Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/8c06ee585108c812e21d2e23c32a4ab64c202e5c.roa
File:                     8c06ee585108c812e21d2e23c32a4ab64c202e5c.roa (raw, json)
Hash identifier:          wl/lgEM5agaVLWCWHJXZRBS+bss4UHjsFK2SGD9V+Z8=
Subject key identifier:   C9:37:22:A0:46:5A:4A:CC:2E:29:8F:89:E6:C6:EC:CF:A9:6E:58:81
Certificate issuer:       /CN=312f25bb43cf12fb021669059d3a617d23ade269
Certificate serial:       1C77EB
Authority key identifier: DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/8c06ee585108c812e21d2e23c32a4ab64c202e5c.roa
Signing time:             Fri 18 Aug 2023 13:46:28 +0000
ROA not before:           Thu 17 Aug 2023 13:46:28 +0000
ROA not after:            Mon 18 Aug 2025 13:46:28 +0000
asID:                     17147
IP address blocks:        163.247.11.0/24 maxlen: 24
                          163.247.12.0/24 maxlen: 24
                          163.247.44.0/24 maxlen: 24
                          163.247.48.0/24 maxlen: 24
                          163.247.53.0/24 maxlen: 24
                          163.247.90.0/24 maxlen: 24
                          2801:2:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1865707 (0x1c77eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312f25bb43cf12fb021669059d3a617d23ade269
        Validity
            Not Before: Aug 17 13:46:28 2023 GMT
            Not After : Aug 18 13:46:28 2025 GMT
        Subject: CN=8c06ee585108c812e21d2e23c32a4ab64c202e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c9:98:77:b9:9e:c4:c8:d0:a7:da:22:41:ce:
                    82:60:c0:a6:fe:dc:20:1e:5d:e4:94:bf:b6:eb:9b:
                    ca:7a:f0:0b:81:17:59:5b:63:9a:ae:b0:29:aa:7f:
                    6e:91:6e:9e:44:d9:41:46:7d:cf:5f:11:c3:b7:ec:
                    30:23:3c:99:1c:3c:78:54:cd:24:23:e1:1b:aa:31:
                    89:58:8c:69:c0:b9:62:16:61:41:9e:f1:62:65:4e:
                    29:9d:0c:9d:ba:87:f5:cb:04:75:b0:c8:7e:ad:12:
                    85:55:5f:49:e1:a4:39:74:cd:25:81:66:50:cf:25:
                    89:64:c5:73:2c:6b:06:ee:a3:2e:93:e7:a1:74:ee:
                    a8:c9:95:91:45:29:63:44:f0:50:4f:f2:b5:6f:bc:
                    f8:2c:d9:4d:f4:be:f3:f0:50:b6:2f:93:7c:c2:83:
                    2a:ca:5e:b9:e4:96:92:0c:ec:2d:14:ef:70:ee:aa:
                    7b:03:4f:ce:a3:d2:8b:54:83:9c:3b:a8:0b:14:63:
                    0a:c8:79:51:91:64:fb:c9:9b:28:96:fd:79:bd:9b:
                    5a:1f:ff:f5:5a:53:bf:d1:82:25:b8:8a:32:48:b9:
                    2b:da:44:22:2f:4c:9f:c3:21:ac:f1:1c:17:ad:a8:
                    13:c2:02:5e:78:f3:9b:64:2c:43:36:89:05:a0:83:
                    5c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:37:22:A0:46:5A:4A:CC:2E:29:8F:89:E6:C6:EC:CF:A9:6E:58:81
            X509v3 Authority Key Identifier:
                keyid:DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/8c06ee585108c812e21d2e23c32a4ab64c202e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/312f25bb43cf12fb021669059d3a617d23ade269.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.11.0-163.247.12.255
                  163.247.44.0/24
                  163.247.48.0/24
                  163.247.53.0/24
                  163.247.90.0/24
                IPv6:
                  2801:2:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:b8:0c:25:c0:03:d6:ec:57:a0:e2:44:01:c9:ee:f5:e9:b5:
         89:f3:65:41:43:15:7c:0e:f6:cf:9f:08:7d:39:3a:c3:f4:85:
         dc:f6:77:b4:69:03:14:42:3c:93:c6:b9:b1:ea:91:e0:96:86:
         78:93:11:49:16:c0:a4:df:90:93:b9:26:10:cb:a1:8e:dc:78:
         3f:75:09:78:92:23:5a:48:01:9e:74:93:97:bb:8c:d1:bd:15:
         72:ae:ad:4e:78:89:11:0b:c9:c7:af:bf:49:fd:42:20:54:bc:
         db:d0:c6:13:37:5c:9c:0f:b1:3e:eb:91:92:27:ce:ba:3f:b7:
         6a:11:3c:01:ba:98:57:2b:92:23:a4:5d:6a:37:1b:25:ca:83:
         cb:44:9a:73:93:c2:44:55:0c:6d:bc:0e:c5:ee:a8:cc:6b:75:
         8b:cf:b8:66:7b:72:b3:48:fd:0d:73:48:16:6e:87:2e:95:42:
         b8:e0:3d:e1:16:a8:8b:67:78:01:75:b3:b1:c7:95:ee:53:0a:
         24:d0:c9:67:3b:f1:f8:04:af:69:ed:91:2a:e5:4e:d9:27:9f:
         ea:c3:3d:54:dc:dd:37:0a:8e:68:26:12:48:03:fc:cb:d5:87:
         c7:e8:32:84:48:20:89:be:47:51:e6:4b:3f:46:b4:a8:20:aa:
         6a:ca:19:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----