Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/2ebd82d462aa778f7b5f7ba38ef374194196e23c.roa
File:                     2ebd82d462aa778f7b5f7ba38ef374194196e23c.roa (raw, json)
Hash identifier:          p2WoOWMvpDyu8muAeS5lZyzoLKhLPMHYRvUFdoh0U+4=
Subject key identifier:   EA:2A:2B:5E:9D:0E:8D:24:61:80:34:0F:BD:CE:67:35:CB:9F:14:0B
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       1F2FAE
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/2ebd82d462aa778f7b5f7ba38ef374194196e23c.roa
Signing time:             Wed 26 Apr 2023 17:24:47 +0000
ROA not before:           Tue 25 Apr 2023 17:24:40 +0000
ROA not after:            Sat 26 Apr 2025 17:24:40 +0000
asID:                     4270
IP address blocks:        170.210.0.0/16 maxlen: 24
                          2800:110::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043822 (0x1f2fae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Apr 25 17:24:40 2023 GMT
            Not After : Apr 26 17:24:40 2025 GMT
        Subject: CN=2ebd82d462aa778f7b5f7ba38ef374194196e23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:ad:a5:16:e9:f9:ac:f8:be:fc:51:f1:08:
                    68:9e:b0:aa:b6:e2:f1:33:c6:33:20:b4:47:43:0c:
                    c8:c5:cc:de:6e:09:e9:15:78:6f:91:f2:f4:79:ca:
                    26:40:82:4f:94:76:5d:8f:ef:a9:5d:12:ea:ae:de:
                    3a:48:36:5d:cc:12:95:fe:6d:db:99:96:07:02:21:
                    12:2b:ad:c7:3a:9d:59:20:3d:a2:a4:cb:86:fc:9d:
                    0a:4b:9a:bb:7d:ce:5e:3f:e8:8b:13:2f:0c:9a:34:
                    b8:a2:e9:95:4d:6c:94:7d:a2:19:e4:e2:dd:87:29:
                    b9:7d:4a:02:15:c6:4d:0c:e0:b3:e8:01:92:5f:f8:
                    7d:65:a4:e7:9a:75:b8:3a:04:73:b7:d3:76:d0:47:
                    1c:1d:2c:c1:bc:68:f4:5e:3f:42:27:73:a1:9e:de:
                    53:d2:3c:e8:42:bb:c3:17:78:56:fb:3a:59:c4:29:
                    fd:a5:da:6f:7a:2a:b4:39:04:4f:54:9f:7f:55:0f:
                    30:d2:33:88:aa:46:46:30:c3:85:8c:8a:36:97:e9:
                    9f:d3:dd:91:eb:53:17:9e:6b:b2:88:77:32:de:2e:
                    09:a2:d8:22:7a:f6:dc:26:62:91:5f:fe:ad:15:46:
                    bb:76:18:89:16:09:7c:45:b1:a5:65:d4:f3:3d:e8:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2A:2B:5E:9D:0E:8D:24:61:80:34:0F:BD:CE:67:35:CB:9F:14:0B
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/2ebd82d462aa778f7b5f7ba38ef374194196e23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.0.0/16
                IPv6:
