Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/3d879e034b6d71114db9176ede3ccac6f78b71f4.roa
File:                     3d879e034b6d71114db9176ede3ccac6f78b71f4.roa (raw, json)
Hash identifier:          zekW9HMcgzQMw07VRCGh3ElmgcZ0ZlXTNzCeRRfCVaQ=
Subject key identifier:   68:5D:5D:B0:E0:E4:AE:86:24:6A:83:32:0F:4C:E9:F0:B2:20:69:DE
Certificate issuer:       /CN=063c6924e8891b8dd6d9889adcc8e4154f3f02c4
Certificate serial:       18A985
Authority key identifier: 13:EE:C7:A5:32:52:23:CB:DF:6D:3D:07:81:C3:95:16:AE:FD:BF:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/3d879e034b6d71114db9176ede3ccac6f78b71f4.roa
Signing time:             Wed 09 Aug 2023 15:47:31 +0000
ROA not before:           Tue 08 Aug 2023 15:47:30 +0000
ROA not after:            Sat 09 Aug 2025 15:47:30 +0000
asID:                     270049
IP address blocks:        131.161.220.0/22 maxlen: 24
                          2803:ade0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616261 (0x18a985)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063c6924e8891b8dd6d9889adcc8e4154f3f02c4
        Validity
            Not Before: Aug  8 15:47:30 2023 GMT
            Not After : Aug  9 15:47:30 2025 GMT
        Subject: CN=3d879e034b6d71114db9176ede3ccac6f78b71f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:22:f9:8b:9e:a2:86:89:73:93:66:8f:c7:
                    36:95:24:da:d4:de:f3:7b:e7:a2:7b:cf:5b:48:b5:
                    a6:06:6d:04:3d:60:3f:28:db:33:4b:86:28:87:1f:
                    22:1d:34:11:36:42:1b:b3:5d:87:26:01:a3:67:24:
                    61:d6:4e:9f:bc:e5:3a:e3:15:9a:97:28:68:61:2d:
                    5c:07:63:e7:78:8e:6a:0e:78:c0:2b:59:d3:9f:b6:
                    c1:f3:7e:a6:70:30:5b:86:78:31:7f:69:31:11:b6:
                    64:9f:d9:82:3c:7c:60:ef:7c:fe:cd:f3:60:35:66:
                    90:72:63:4e:1e:f9:ca:43:4e:31:97:17:e6:cc:f8:
                    db:f4:e7:cf:b0:8d:fb:fd:29:d7:e7:be:00:f5:0e:
                    39:15:91:14:56:fe:65:3b:d1:e2:31:63:ee:5e:2a:
                    f0:16:3c:7a:25:7a:20:c9:71:26:e7:b1:2b:9c:2f:
                    60:4b:80:db:ef:f2:2d:a1:45:ef:72:dc:12:3e:a3:
                    fc:f6:1e:2f:5b:c9:f1:59:20:1a:58:03:25:db:0e:
                    75:d9:82:43:e0:7e:75:fe:58:11:de:92:28:64:85:
                    14:60:16:70:c3:00:f5:a9:48:d6:93:f2:b3:85:40:
                    d5:84:8c:41:42:97:93:fc:b1:b1:32:d5:34:d3:82:
                    57:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5D:5D:B0:E0:E4:AE:86:24:6A:83:32:0F:4C:E9:F0:B2:20:69:DE
            X509v3 Authority Key Identifier:
                keyid:13:EE:C7:A5:32:52:23:CB:DF:6D:3D:07:81:C3:95:16:AE:FD:BF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/3d879e034b6d71114db9176ede3ccac6f78b71f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.220.0/22
                IPv6:
                  2803:ade0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:00:19:63:0b:70:84:70:e9:3a:da:a6:2f:17:13:7a:7f:3b:
         e7:55:0f:5f:f7:99:80:ee:25:a0:5d:7b:fc:f5:63:aa:e4:82:
         1b:e5:5f:c7:c9:e4:d9:1d:3b:0d:38:be:f4:c8:02:b2:9f:08:
         00:71:df:a8:f4:39:9e:65:a4:74:4c:38:7f:d5:8b:90:ca:0a:
         2c:05:b8:9d:11:36:54:48:ee:92:57:97:6e:82:e7:12:66:d8:
         3a:40:bf:19:5b:a1:5a:eb:6a:68:3d:d7:07:41:2f:c0:bb:f9:
         88:86:fb:06:32:27:8b:f4:91:06:c8:ec:0c:0f:fe:1a:7b:95:
         e0:5d:6a:17:29:46:0b:aa:a5:0d:20:3f:54:29:97:b8:c9:12:
         2c:e8:39:5e:a5:99:58:8c:b8:9e:92:89:2c:fa:3e:90:1f:ba:
         bf:8c:c2:4e:af:24:94:ca:b2:e8:c7:6f:55:61:b1:99:03:46:
         51:9b:81:7a:3d:a4:da:97:9c:c7:e9:d2:08:cf:32:7c:0d:32:
         48:2e:fb:c8:14:ec:93:fd:c4:62:88:73:ea:26:e5:4f:9d:d5:
         7a:81:55:b8:02:84:e0:ab:5c:55:4b:f2:3d:59:78:86:05:bc:
         2d:e1:13:0a:a3:7f:1f:6f:c3:53:94:f0:54:53:c4:5d:cc:6c:
         2b:ed:98:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----