Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/ba2d25dcc1064a98ca8b34848799f1b7fa37b9d4.roa
File:                     ba2d25dcc1064a98ca8b34848799f1b7fa37b9d4.roa (raw, json)
Hash identifier:          XO76gK1a3I2HFNRhPsn3fItYWzlFslcxe2UrIWvGYIk=
Subject key identifier:   2B:13:DD:C2:68:4F:D0:98:96:86:19:4B:5B:60:02:86:68:A9:46:67
Certificate issuer:       /CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
Certificate serial:       08235F
Authority key identifier: A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/ba2d25dcc1064a98ca8b34848799f1b7fa37b9d4.roa
Signing time:             Wed 24 May 2023 17:48:30 +0000
ROA not before:           Tue 23 May 2023 17:48:30 +0000
ROA not after:            Sat 24 May 2025 17:48:30 +0000
asID:                     271814
IP address blocks:        170.246.56.0/22 maxlen: 24
                          164.163.184.0/23 maxlen: 24
                          2803:8810::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533343 (0x8235f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
        Validity
            Not Before: May 23 17:48:30 2023 GMT
            Not After : May 24 17:48:30 2025 GMT
        Subject: CN=ba2d25dcc1064a98ca8b34848799f1b7fa37b9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:22:24:10:31:2c:24:3d:2b:18:10:6f:e5:ae:
                    8d:91:a9:d0:64:c7:70:e2:3b:fb:ae:df:a8:94:1b:
                    77:91:0b:ac:c5:4f:3d:80:43:a9:77:4f:74:46:8b:
                    44:75:fc:81:cc:de:c4:b9:45:1c:36:e9:52:80:2b:
                    d6:da:83:2b:c9:88:d3:91:8d:d2:a0:e6:fc:f4:62:
                    68:df:78:92:78:b1:38:0c:52:23:1f:5d:2b:5f:36:
                    02:e9:6c:5d:ea:1e:46:27:c9:4d:9c:97:5c:52:75:
                    58:4d:92:b8:73:b8:54:ae:51:5c:b6:62:05:3b:c5:
                    a3:6b:79:96:99:f8:49:5d:3d:89:9d:92:63:a9:6d:
                    04:80:a7:a2:d0:3d:60:97:08:9f:b6:ca:ef:00:53:
                    74:47:3c:29:2c:f3:3f:ed:48:a2:e9:6a:c3:fd:08:
                    b9:9e:c4:ea:50:18:44:cb:17:ea:47:2d:f8:e1:bb:
                    65:8c:6e:a9:51:44:9a:22:61:7c:f8:f6:91:f2:43:
                    61:98:6e:2f:2e:52:ab:b5:d6:ea:86:e5:3f:69:60:
                    6e:93:5a:ed:51:dd:fa:28:ed:e2:b1:80:95:88:c5:
                    ca:b4:ce:ae:4a:df:1d:33:8e:87:ee:06:52:84:df:
                    c8:82:55:5c:d3:c6:69:49:44:af:bc:19:57:07:a0:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:13:DD:C2:68:4F:D0:98:96:86:19:4B:5B:60:02:86:68:A9:46:67
            X509v3 Authority Key Identifier:
                keyid:A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/ba2d25dcc1064a98ca8b34848799f1b7fa37b9d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.184.0/23
                  170.246.56.0/22
                IPv6:
                  2803:8810::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:8f:55:7c:01:10:83:87:b1:87:f2:81:4d:f3:50:3f:a2:30:
         c3:42:ef:1c:05:77:ad:07:4b:69:7d:6b:51:d8:7d:96:db:cc:
         04:de:e8:10:ca:d8:70:cc:9a:9f:d0:f2:a1:ec:c8:23:38:ca:
         be:97:ba:e2:9f:22:8b:05:bc:b6:b7:8a:07:51:0b:c7:e1:92:
         25:c6:8e:ea:36:60:ac:be:aa:ba:a6:e0:c9:90:28:9c:5d:84:
         3f:5c:f4:85:b0:44:f1:c9:6f:fb:0e:ef:0c:41:9c:c9:42:2a:
         f3:cf:f8:11:d6:c8:d4:45:d5:c1:e9:0f:74:50:a9:1c:01:53:
         ef:f6:07:82:d1:9f:a2:62:f5:33:22:7e:93:ee:ce:9b:9e:11:
         be:f2:74:f6:21:4f:8c:4d:f6:40:b7:00:55:69:9b:c0:75:ae:
         d6:b7:b3:07:57:e3:e8:f9:a0:09:56:5c:4c:67:ed:56:67:13:
         fe:46:d6:27:4e:e5:4a:77:e2:d3:a1:7b:fd:be:a2:e9:98:a2:
         70:db:b6:80:44:3a:9e:db:6d:26:2f:58:10:71:ff:4d:ff:fe:
         fc:15:2d:f8:4e:9a:3b:24:32:2f:d9:bc:b8:36:4c:03:5f:6c:
         aa:34:56:7b:59:af:09:3a:6e:34:3d:48:18:c5:55:29:c1:42:
         86:79:71:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----