Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/bc6bf0d1c12a26713bff9ac333127cb96e4d9264.roa
File:                     bc6bf0d1c12a26713bff9ac333127cb96e4d9264.roa (raw, json)
Hash identifier:          WOYigNQKl4Z/muudqqjfsoLvHXQN5+14O1CmloaewVI=
Subject key identifier:   18:91:7F:15:63:8E:F2:65:F5:65:49:E0:9C:2B:95:BA:A6:46:4F:6F
Certificate issuer:       /CN=d2a001ef37af8d12473454d1fe356899fdb03d21
Certificate serial:       0CFA54
Authority key identifier: C6:63:B7:A2:62:10:3F:DA:A9:8C:41:B4:5F:2B:01:AC:24:12:3A:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2a001ef37af8d12473454d1fe356899fdb03d21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/bc6bf0d1c12a26713bff9ac333127cb96e4d9264.roa
Signing time:             Fri 22 Mar 2024 14:32:38 +0000
ROA not before:           Fri 22 Mar 2024 14:32:37 +0000
ROA not after:            Sun 22 Mar 2026 14:32:37 +0000
asID:                     19422
IP address blocks:        152.156.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850516 (0xcfa54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a001ef37af8d12473454d1fe356899fdb03d21
        Validity
            Not Before: Mar 22 14:32:37 2024 GMT
            Not After : Mar 22 14:32:37 2026 GMT
        Subject: CN=bc6bf0d1c12a26713bff9ac333127cb96e4d9264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:da:5c:26:d9:44:f6:82:89:d3:8a:ac:56:
                    dd:16:5c:38:0b:e2:9e:44:c0:5b:a0:83:3d:67:a8:
                    19:ca:4e:32:6b:62:05:62:d9:f7:43:c9:50:12:62:
                    17:a9:7c:77:e7:5c:66:c6:53:df:fb:c9:e2:f4:ea:
                    4c:53:35:45:ba:39:0b:a1:b5:d7:d6:d4:b3:ae:31:
                    30:7f:1f:6c:68:23:ff:96:6f:14:bf:48:b6:ca:7e:
                    3a:1f:d4:3c:3d:6e:e4:ec:56:7a:25:71:c1:30:b6:
                    9d:84:44:aa:e3:c2:ab:80:08:2a:a3:eb:10:67:08:
                    73:ae:36:40:ba:e7:ea:9e:1a:d0:20:60:bb:2b:d1:
                    cb:8c:31:64:f7:40:e9:96:ff:b8:ee:76:17:49:0d:
                    20:13:c8:6e:31:8d:e6:17:6e:4a:98:5f:3b:4c:d3:
                    f7:62:75:a3:96:88:b2:dc:6b:45:5d:02:28:c6:12:
                    e2:e5:6b:29:30:03:ea:1c:20:8f:01:a4:e8:76:f2:
                    77:0a:53:3c:55:05:b5:30:7e:6d:10:8f:d3:52:2d:
                    69:03:14:de:fd:ea:70:ea:19:e1:39:18:6c:1f:a1:
                    65:86:69:51:3f:b2:d1:0f:6e:2b:bf:5f:9c:19:9e:
                    85:0d:9e:a3:c3:8a:c0:1a:93:0c:6f:5e:8e:9c:5c:
                    4e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:91:7F:15:63:8E:F2:65:F5:65:49:E0:9C:2B:95:BA:A6:46:4F:6F
            X509v3 Authority Key Identifier:
                keyid:C6:63:B7:A2:62:10:3F:DA:A9:8C:41:B4:5F:2B:01:AC:24:12:3A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2a001ef37af8d12473454d1fe356899fdb03d21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/bc6bf0d1c12a26713bff9ac333127cb96e4d9264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/d2a001ef37af8d12473454d1fe356899fdb03d21.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.156.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:5e:9d:39:a4:8f:bf:5d:aa:a5:53:8c:7f:69:67:a7:03:
         97:1c:f5:87:63:8d:c4:0d:f4:37:74:87:80:4c:21:50:e4:32:
         1f:84:4c:47:92:ec:50:8b:19:e2:ca:99:6e:b1:f3:ee:ae:94:
         61:e9:05:38:ca:54:f2:e0:c0:8c:db:20:c5:80:6e:47:d2:09:
         f6:0a:32:f8:56:99:1e:9a:dc:16:23:4b:f1:5c:ae:78:71:b3:
         d5:ce:7c:bd:5a:44:ff:c8:17:8f:90:a7:86:b6:f4:44:61:d7:
         bd:e1:df:2e:c3:0c:b3:00:b4:3f:70:c9:52:86:53:47:a2:a1:
         4f:44:de:9a:5c:d0:6d:34:98:a2:c3:50:03:ef:2f:25:45:21:
         54:00:c1:0d:9b:13:71:03:a1:e1:d5:cc:c7:25:b9:20:b7:32:
         19:db:4f:3b:9f:f6:cb:15:af:24:dc:fa:ef:96:85:79:ac:65:
         7d:c7:a4:3f:c1:cf:9a:ba:c6:f7:ef:c5:13:5c:d8:2d:10:cb:
         40:05:85:c6:ce:d7:e7:24:41:0b:a6:8a:f9:9d:b4:f6:65:14:
         f7:86:c3:7c:2a:29:73:5b:0f:5c:62:8d:18:eb:ce:47:89:75:
         43:d8:d6:83:7a:64:36:aa:2e:53:91:af:b7:9a:4d:ff:7a:96:
         32:ab:71:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----