Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df2324ef-0144-4645-ad85-5b24c433d9f5/ba8a7886d89dd870c66b6e96182d0983ef88577c.roa
File:                     ba8a7886d89dd870c66b6e96182d0983ef88577c.roa (raw, json)
Hash identifier:          SHGpESiWl7Ly/peedkLJUmlFW9HYSNCffIN2T50y5LE=
Subject key identifier:   75:8B:93:9A:87:64:57:4E:15:73:38:7C:87:28:E5:BF:D2:1F:8F:FD
Certificate issuer:       /CN=7aa2f4a764758cd626c2bdda9f67fa86e9e452c7
Certificate serial:       122C90
Authority key identifier: D4:EB:9D:95:20:33:4D:14:6C:B3:79:7D:2C:0F:B0:EA:72:F9:22:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa2f4a764758cd626c2bdda9f67fa86e9e452c7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df2324ef-0144-4645-ad85-5b24c433d9f5/ba8a7886d89dd870c66b6e96182d0983ef88577c.roa
Signing time:             Wed 26 Jul 2023 08:30:00 +0000
ROA not before:           Tue 25 Jul 2023 08:30:00 +0000
ROA not after:            Thu 24 Jul 2025 08:30:00 +0000
asID:                     265634
IP address blocks:        170.245.232.0/22 maxlen: 24
                          2803:dac0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191056 (0x122c90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa2f4a764758cd626c2bdda9f67fa86e9e452c7
        Validity
            Not Before: Jul 25 08:30:00 2023 GMT
            Not After : Jul 24 08:30:00 2025 GMT
        Subject: CN=ba8a7886d89dd870c66b6e96182d0983ef88577c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a3:fd:1e:3f:3e:99:cb:13:de:a0:bd:50:4c:
                    6b:c5:58:93:49:4c:8d:78:0a:99:7c:db:e2:91:56:
                    31:f6:79:e3:c8:5a:2c:b5:03:60:2d:63:41:73:c3:
                    5a:38:d1:f5:cc:52:cc:7a:bb:2e:32:e2:49:8d:9b:
                    b1:4d:dd:78:05:e3:0d:d3:23:7d:52:1b:8c:7e:5a:
                    2b:fb:d8:e3:43:3a:6d:80:91:4e:d0:67:32:1a:c1:
                    da:6b:a7:f2:51:8b:5b:f8:59:60:c5:ca:72:8b:06:
                    aa:7a:46:2b:8c:01:62:6b:50:ae:d6:2d:e1:4d:ae:
                    eb:21:0e:99:ee:08:22:76:56:24:f5:46:72:73:f4:
                    70:9b:2c:b9:c7:6f:44:16:39:49:8f:0e:3d:6f:da:
                    c5:9d:1d:05:e0:93:22:e8:74:b5:1e:17:5e:ed:18:
                    86:4d:5a:cd:46:07:ad:2c:74:94:5e:35:e7:00:82:
                    fb:d6:a4:e2:21:85:e1:3e:b1:19:19:fe:48:6a:b3:
                    1f:71:f5:31:7c:3c:e6:27:5e:8d:e7:fa:ac:d7:6f:
                    5a:01:01:31:11:5e:73:2a:c5:fc:54:13:00:44:67:
                    de:cc:b4:b7:3a:87:18:e3:f5:05:86:13:30:91:b3:
                    9f:4f:c2:f2:cc:d9:2f:a5:2c:26:b9:2c:ac:50:58:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8B:93:9A:87:64:57:4E:15:73:38:7C:87:28:E5:BF:D2:1F:8F:FD
            X509v3 Authority Key Identifier:
                keyid:D4:EB:9D:95:20:33:4D:14:6C:B3:79:7D:2C:0F:B0:EA:72:F9:22:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa2f4a764758cd626c2bdda9f67fa86e9e452c7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df2324ef-0144-4645-ad85-5b24c433d9f5/ba8a7886d89dd870c66b6e96182d0983ef88577c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df2324ef-0144-4645-ad85-5b24c433d9f5/7aa2f4a764758cd626c2bdda9f67fa86e9e452c7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.232.0/22
                IPv6:
                  2803:dac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:b1:cc:f0:61:80:36:a0:7c:c1:2f:f9:19:d5:f3:47:a3:b6:
         c5:01:ca:0b:f3:7b:e2:cc:e8:79:f4:5f:4d:6c:36:28:65:5c:
         0b:29:7c:d0:e5:0a:79:8b:5a:d1:cd:2d:bb:af:48:be:28:af:
         88:b7:9e:10:82:c0:d7:cb:d5:e8:30:d7:da:d0:7e:2c:08:7a:
         c9:30:05:eb:0d:ed:33:b6:4c:e9:44:3e:ce:16:df:6e:96:e9:
         7f:f0:2b:66:63:55:af:38:b4:0c:5f:48:36:01:21:6a:31:0b:
         50:11:91:fb:29:09:21:a2:01:36:66:75:b4:31:d5:68:9a:76:
         5d:2e:d6:06:a8:06:c1:5c:23:25:d4:ee:c0:7b:d5:ef:89:db:
         a2:fe:95:29:67:35:bf:96:31:51:63:0e:4b:67:3d:06:75:0c:
         d9:d1:77:ea:14:11:8d:42:67:f3:28:04:65:e7:06:cf:6b:d7:
         03:92:fd:b1:b2:29:68:dc:32:85:f3:8f:6f:c1:f3:50:43:5a:
         c9:17:6e:50:fb:8b:73:04:9d:b7:be:c0:7f:b1:54:3a:28:2b:
         ae:34:77:39:50:3d:59:54:e5:34:78:d0:89:a9:1d:4d:be:4e:
         ee:a4:a8:67:7d:fa:29:a0:5a:ed:24:0f:8a:78:cb:82:a7:1c:
         d6:42:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----