Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/4c7ad2f15c41d9b065afd8bd3819f3bc99e207f6.roa
File:                     4c7ad2f15c41d9b065afd8bd3819f3bc99e207f6.roa (raw, json)
Hash identifier:          VLmEeiavW07E42BtZSIu0mlGf4i8Q12DDZXlfUlf4rY=
Subject key identifier:   F9:FF:F8:A0:25:63:63:01:67:A5:B1:4D:1A:BE:93:71:07:15:4A:D6
Certificate issuer:       /CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
Certificate serial:       08E0DC
Authority key identifier: A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/4c7ad2f15c41d9b065afd8bd3819f3bc99e207f6.roa
Signing time:             Tue 20 Jun 2023 14:01:55 +0000
ROA not before:           Mon 19 Jun 2023 14:01:55 +0000
ROA not after:            Fri 20 Jun 2025 14:01:55 +0000
asID:                     271814
IP address blocks:        170.246.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581852 (0x8e0dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
        Validity
            Not Before: Jun 19 14:01:55 2023 GMT
            Not After : Jun 20 14:01:55 2025 GMT
        Subject: CN=4c7ad2f15c41d9b065afd8bd3819f3bc99e207f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6e:43:e8:7c:3c:20:e0:9f:54:5c:b1:fe:ee:
                    b3:c1:27:9c:96:20:86:a0:14:dd:7d:6d:52:00:d4:
                    4d:4f:7f:f3:35:88:c1:dd:c5:56:c4:31:ce:e0:98:
                    cc:51:a3:9d:5d:2e:80:17:a2:d4:49:03:2b:9a:bb:
                    0d:de:f5:8f:80:15:8d:73:b3:34:cd:e0:6b:9c:b6:
                    59:14:6f:9e:7c:19:f1:58:e5:77:20:a7:fd:6e:40:
                    86:0f:6f:95:af:e0:40:14:21:70:e6:fc:ea:83:a3:
                    00:71:25:06:71:e3:41:08:5d:c4:dd:fe:8f:0d:f7:
                    fd:c9:99:b7:47:50:21:f2:5d:56:51:69:13:07:e7:
                    89:68:92:a5:87:56:1c:aa:63:ae:ee:9d:4b:09:72:
                    3b:89:97:2d:a7:66:95:b3:ec:b9:f6:49:d1:ee:26:
                    56:8b:c1:4f:a1:96:2d:91:a8:36:67:ae:36:6a:56:
                    5b:f6:5b:70:a9:a2:a9:90:ca:f4:95:9c:32:1d:c7:
                    91:48:7b:ab:08:ae:89:c5:56:23:e7:6c:0e:f4:98:
                    fb:3c:56:0d:18:62:0a:2f:7e:29:de:8d:00:fc:6b:
                    73:28:f9:5a:7c:c3:db:8b:3c:a2:c9:91:72:49:d8:
                    24:c3:cd:c3:44:27:68:f8:16:c5:91:a6:8c:b8:f8:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FF:F8:A0:25:63:63:01:67:A5:B1:4D:1A:BE:93:71:07:15:4A:D6
            X509v3 Authority Key Identifier:
                keyid:A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/4c7ad2f15c41d9b065afd8bd3819f3bc99e207f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:21:07:b7:75:7f:6e:9e:6d:d1:8f:ee:71:4c:26:ca:f9:8a:
         69:93:04:b1:58:68:99:d4:87:20:dd:4c:50:aa:d2:ac:2d:15:
         4a:74:08:3c:fe:15:da:39:76:55:92:c7:45:d3:91:72:cb:2b:
         1f:22:b7:b9:dd:4f:ea:39:33:20:0f:a7:9a:3c:86:9e:ae:ed:
         4e:2e:a8:e4:b9:73:91:b1:9c:35:26:07:f2:d7:c0:20:15:c8:
         2d:cd:54:81:b8:45:31:c9:e9:0f:e1:77:d1:ca:39:a3:65:50:
         e0:ad:b5:06:5e:5d:b6:8f:ad:f1:5d:d5:2b:47:4f:a0:39:8e:
         83:db:50:c4:e7:9c:42:0b:bf:48:ff:b7:d9:f9:6b:35:48:fd:
         a6:dc:f3:8a:b3:d6:fc:2f:9d:f3:ca:75:c7:8f:b6:fa:20:2a:
         c9:14:98:e4:48:a4:2f:dd:fe:75:0e:36:6c:42:7d:22:02:ab:
         7b:f1:1a:ab:ff:52:ad:49:04:65:56:5f:6b:19:d3:42:81:86:
         2c:9f:0a:7d:96:c2:4c:73:db:62:e8:18:53:8e:90:d2:2d:be:
         9f:e2:36:59:31:69:b5:eb:8f:9c:69:be:7c:40:32:8a:9e:e9:
         bf:cf:5a:82:a0:22:e7:dc:0c:b8:f1:6a:32:e0:4a:81:66:4f:
         a2:46:c3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----