Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/0ba3e0cb72f2eed4a09573d4c87ee41e37c88536.roa
File:                     0ba3e0cb72f2eed4a09573d4c87ee41e37c88536.roa (raw, json)
Hash identifier:          +KcYUWj3cp1lV80q/XEKSLO45Skb8AREOCjsdWck6hM=
Subject key identifier:   A3:48:45:4E:53:F7:C0:FD:EA:EE:D5:46:71:08:5E:8A:62:2C:E0:D9
Certificate issuer:       /CN=312f25bb43cf12fb021669059d3a617d23ade269
Certificate serial:       1C7425
Authority key identifier: DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/0ba3e0cb72f2eed4a09573d4c87ee41e37c88536.roa
Signing time:             Fri 18 Aug 2023 13:34:44 +0000
ROA not before:           Thu 17 Aug 2023 13:34:44 +0000
ROA not after:            Mon 18 Aug 2025 13:34:44 +0000
asID:                     17147
IP address blocks:        163.247.0.0/16 maxlen: 16
                          2801:2::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864741 (0x1c7425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312f25bb43cf12fb021669059d3a617d23ade269
        Validity
            Not Before: Aug 17 13:34:44 2023 GMT
            Not After : Aug 18 13:34:44 2025 GMT
        Subject: CN=0ba3e0cb72f2eed4a09573d4c87ee41e37c88536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ec:84:37:f2:df:40:4b:b6:26:b0:ff:3b:24:
                    51:33:80:7b:69:d6:66:d8:42:d9:2f:ea:61:83:3e:
                    9c:09:f5:bb:c6:c3:17:4a:05:5b:7a:6c:00:dc:11:
                    03:dc:26:41:50:c5:54:5c:3c:75:60:df:b1:ba:4e:
                    7e:a2:c0:78:3b:b9:f8:8e:22:aa:11:b5:c3:b4:bf:
                    32:fa:53:b3:4b:6d:96:af:11:2e:23:19:79:7c:13:
                    e7:a3:a9:5e:58:26:97:0d:bc:5b:95:5d:df:11:55:
                    98:58:3f:bf:66:15:3f:92:1a:fc:1c:ee:58:09:7b:
                    cf:73:9a:d0:a6:34:1b:e4:ac:69:0c:c2:cf:c3:cf:
                    85:04:fb:68:30:89:0c:a1:82:93:2b:d8:68:a0:4f:
                    aa:53:bc:84:19:95:8b:31:43:32:c4:42:44:77:42:
                    84:e5:59:fe:07:4a:2f:4f:38:d0:d3:a0:50:2f:94:
                    32:23:32:96:64:72:c7:2d:35:4b:4a:bc:36:95:a8:
                    ef:7b:6b:43:c8:3e:08:cf:2e:67:2c:a0:bd:bf:aa:
                    ea:20:82:7f:08:2e:2a:44:c0:42:7f:d9:fb:39:c9:
                    9b:31:14:e9:51:d8:de:02:14:da:26:af:14:8c:0d:
                    48:cb:5e:29:ce:60:fc:f8:05:14:b0:fa:00:b9:fe:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:48:45:4E:53:F7:C0:FD:EA:EE:D5:46:71:08:5E:8A:62:2C:E0:D9
            X509v3 Authority Key Identifier:
                keyid:DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/0ba3e0cb72f2eed4a09573d4c87ee41e37c88536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/312f25bb43cf12fb021669059d3a617d23ade269.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.0.0/16
                IPv6:
                  2801:2::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:59:f9:a7:26:49:15:d9:d3:30:60:33:7d:d5:ff:a5:b8:2b:
         8a:0a:bd:dd:79:7f:0c:3e:ae:c4:7e:de:88:9a:d4:ec:1e:54:
         57:7c:42:26:54:8b:c6:3e:d5:73:a0:2e:15:f4:ad:c1:b4:87:
         b2:b5:65:bf:53:5e:14:af:1c:f1:d6:b7:24:15:6b:18:34:c1:
         4a:90:31:50:94:fb:39:c5:a8:f0:46:4c:18:fe:a7:ba:cc:de:
         8e:18:b7:bc:f4:9c:fa:eb:3f:24:a1:89:94:97:08:1b:1d:94:
         19:40:2e:c5:47:a3:86:98:26:97:b5:0e:0e:30:fb:d2:24:0e:
         33:cc:48:b8:30:0a:6e:3f:b8:f2:14:22:94:8b:07:bf:02:5d:
         e4:c2:1d:5c:1a:5b:da:50:b2:50:15:bd:28:f5:c2:28:53:63:
         cc:1d:8e:55:e5:c3:0d:c2:4b:21:d0:3e:1c:ab:85:ab:74:3a:
         20:e4:f7:7e:aa:26:29:7b:32:72:d2:17:89:f2:7e:d5:54:8a:
         36:d0:4f:7b:d3:a0:56:b6:09:73:e0:6e:8b:50:58:7b:78:25:
         bb:fe:fd:53:10:e7:ec:9d:c9:ff:8e:1c:c0:3d:6a:f8:6d:aa:
         45:86:db:27:85:9f:db:c6:54:5a:35:82:67:77:68:c0:78:f7:
         6a:01:42:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----