Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/7652c96d1211064ed65e39fd2c0e2f60a9b1a4d1.roa
File:                     7652c96d1211064ed65e39fd2c0e2f60a9b1a4d1.roa (raw, json)
Hash identifier:          TRhB+5MT0kdgKcVr3Bj9Ixmb/GGpGMQ/bBQjnIYSa4A=
Subject key identifier:   66:2E:21:4F:F0:5A:D9:0F:B7:E9:B7:A8:42:1C:52:E9:DF:DB:41:A4
Certificate issuer:       /CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
Certificate serial:       1C43A4
Authority key identifier: 9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/7652c96d1211064ed65e39fd2c0e2f60a9b1a4d1.roa
Signing time:             Tue 01 Nov 2022 13:22:27 +0000
ROA not before:           Mon 12 Jul 2021 03:00:00 +0000
ROA not after:            Fri 14 Jul 2023 03:00:00 +0000
asID:                     265629
IP address blocks:        170.239.207.0/24 maxlen: 24
                          170.239.205.0/24 maxlen: 24
                          2803:9cc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852324 (0x1c43a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
        Validity
            Not Before: Jul 12 03:00:00 2021 GMT
            Not After : Jul 14 03:00:00 2023 GMT
        Subject: CN=7652c96d1211064ed65e39fd2c0e2f60a9b1a4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9b:95:05:d4:41:d1:f8:ef:b8:bf:5e:cf:07:
                    f3:fc:ec:12:75:7d:38:b3:22:83:b5:37:36:a4:35:
                    f3:84:cd:a4:86:0a:ec:a0:17:a1:57:b9:fd:4a:3f:
                    c7:3c:8b:4d:80:a5:a2:1b:b6:4e:7a:5b:be:fe:70:
                    9e:5c:e1:6a:71:3d:66:cc:ff:9e:2a:d5:8c:c1:d2:
                    bd:f5:50:65:62:b8:c6:b3:7f:3c:bd:dd:c7:5c:05:
                    8c:30:d7:b4:ba:bd:cd:50:4e:0d:92:61:7f:33:e9:
                    f4:1c:df:1d:7b:00:12:81:06:c1:63:eb:ea:70:78:
                    e0:fd:f1:51:ca:b0:3b:e2:de:15:32:b3:51:8a:1d:
                    98:db:ad:75:a0:cb:28:1e:e9:de:8b:46:14:b4:ff:
                    26:1f:67:ce:5b:5a:0a:6e:18:53:26:ad:73:35:04:
                    c1:8e:a5:d1:c6:93:e7:02:7b:ed:58:41:16:c4:2e:
                    14:dd:11:45:11:31:ff:2a:04:10:42:f0:9c:b9:11:
                    25:2e:b7:1e:fc:33:7d:73:21:4c:d8:10:80:45:0b:
                    37:73:9c:74:d4:1f:06:0c:48:c2:e7:f2:0a:13:4c:
                    a7:73:8b:e6:5f:c5:ba:20:1b:7c:d9:ab:24:61:e8:
                    4b:91:96:d7:3c:bd:4c:f3:a0:b9:24:01:dc:5b:2c:
                    64:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2E:21:4F:F0:5A:D9:0F:B7:E9:B7:A8:42:1C:52:E9:DF:DB:41:A4
            X509v3 Authority Key Identifier:
                keyid:9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/7652c96d1211064ed65e39fd2c0e2f60a9b1a4d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.205.0/24
                  170.239.207.0/24
                IPv6:
                  2803:9cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:af:f4:f1:c2:69:2b:82:82:a8:e7:5c:45:11:3e:da:3c:27:
         e4:4c:e8:61:1f:a8:31:89:d3:5a:6b:4c:93:33:9e:17:13:53:
         5b:12:77:a5:34:ca:53:af:54:b2:ad:de:43:b1:8b:bf:63:40:
         e8:32:0c:90:19:15:ce:29:40:d4:89:2d:7c:e0:e7:dc:25:93:
         34:cb:ad:51:cf:fd:fa:76:3d:7b:46:95:34:ca:14:ce:ab:7d:
         91:90:9f:f0:83:a6:e9:fb:50:89:1c:13:e2:3a:3c:2a:c8:b6:
         fa:0d:42:94:59:f5:9a:7b:b3:ec:87:a5:0e:31:54:2e:d5:30:
         1c:08:b8:ea:94:d4:94:b1:5c:b8:55:e1:f1:0d:a7:dd:83:e5:
         fc:7e:4a:51:da:55:da:dc:98:21:2e:32:46:92:61:b6:2f:81:
         82:c7:0f:54:e0:bd:c8:f9:b7:89:9e:c1:ab:96:73:2f:8e:e2:
         eb:64:65:e0:31:2c:4c:cd:c6:7a:d7:03:e5:75:2b:a8:db:84:
         c0:42:ab:06:aa:9b:88:76:b2:b8:bb:ac:21:59:48:2b:29:04:
         96:44:1c:ce:c3:71:c5:0e:d3:74:0e:5c:a0:e8:3d:55:5a:09:
         ef:75:26:7c:c4:45:d0:81:c8:c4:b8:40:f2:07:df:69:39:71:
         0c:b6:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----