Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/99ec1d823a70d360daf6bff41f337ec76d3e30d9.roa
File:                     99ec1d823a70d360daf6bff41f337ec76d3e30d9.roa (raw, json)
Hash identifier:          CuoUk+WJV7mBZNUfgmx6aGG4dr7GoMiNhFknl6bPF0I=
Subject key identifier:   6F:06:4E:24:B7:5E:97:FF:73:9E:64:9C:53:EE:0D:17:01:88:18:28
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       1F368E
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/99ec1d823a70d360daf6bff41f337ec76d3e30d9.roa
Signing time:             Wed 26 Apr 2023 17:24:52 +0000
ROA not before:           Tue 25 Apr 2023 17:24:40 +0000
ROA not after:            Sat 26 Apr 2025 17:24:40 +0000
asID:                     264630
IP address blocks:        170.210.240.0/22 maxlen: 24
                          2800:110:2200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2045582 (0x1f368e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Apr 25 17:24:40 2023 GMT
            Not After : Apr 26 17:24:40 2025 GMT
        Subject: CN=99ec1d823a70d360daf6bff41f337ec76d3e30d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:8f:9d:aa:21:01:d4:ae:c5:b9:17:cc:10:
                    85:f7:f1:e9:b0:2d:ee:de:f7:50:1c:d7:e6:d1:47:
                    d7:bb:d5:be:ad:a7:0d:cd:5c:19:6f:fd:1e:7f:79:
                    fd:38:99:e2:0c:c3:40:47:c7:74:ff:d8:4d:80:3d:
                    43:59:a1:2c:fb:a5:15:6d:f5:3e:12:f9:69:72:39:
                    56:79:0a:bd:d3:7a:2e:2d:89:0d:dd:f6:bd:d3:03:
                    ef:a3:47:b5:88:db:af:67:ec:d1:0c:29:4e:67:58:
                    d8:33:7b:f7:c0:51:28:04:a0:9b:ad:5c:72:55:82:
                    5a:63:9f:c0:e0:5c:00:c1:3f:a6:a8:a3:90:1b:57:
                    21:f3:a4:60:18:f9:2f:09:a6:71:db:9e:f0:19:03:
                    1e:22:89:47:dc:00:1d:36:34:50:dc:fb:f9:29:ea:
                    75:b3:ef:69:c3:5d:e0:3f:00:f5:1c:bb:88:4b:7f:
                    af:19:c5:d6:9b:5a:42:01:23:e7:b8:f0:57:36:c3:
                    a6:a4:85:ff:6d:20:00:f4:bd:0f:0d:0e:6b:26:fd:
                    18:e9:87:25:b9:06:09:49:8d:f2:7c:04:86:46:54:
                    9c:ba:92:5e:8b:0c:c7:fa:9d:94:3d:1a:b8:c6:36:
                    78:75:6f:96:30:ae:0a:32:16:f9:63:48:18:7f:b4:
                    1e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:06:4E:24:B7:5E:97:FF:73:9E:64:9C:53:EE:0D:17:01:88:18:28
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/99ec1d823a70d360daf6bff41f337ec76d3e30d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.240.0/22
                IPv6:
                  2800:110:2200::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:0c:fc:f6:4e:6d:c3:0e:0b:a1:5c:af:f1:1a:7e:e5:48:fd:
         90:cb:bc:63:2a:a9:59:0d:62:4f:94:e5:e9:b8:0d:25:05:8f:
         94:bc:7c:83:0c:9b:85:f8:9f:ad:52:2e:3d:29:b8:25:11:d2:
         90:49:31:f7:47:ed:42:b1:a3:d4:0b:30:c1:f4:58:18:c0:55:
         64:09:ed:70:6c:9b:b9:62:9d:c9:ce:af:cb:9e:09:1c:c1:45:
         8e:fb:d3:80:55:59:19:e3:8f:46:54:cf:c0:22:30:73:42:93:
         ff:93:38:0b:be:a3:82:d4:91:19:37:c8:a5:d4:83:69:c8:42:
         d3:7e:a1:39:dd:65:0b:ab:ce:d4:b6:0b:90:c7:dd:87:61:93:
         a6:6b:ea:98:50:98:0e:79:c5:57:df:d9:0c:f0:62:cf:d8:1c:
         3d:61:aa:ac:37:1a:ac:8d:f2:8b:5b:16:d4:91:6b:30:f8:40:
         63:4a:ca:db:a4:d4:bb:7f:2a:f8:65:d8:b2:63:a3:4e:0c:38:
         3b:ad:1c:e2:c1:b1:a9:5b:fe:e6:d3:42:0c:5d:2a:26:51:f3:
         1a:2f:02:6a:64:a9:fd:d7:2c:b4:53:f6:a2:e8:7e:79:68:18:
         36:8b:4b:2e:71:af:e0:c6:25:fe:48:12:62:32:c9:33:94:a7:
         44:87:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----