Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/aef4327c5656556343dfdc4b9792db9e97bd69ff.roa
File:                     aef4327c5656556343dfdc4b9792db9e97bd69ff.roa (raw, json)
Hash identifier:          E9EIwq4CbOWUdTtDDSmWO0FiM49WLxuy1XeumqjPnps=
Subject key identifier:   C4:31:3B:60:7E:3F:27:DD:68:52:D4:C2:4F:1A:61:CA:2C:2B:C7:33
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       1125D1
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/aef4327c5656556343dfdc4b9792db9e97bd69ff.roa
Signing time:             Wed 12 Jul 2023 13:06:14 +0000
ROA not before:           Tue 11 Jul 2023 13:06:14 +0000
ROA not after:            Sat 12 Jul 2025 13:06:14 +0000
asID:                     27768
IP address blocks:        177.250.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1123793 (0x1125d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Jul 11 13:06:14 2023 GMT
            Not After : Jul 12 13:06:14 2025 GMT
        Subject: CN=aef4327c5656556343dfdc4b9792db9e97bd69ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:5c:5a:b8:3b:c7:5f:c2:28:4b:35:68:7c:
                    08:54:74:cc:a6:41:75:6f:da:70:ee:6f:62:64:97:
                    2d:52:14:d8:cc:86:ae:05:68:e8:1c:66:4b:18:d0:
                    77:9e:c2:f0:9b:93:1a:e0:e1:8d:b3:24:16:0c:03:
                    14:13:f4:2d:df:11:7e:5d:51:d9:99:f9:41:78:09:
                    a1:2b:11:df:ff:17:a7:7d:40:ff:56:d3:e1:7d:b9:
                    19:8d:21:1f:ea:f4:5d:43:42:e5:ef:2b:0a:cf:c4:
                    ce:cc:a8:b9:f6:f9:d1:df:8b:b3:1c:5f:dd:ac:64:
                    4a:82:2d:b1:de:40:00:fd:16:49:7e:16:69:28:b6:
                    2e:6b:bf:1d:73:f4:7f:b6:d1:7a:c4:56:71:57:09:
                    fd:89:50:ed:e5:5b:02:6c:f5:c2:48:e9:d0:70:7f:
                    e5:21:ea:43:22:61:f0:7a:f0:c6:66:96:e7:c8:24:
                    11:2a:05:e2:33:53:c3:0e:06:ad:39:22:5c:67:4a:
                    f8:f0:dd:c7:07:b7:a8:e9:62:a8:89:b4:5c:6e:3b:
                    24:33:53:63:86:c3:d6:74:b8:62:0b:5b:35:3d:a1:
                    34:9e:7d:64:e3:33:f1:e6:7f:f8:19:15:cc:48:0b:
                    9e:f4:b5:c5:a3:0e:1a:47:a2:65:ae:8d:ed:7d:e0:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:31:3B:60:7E:3F:27:DD:68:52:D4:C2:4F:1A:61:CA:2C:2B:C7:33
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/aef4327c5656556343dfdc4b9792db9e97bd69ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6d:10:77:ff:5a:10:73:55:e4:65:e6:f7:87:f1:68:af:8e:69:
         df:bb:92:f0:e8:3d:fb:07:2a:d1:be:4f:2f:c1:a8:74:64:83:
         36:28:47:6e:90:bd:05:95:f7:8d:e8:82:17:ba:be:2a:a4:50:
         c0:fc:f2:ef:dc:05:1d:4a:94:34:43:67:c7:cc:64:fb:68:bc:
         57:63:48:02:26:82:88:c0:76:ec:1c:3b:92:4c:76:06:f6:8c:
         4a:e6:f2:65:b6:df:79:8a:10:b0:c5:ff:6f:24:c7:88:15:bc:
         74:4b:cd:68:a0:7d:40:89:0c:c3:18:ea:56:30:e4:ab:9f:aa:
         08:e7:36:b9:e2:da:8b:7c:ea:d1:99:c6:02:ff:03:63:0d:60:
         86:43:2b:c0:89:0d:00:f2:80:ca:8a:c2:39:5b:f9:a7:71:bc:
         bf:91:ce:49:2c:df:a7:5a:df:69:25:3a:0f:f2:da:2e:94:12:
         fd:c4:d3:1e:d1:f0:7b:29:77:f9:de:63:40:7d:ba:9e:f8:47:
         ea:77:d5:6a:c6:90:cc:78:52:fb:fc:96:b4:06:7f:24:4d:fa:
         a1:1c:19:e3:5e:f5:a7:9f:d6:c0:e2:5a:1b:1f:93:19:4f:23:
         65:9b:a2:db:9d:8f:b0:0d:2f:70:64:07:43:f7:3a:56:dd:72:
         da:a8:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----