Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc06bcfd-f538-4237-ab22-82e0d512d706/7f6884d22f11aa45d3000281778c4591c8f972c2.roa
File:                     7f6884d22f11aa45d3000281778c4591c8f972c2.roa (raw, json)
Hash identifier:          HdEWstW7XkI1N+K0DyX9PLebwbx5Rz6UWRkflYPGxdE=
Subject key identifier:   57:93:4F:89:4A:77:19:0F:59:22:E7:74:28:E3:80:C6:4A:2C:88:FB
Certificate issuer:       /CN=e4585ddd56f3aa0fd0ec4f995814ba28cb20d223
Certificate serial:       237E1E
Authority key identifier: CD:3F:60:84:33:C9:AD:9D:20:43:25:05:7F:31:5A:9D:E1:18:F0:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4585ddd56f3aa0fd0ec4f995814ba28cb20d223.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc06bcfd-f538-4237-ab22-82e0d512d706/7f6884d22f11aa45d3000281778c4591c8f972c2.roa
Signing time:             Thu 31 Aug 2023 12:31:44 +0000
ROA not before:           Wed 30 Aug 2023 12:31:44 +0000
ROA not after:            Thu 31 Aug 2028 12:31:44 +0000
asID:                     264849
IP address blocks:        170.83.52.0/22 maxlen: 24
                          2803:92c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2326046 (0x237e1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4585ddd56f3aa0fd0ec4f995814ba28cb20d223
        Validity
            Not Before: Aug 30 12:31:44 2023 GMT
            Not After : Aug 31 12:31:44 2028 GMT
        Subject: CN=7f6884d22f11aa45d3000281778c4591c8f972c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:a6:ca:4d:83:22:16:55:c1:fd:0a:9f:ee:
                    1a:a7:98:64:ea:a6:50:d5:fa:53:33:c5:c6:f1:ff:
                    ec:89:85:08:dd:12:82:c4:06:fe:54:2e:f3:82:0f:
                    90:95:f1:08:c9:98:d9:b8:a0:95:ed:3f:cb:8a:bc:
                    e7:ed:b7:be:a7:1e:7a:f8:38:f7:00:7b:cc:09:9d:
                    57:6f:b7:4e:54:f3:ad:42:26:1f:c1:ea:7d:6c:d0:
                    f8:36:e4:d8:ec:24:1c:2d:04:ff:3b:82:40:65:fe:
                    0a:aa:4e:9b:e8:23:1a:ad:62:20:4b:8c:f2:ca:db:
                    b8:a2:45:90:79:3f:51:77:fc:d3:87:99:7f:ca:e1:
                    da:71:fd:de:4d:7b:8e:f7:18:b4:fe:bd:39:e9:0f:
                    1d:0c:82:e4:2d:18:57:7b:7f:ea:4b:54:c2:57:70:
                    50:2a:33:31:d3:1e:ca:84:2e:1c:5d:16:87:ec:91:
                    f5:d2:a3:b6:33:25:86:78:f4:c8:f2:7b:78:43:5e:
                    45:cb:5d:49:f7:4c:ff:fc:d5:22:3d:0a:69:af:13:
                    cb:02:07:5e:7d:6b:64:9c:3a:79:5e:9a:3b:7e:04:
                    29:99:54:83:12:63:f3:2b:de:67:9b:7d:04:ab:a7:
                    0a:54:55:4b:88:fa:3b:4c:8c:1c:8b:c7:ad:c1:23:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:93:4F:89:4A:77:19:0F:59:22:E7:74:28:E3:80:C6:4A:2C:88:FB
            X509v3 Authority Key Identifier:
                keyid:CD:3F:60:84:33:C9:AD:9D:20:43:25:05:7F:31:5A:9D:E1:18:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4585ddd56f3aa0fd0ec4f995814ba28cb20d223.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc06bcfd-f538-4237-ab22-82e0d512d706/7f6884d22f11aa45d3000281778c4591c8f972c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc06bcfd-f538-4237-ab22-82e0d512d706/e4585ddd56f3aa0fd0ec4f995814ba28cb20d223.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.52.0/22
                IPv6:
                  2803:92c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:84:b9:bf:9e:e1:09:9b:6f:35:75:b4:1b:79:ad:0c:dd:78:
         45:05:4c:6c:5b:42:62:e9:57:9f:93:7b:43:f3:51:74:13:d2:
         b7:ca:de:7f:6a:e7:3d:4a:28:a3:25:f0:e0:79:3c:4a:c8:49:
         e7:3e:92:79:92:08:33:9c:ff:11:9e:76:25:a4:12:2d:ae:6c:
         10:00:8f:a6:5a:f5:89:2e:51:ba:4c:7e:67:39:75:91:82:0f:
         ac:cb:be:e8:66:91:2a:71:7b:d5:a9:46:ef:cb:7b:38:b8:a8:
         0a:69:4e:4d:a1:f8:87:a4:d9:ba:66:1c:97:98:43:b1:45:51:
         ae:03:27:d2:cf:6f:36:0e:b1:25:7a:e2:a5:b4:61:41:45:d6:
         6f:60:3c:e0:9e:b9:78:5e:69:c2:1e:66:c8:de:b4:b8:99:34:
         e3:d9:05:ff:8f:0e:b9:0a:f7:d3:13:07:b9:45:84:4b:d2:5d:
         74:c8:90:79:dd:60:2e:38:91:fb:7b:eb:0c:5e:6b:1f:da:09:
         5d:50:dd:30:fd:cd:30:31:87:60:b9:37:c5:22:c9:29:46:43:
         1f:4b:27:b2:52:ae:e0:95:f2:ec:9b:a3:6b:2f:c4:d1:3e:2f:
         e4:3a:14:52:53:56:e0:8f:56:53:49:dd:51:65:69:20:a3:7f:
         92:f8:4b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----