Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/ea6debeed0b10b3a06dc9275dc9403f1523404e2.roa
File:                     ea6debeed0b10b3a06dc9275dc9403f1523404e2.roa (raw, json)
Hash identifier:          JYPnVMgbvC0Dv4YFDg+ooAfc2CnlVPy/EWMQkKwzITo=
Subject key identifier:   31:B2:79:8C:04:0F:63:02:99:EE:6C:52:91:0C:6D:D2:9C:65:99:11
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       1F14E3
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/ea6debeed0b10b3a06dc9275dc9403f1523404e2.roa
Signing time:             Wed 26 Apr 2023 17:24:41 +0000
ROA not before:           Tue 25 Apr 2023 17:24:40 +0000
ROA not after:            Sat 26 Apr 2025 17:24:40 +0000
asID:                     27875
IP address blocks:        170.210.144.0/21 maxlen: 24
                          2800:110:2800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2036963 (0x1f14e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Apr 25 17:24:40 2023 GMT
            Not After : Apr 26 17:24:40 2025 GMT
        Subject: CN=ea6debeed0b10b3a06dc9275dc9403f1523404e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:17:10:65:7d:ed:1d:9f:ad:c9:5b:a3:df:bf:
                    a3:2b:30:de:43:91:69:7f:e7:01:28:a4:cc:18:bc:
                    9c:18:b1:86:48:3a:da:30:33:8e:fa:26:ae:a8:02:
                    42:ae:08:1c:e1:87:82:1e:aa:be:79:ab:04:0e:29:
                    87:52:bc:b1:9f:92:1b:4f:6b:57:86:24:5a:fc:0a:
                    c3:1f:aa:4c:f4:85:f1:1b:f5:61:22:3b:5d:da:91:
                    32:1b:43:6a:a1:9f:3b:6b:f2:cb:75:74:f1:c6:fb:
                    be:e4:09:56:30:ed:2d:e4:70:53:c1:0e:94:dd:7c:
                    0f:d3:b7:9b:66:99:a7:30:4f:3a:1a:2f:d3:ca:6b:
                    a1:e5:0a:a1:a7:8f:f1:c2:b4:5e:41:a5:10:d4:2f:
                    01:86:c8:75:8e:28:8e:7b:82:3c:94:7d:83:0d:84:
                    10:42:f6:69:72:7f:b3:3f:b4:36:75:02:40:64:6d:
                    0e:04:54:96:81:7b:f4:f2:e5:cb:7a:87:31:56:be:
                    7f:6e:0e:e0:a9:34:78:61:89:83:35:8a:fd:2a:fb:
                    33:6e:29:07:c7:32:db:4b:c0:06:94:5b:c1:85:3e:
                    12:72:6e:dd:36:1b:88:3b:06:f6:25:e5:28:3f:53:
                    e3:38:92:ef:5c:7f:5d:eb:4b:8a:fd:20:ca:cc:48:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B2:79:8C:04:0F:63:02:99:EE:6C:52:91:0C:6D:D2:9C:65:99:11
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/ea6debeed0b10b3a06dc9275dc9403f1523404e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.144.0/21
                IPv6:
