Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/ef2ef9f650a60ab83c16212efe28be6593b28a5c.roa
File:                     ef2ef9f650a60ab83c16212efe28be6593b28a5c.roa (raw, json)
Hash identifier:          JvPfarVCp5SbVn3X0gMxH/tNa9QhcfVE1+8yjqMF/m4=
Subject key identifier:   AE:CD:FA:28:A8:92:B7:EE:25:1B:11:16:D9:32:A6:B9:72:F4:06:F7
Certificate issuer:       /CN=6b2d6c543f96c6e360e6bb67a94434bb666f2d80
Certificate serial:       22FC2D
Authority key identifier: 82:E6:1D:62:7A:72:C4:AE:B9:7B:6E:8B:13:50:2D:BE:71:E6:7E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2d6c543f96c6e360e6bb67a94434bb666f2d80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/ef2ef9f650a60ab83c16212efe28be6593b28a5c.roa
Signing time:             Mon 30 Oct 2023 14:43:01 +0000
ROA not before:           Mon 30 Oct 2023 14:43:01 +0000
ROA not after:            Thu 30 Oct 2025 14:43:01 +0000
asID:                     264716
IP address blocks:        170.150.46.16/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2292781 (0x22fc2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2d6c543f96c6e360e6bb67a94434bb666f2d80
        Validity
            Not Before: Oct 30 14:43:01 2023 GMT
            Not After : Oct 30 14:43:01 2025 GMT
        Subject: CN=ef2ef9f650a60ab83c16212efe28be6593b28a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:33:1f:c1:9f:1e:a3:42:8f:a1:c1:e6:49:
                    ab:bf:36:1c:37:92:f2:e9:fa:05:30:61:a3:d6:00:
                    83:4a:f2:9b:41:e7:8d:38:45:f9:ae:4b:09:e1:37:
                    88:91:65:a7:0c:5f:b4:75:70:c1:70:fe:9f:37:6c:
                    94:92:17:bf:b2:ef:9c:4c:92:32:3b:ec:85:a4:fd:
                    69:e0:d8:6b:21:80:03:55:71:e6:db:1a:b2:70:1d:
                    26:11:58:a1:88:2b:89:9c:08:f2:19:7a:5a:bc:a7:
                    9d:ff:9f:a3:05:9c:e2:0d:56:70:0d:9e:1d:b8:84:
                    c1:52:a5:c5:af:7f:af:a0:10:2c:b9:1f:90:be:5a:
                    72:9b:62:49:b5:94:31:4f:39:e7:ed:4f:ec:60:96:
                    4e:0a:27:ed:0a:a5:f3:cc:0b:35:ec:97:61:e8:8c:
                    e9:d7:2c:43:f4:70:ef:df:0c:93:80:3b:b0:be:b9:
                    bb:8e:1c:e4:b8:c8:94:1f:5a:f2:74:7e:b1:7d:52:
                    1a:d1:4d:ab:a9:da:6f:07:9e:3d:0f:3c:88:12:32:
                    21:a9:4d:bc:51:6b:bc:82:58:2d:c5:2c:68:76:89:
                    96:a2:88:8c:a6:d6:5c:a8:13:23:97:15:5a:84:3b:
                    41:61:aa:f0:b4:2a:22:63:10:e6:80:7d:62:6f:14:
                    02:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CD:FA:28:A8:92:B7:EE:25:1B:11:16:D9:32:A6:B9:72:F4:06:F7
            X509v3 Authority Key Identifier:
                keyid:82:E6:1D:62:7A:72:C4:AE:B9:7B:6E:8B:13:50:2D:BE:71:E6:7E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2d6c543f96c6e360e6bb67a94434bb666f2d80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/ef2ef9f650a60ab83c16212efe28be6593b28a5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/6b2d6c543f96c6e360e6bb67a94434bb666f2d80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.46.16/29

    Signature Algorithm: sha256WithRSAEncryption
         04:48:14:71:fc:d4:0a:15:c3:47:fc:7b:d6:43:9d:1d:b1:38:
         a2:81:6d:77:5d:ab:c1:b7:ba:f0:44:16:57:6e:25:e3:db:f0:
         c0:8b:0b:68:bc:2c:46:e9:04:7c:62:af:20:6d:07:4a:77:9e:
         14:ef:0a:31:84:68:17:5d:3b:25:93:b5:dc:ed:82:f3:4e:0a:
         5d:2e:86:84:87:8e:4b:27:2c:69:e0:9d:66:f2:16:ef:8c:04:
         f9:1a:6a:59:4e:a1:39:62:95:17:71:88:1b:85:66:cd:85:fa:
         81:61:05:59:03:eb:56:98:40:71:6a:64:58:ce:22:dd:de:d2:
         18:cb:7f:a4:ad:b7:39:d8:68:c1:0e:33:47:4b:48:62:88:ac:
         5d:ab:8f:e3:1c:f2:ff:25:ba:88:ad:b8:58:f2:56:0b:d6:e6:
         0e:5b:55:48:c4:a5:e3:0d:27:19:81:70:cc:b1:59:93:29:d3:
         6c:db:7d:26:a0:8c:b8:03:a6:48:39:a7:d0:04:d1:10:86:3a:
         65:67:2a:f9:1f:05:8d:2b:59:68:be:69:9a:9a:95:e3:f5:2f:
         2d:f5:8b:de:d3:85:ba:fd:51:e0:01:99:27:62:af:7f:37:42:
         fb:05:f5:bd:fe:2d:80:dc:83:a0:e9:57:e4:77:58:57:95:a6:
         e1:3e:ed:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----