Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/184aa8eb5c6e3a2b6d334370ee550e56ab8344df.roa
File:                     184aa8eb5c6e3a2b6d334370ee550e56ab8344df.roa (raw, json)
Hash identifier:          2IK7akPJXVp2GHNlTlDVJVr8j0uA9Iv+TM9Fc/TP+Js=
Subject key identifier:   43:C7:01:E5:BD:6A:E6:EF:61:B8:4F:5D:48:8C:8B:3B:E4:45:6F:9F
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       1F5985
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/184aa8eb5c6e3a2b6d334370ee550e56ab8344df.roa
Signing time:             Wed 26 Apr 2023 17:25:25 +0000
ROA not before:           Tue 25 Apr 2023 17:24:40 +0000
ROA not after:            Sat 26 Apr 2025 17:24:40 +0000
asID:                     52442
IP address blocks:        170.210.96.0/21 maxlen: 24
                          2800:110:1018::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054533 (0x1f5985)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Apr 25 17:24:40 2023 GMT
            Not After : Apr 26 17:24:40 2025 GMT
        Subject: CN=184aa8eb5c6e3a2b6d334370ee550e56ab8344df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:c0:93:fe:99:f7:85:4b:67:45:67:be:19:
                    3f:84:fa:ad:24:d1:0c:74:23:11:4b:4a:2f:bc:3b:
                    6b:75:62:46:d6:e9:85:37:2f:8e:ae:a0:a9:a7:83:
                    17:90:97:5c:32:ce:6c:26:f9:6f:5f:3a:e3:e3:f5:
                    27:83:10:6d:ff:91:ab:ed:28:49:69:dd:43:29:5e:
                    a2:b8:ce:aa:2d:5f:e9:4b:86:3b:33:d7:21:40:44:
                    5f:c0:f1:83:41:91:30:d0:5e:3c:56:33:d1:c2:0f:
                    6d:3f:c3:b8:f3:a0:62:e0:e5:56:fa:b3:d0:9b:c8:
                    ed:0d:0c:e2:c6:66:5f:7b:5e:27:c1:7d:85:90:98:
                    71:c3:e8:cb:aa:aa:c7:d7:83:f5:be:ab:46:b1:65:
                    82:41:40:7b:12:dc:10:82:6d:ee:a7:61:7a:ba:b9:
                    0c:4b:65:a5:e8:d2:42:d9:87:54:4d:ae:73:b7:55:
                    b5:3c:88:c6:dd:e1:0c:a4:fc:e5:fd:d6:ba:5b:8a:
                    70:4e:60:f8:76:c3:b8:7f:05:36:4b:1a:78:ed:60:
                    08:6e:9a:9f:ae:03:be:5c:42:d9:0a:b2:51:b1:40:
                    4b:1a:65:39:71:b9:64:f3:4d:f8:db:d2:28:e8:e2:
                    ae:7f:51:c9:6d:d8:20:84:86:f4:8f:04:d5:8d:33:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C7:01:E5:BD:6A:E6:EF:61:B8:4F:5D:48:8C:8B:3B:E4:45:6F:9F
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/184aa8eb5c6e3a2b6d334370ee550e56ab8344df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.96.0/21
                IPv6:
                  2800:110:1018::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:2e:2c:32:18:c7:cc:e0:1a:4a:ea:bb:f9:50:21:2b:c8:95:
         48:09:41:62:84:82:17:60:76:9a:e1:fd:39:d2:28:35:ec:a0:
         2f:bc:a4:15:57:d9:3f:fe:19:db:e1:fa:aa:c8:83:fe:83:b0:
         4a:27:fa:16:c5:08:ca:5b:52:63:2c:eb:ae:7d:3c:fb:b7:07:
         42:01:ca:44:d3:82:41:f4:72:fa:a5:32:98:10:fc:e8:1f:1e:
         6e:03:fb:c5:9a:f9:0c:7e:68:97:86:78:72:a3:32:49:45:e6:
         d3:30:29:e0:52:43:87:79:42:87:53:f6:e8:87:af:66:f5:a6:
         b5:04:06:4b:1d:67:5e:40:04:8a:f4:eb:47:0c:68:61:71:4c:
         4a:69:be:7c:60:e9:aa:67:83:fb:b2:24:ee:f3:f8:a2:ac:b5:
         ae:cc:09:8f:71:0b:a3:ae:47:8c:81:aa:9c:f2:32:e9:19:b2:
         ac:c2:9c:7f:aa:eb:ae:2a:1e:19:9f:f8:c7:d8:fc:d9:7b:2a:
         9e:27:b7:3c:02:64:28:d9:63:84:71:54:50:49:e3:d8:8d:ac:
         ff:42:4e:23:21:0e:ba:94:23:24:e2:23:b7:c7:63:93:7f:ea:
         72:96:22:3a:30:72:41:bb:07:82:f5:83:7c:76:60:94:7b:ed:
         41:a0:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----