                  2800:110::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:e3:71:20:82:f9:19:82:88:f0:bb:fc:54:10:4d:74:ea:4d:
         e8:28:b7:59:22:6d:24:21:15:a2:a2:48:f3:2e:4a:e3:55:4b:
         96:6e:95:03:84:eb:1d:f6:e6:53:76:9d:db:a5:7c:f6:c7:26:
         e7:3f:22:fc:af:82:2e:b5:db:b8:30:fb:c0:a4:c1:37:73:03:
         42:e0:6c:c3:fe:30:51:f4:82:43:bd:73:1a:54:e5:cd:88:36:
         0e:28:42:6d:91:1c:f0:35:4c:8d:88:a0:9b:38:f3:12:ee:7b:
         77:9c:95:7b:38:ee:e7:8d:e4:fa:7c:6d:58:37:12:15:9b:f9:
         7f:ee:10:92:0a:8c:40:5b:59:5a:d4:8f:d0:0b:80:17:9c:77:
         b9:9f:bc:fe:22:ff:23:3b:1d:84:cb:6f:7c:d9:23:0a:cc:9c:
         14:ec:16:04:67:62:8d:67:1a:f5:5c:89:00:97:94:15:ed:5f:
         63:44:a2:8b:04:2e:3e:7e:96:5f:02:b7:94:8d:ac:88:a3:34:
         df:61:29:ed:fe:f5:a1:ed:65:38:6f:8e:9f:db:94:c1:88:50:
         5b:5b:38:1a:5f:3c:80:3b:c9:0d:01:5f:40:2f:e7:3a:af:88:
         da:de:c8:ea:bf:ca:19:93:9a:da:76:af:7a:c1:05:62:74:61:
         c9:5f:74:24
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDHy+uMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl
YzkzMzQ3ODlkNGZiOTdiMGMwYWE0ODM1NjM5MDZhNWQ2OWI0YzIwHhcNMjMwNDI1
MTcyNDQwWhcNMjUwNDI2MTcyNDQwWjAzMTEwLwYDVQQDEygyZWJkODJkNDYyYWE3
NzhmN2I1ZjdiYTM4ZWYzNzQxOTQxOTZlMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApFStpRbp+az4vvxR8QhonrCqtuLxM8YzILRHQwzIxczebgnp
FXhvkfL0ecomQIJPlHZdj++pXRLqrt46SDZdzBKV/m3bmZYHAiESK63HOp1ZID2i
pMuG/J0KS5q7fc5eP+iLEy8MmjS4oumVTWyUfaIZ5OLdhym5fUoCFcZNDOCz6AGS
X/h9ZaTnmnW4OgRzt9N20EccHSzBvGj0Xj9CJ3Ohnt5T0jzoQrvDF3hW+zpZxCn9
pdpveiq0OQRPVJ9/VQ8w0jOIqkZGMMOFjIo2l+mf092R61MXnmuyiHcy3i4Jotgi
evbcJmKRX/6tFUa7dhiJFgl8RbGlZdTzPeg+2wIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFOoqK16dDo0kYYA0D73OZzXLnxQLMB8GA1UdIwQYMBaAFAiRqsSRgrsOBnj6
2ng1jFjfNFzLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWVjOTMz
NDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjhkNWJlNGQtZTc1MS00YzcwLTk2NmItY2ZmNWVk
N2JmNWJlLzJlYmQ4MmQ0NjJhYTc3OGY3YjVmN2JhMzhlZjM3NDE5NDE5NmUyM2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOGQ1YmU0ZC1lNzUxLTRjNzAtOTY2Yi1jZmY1
ZWQ3YmY1YmUvZWVjOTMzNDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwCwQCAAEwBQMDAKrSMA0EAgACMAcDBQAoAAEQMA0GCSqGSIb3DQEBCwUAA4IB
AQBA43EggvkZgojwu/xUEE106k3oKLdZIm0kIRWiokjzLkrjVUuWbpUDhOsd9uZT
dp3bpXz2xybnPyL8r4Iutdu4MPvApME3cwNC4GzD/jBR9IJDvXMaVOXNiDYOKEJt
kRzwNUyNiKCbOPMS7nt3nJV7OO7njeT6fG1YNxIVm/l/7hCSCoxAW1la1I/QC4AX
nHe5n7z+Iv8jOx2Ey2982SMKzJwU7BYEZ2KNZxr1XIkAl5QV7V9jRKKLBC4+fpZf
AreUjayIozTfYSnt/vWh7WU4b46f25TBiFBbWzgaXzyAO8kNAV9AL+c6r4ja3sjq
v8oZk5radq96wQVidGHJX3Qk
-----END CERTIFICATE-----