                  2800:110:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:18:63:d1:a0:c0:5d:35:87:f3:fc:05:53:c5:b5:83:cf:c3:
         82:de:da:c7:46:89:c4:f6:d5:2d:a3:fb:57:39:3c:e8:1b:59:
         f4:2b:0d:1d:ff:f9:c4:c6:76:68:4e:c2:80:26:9b:ec:79:d8:
         0f:47:c7:16:c8:fb:73:66:19:90:07:89:c1:c7:23:df:ec:86:
         41:b7:f8:0b:05:28:48:c9:81:eb:e0:b6:c5:e0:79:0f:cb:cb:
         35:5b:fc:93:07:7b:84:56:e0:59:a4:23:60:cf:09:51:8f:79:
         11:3e:a2:17:07:ea:af:be:d5:3b:16:85:1a:a4:db:8d:6f:90:
         80:45:dc:dc:74:9c:7f:a9:4d:55:26:0c:8a:c8:ea:e4:59:cb:
         24:7b:f7:bd:e3:f3:61:49:46:c6:22:87:34:58:51:f1:7c:d0:
         1e:ee:6f:7d:50:b7:ce:43:02:b4:f3:f7:69:78:8f:e2:8f:80:
         c0:af:7a:78:de:d8:22:da:b0:f5:a4:82:b2:6b:ce:aa:d1:21:
         1c:22:2d:d3:87:07:64:4e:b6:30:e5:e7:ad:db:5a:4c:bf:ea:
         ba:1d:f8:f3:e1:14:db:0e:18:23:71:7d:b7:d6:32:7a:99:83:
         9a:b5:c2:7e:c3:76:65:de:62:6b:5a:3b:f9:50:a5:73:fa:27:
         ed:4f:d3:20
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDHxTjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl
YzkzMzQ3ODlkNGZiOTdiMGMwYWE0ODM1NjM5MDZhNWQ2OWI0YzIwHhcNMjMwNDI1
MTcyNDQwWhcNMjUwNDI2MTcyNDQwWjAzMTEwLwYDVQQDEyhlYTZkZWJlZWQwYjEw
YjNhMDZkYzkyNzVkYzk0MDNmMTUyMzQwNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmxcQZX3tHZ+tyVuj37+jKzDeQ5Fpf+cBKKTMGLycGLGGSDra
MDOO+iauqAJCrggc4YeCHqq+easEDimHUryxn5IbT2tXhiRa/ArDH6pM9IXxG/Vh
Ijtd2pEyG0NqoZ87a/LLdXTxxvu+5AlWMO0t5HBTwQ6U3XwP07ebZpmnME86Gi/T
ymuh5Qqhp4/xwrReQaUQ1C8Bhsh1jiiOe4I8lH2DDYQQQvZpcn+zP7Q2dQJAZG0O
BFSWgXv08uXLeocxVr5/bg7gqTR4YYmDNYr9KvszbikHxzLbS8AGlFvBhT4Scm7d
NhuIOwb2JeUoP1PjOJLvXH9d60uK/SDKzEjPBQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFDGyeYwED2MCme5sUpEMbdKcZZkRMB8GA1UdIwQYMBaAFAiRqsSRgrsOBnj6
2ng1jFjfNFzLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWVjOTMz
NDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjhkNWJlNGQtZTc1MS00YzcwLTk2NmItY2ZmNWVk
N2JmNWJlL2VhNmRlYmVlZDBiMTBiM2EwNmRjOTI3NWRjOTQwM2YxNTIzNDA0ZTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOGQ1YmU0ZC1lNzUxLTRjNzAtOTY2Yi1jZmY1
ZWQ3YmY1YmUvZWVjOTMzNDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEA6rSkDAPBAIAAjAJAwcAKAABECgAMA0GCSqGSIb3DQEBCwUA
A4IBAQAOGGPRoMBdNYfz/AVTxbWDz8OC3trHRonE9tUto/tXOTzoG1n0Kw0d//nE
xnZoTsKAJpvsedgPR8cWyPtzZhmQB4nBxyPf7IZBt/gLBShIyYHr4LbF4HkPy8s1
W/yTB3uEVuBZpCNgzwlRj3kRPqIXB+qvvtU7FoUapNuNb5CARdzcdJx/qU1VJgyK
yOrkWcske/e94/NhSUbGIoc0WFHxfNAe7m99ULfOQwK08/dpeI/ij4DAr3p43tgi
2rD1pIKya86q0SEcIi3ThwdkTrYw5eet21pMv+q6Hfjz4RTbDhgjcX231jJ6mYOa
tcJ+w3Zl3mJrWjv5UKVz+iftT9Mg
-----END CERTIFICATE-----