9HsQNKlAMB8GA1UdIwQYMBaAFM86XhYdNSWoNOIn
1ualW6TPGx9VMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNkNmE1
MmI5YThjODQ2NWY0NzAwNDFiYTkzMDBkYTMzNjQ0OGE3NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjQyZDAxOTUtYmE5ZS00OGY1LWIxNzgtYTA3NWJj
MmM3ODEwL2U5OGE3M2ZlODkyMGY1ZjczZGEzNjNkN2Q4NTY3NTBmMzc1NWZiZjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNDJkMDE5NS1iYTllLTQ4ZjUtYjE3OC1hMDc1
YmMyYzc4MTAvMzNkNmE1MmI5YThjODQ2NWY0NzAwNDFiYTkzMDBkYTMzNjQ0OGE3
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqr23DANBAIAAjAHAwUAKAOWwDANBgkqhkiG9w0BAQsFAAOC
AQEAVOpNiW5Q2mpwuZBOFdZ3eBZdpGrIBluJrKJyKGBgKe9UdPFf725nLUVip0m1
s2KMNQxVq/n+KAm707RHQ5hD2yp7mu/G26N/yBTzwoW+lsbcPSC9QGarj9UnzdTU
zcjXam5su56VxX1Y0A0Lfxx9iWhZNEXrMFGuoRhp/Qwr4gwx8jwUoIp5kWui/a9D
18mIzptH1iSN7DKBYg0Y0xwONC7nlYE3ayIEcwxAl7QKCxil6lE6YVAVYwAKlgEb
GHCRvtnI9+twHSNdAhfFDZUwAcy+KvYfaC4wtNF54w3+uajHzHoTtS19uq6TdUyE
zIZR1OMRUsWOZHxkW4MKdfvk2Q==
-----END CERTIFICATE-----