Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/66fd456523218e1aa6501bc2cf8c36de47d55255.roa
File:                     66fd456523218e1aa6501bc2cf8c36de47d55255.roa (raw, json)
Hash identifier:          +zHsjHWh0fraYqpPPQFZ5opYUwaIginyiPhbuFIlfs0=
Subject key identifier:   8C:E8:72:AC:40:9E:F1:EB:B7:0A:E6:11:32:C2:72:20:B8:CF:32:E3
Certificate issuer:       /CN=c804815bcdfef674dc896f6b3f2e0b169560053d
Certificate serial:       147652
Authority key identifier: 50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/66fd456523218e1aa6501bc2cf8c36de47d55255.roa
Signing time:             Thu 11 Jan 2024 19:36:36 +0000
ROA not before:           Thu 11 Jan 2024 19:36:35 +0000
ROA not after:            Sun 11 Jan 2026 19:36:35 +0000
asID:                     263740
IP address blocks:        170.246.52.0/22 maxlen: 22
                          143.137.164.0/22 maxlen: 22
                          161.0.0.0/19 maxlen: 19
                          168.205.160.0/22 maxlen: 22
                          138.99.36.0/22 maxlen: 22
                          186.65.112.0/20 maxlen: 20
                          2803:6c00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341010 (0x147652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c804815bcdfef674dc896f6b3f2e0b169560053d
        Validity
            Not Before: Jan 11 19:36:35 2024 GMT
            Not After : Jan 11 19:36:35 2026 GMT
        Subject: CN=66fd456523218e1aa6501bc2cf8c36de47d55255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dc:36:81:0f:14:1b:69:a0:e1:ad:98:43:b9:
                    31:74:b8:7c:7c:b4:85:7a:ca:66:7b:a1:f1:16:59:
                    ae:30:22:c7:9b:67:24:a2:99:57:df:3a:bc:08:8e:
                    61:46:e7:5a:d8:3a:3c:16:af:e7:dc:d6:25:6e:29:
                    ef:12:c4:68:a2:ba:2e:e1:f8:7f:3d:34:65:55:de:
                    38:9e:9b:3c:ae:c9:cd:db:95:7d:ba:94:fd:73:34:
                    94:05:22:45:15:0c:39:77:ab:8d:ea:92:ea:1c:ef:
                    ce:41:c7:83:14:0a:fe:67:f7:15:9c:d7:57:4a:ee:
                    5c:de:7a:d6:b1:78:b3:c1:24:df:86:a7:d7:8f:f4:
                    74:ca:20:d5:cc:05:16:be:e1:ee:1b:93:3a:48:91:
                    7b:b6:e8:7c:f3:f7:7f:a1:f3:5d:40:27:c1:c0:e1:
                    16:17:1e:e5:d5:8f:63:f6:12:20:a5:f9:6a:73:aa:
                    d4:d6:b1:1f:6f:b1:fb:8a:b1:ee:b0:84:56:0b:a0:
                    05:7b:d1:f6:b3:d7:07:e3:7d:8f:12:2d:21:be:db:
                    ff:1b:d7:2f:31:63:2c:8d:3f:50:4b:73:ad:3b:18:
                    6d:d3:fd:ad:54:83:0e:25:42:3c:67:b2:bc:88:1f:
                    b8:92:84:29:3d:3c:81:4f:58:23:12:c4:da:57:66:
                    60:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E8:72:AC:40:9E:F1:EB:B7:0A:E6:11:32:C2:72:20:B8:CF:32:E3
            X509v3 Authority Key Identifier:
                keyid:50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/66fd456523218e1aa6501bc2cf8c36de47d55255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/c804815bcdfef674dc896f6b3f2e0b169560053d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.36.0/22
                  143.137.164.0/22
                  161.0.0.0/19
                  168.205.160.0/22
                  170.246.52.0/22
                  186.65.112.0/20
                IPv6:
                  2803:6c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:57:1f:bc:19:e9:0d:b7:3b:c9:81:7f:7d:84:88:04:fd:1e:
         a9:76:24:6a:e0:b7:8f:27:2e:a3:69:8c:3a:56:a6:92:be:8e:
         fc:50:0f:e7:75:39:0e:0f:bb:8c:e6:78:8a:b4:bf:6d:f5:04:
         fb:88:db:27:86:eb:a6:8e:ac:8c:0b:96:65:7b:d3:40:29:4c:
         5b:84:b2:f2:5f:90:59:d8:c2:f5:a7:c9:95:ee:6b:c8:31:e9:
         47:56:5c:bc:6e:5c:90:2b:f9:ac:f5:1a:51:5f:c1:53:86:ef:
         95:ea:a8:c7:2b:40:e8:db:0d:bf:0b:1e:53:82:61:1b:37:78:
         a7:1a:73:e3:16:35:46:92:5b:df:7c:e2:26:69:e0:0a:f8:a0:
         da:e1:52:7f:ec:63:76:1d:18:b8:a0:67:e6:91:1e:83:52:06:
         b1:af:1b:61:31:87:d1:0d:3b:49:e3:de:09:5e:98:02:ab:a9:
         6e:9d:4e:31:e1:f4:ee:4f:81:cd:c9:ff:66:1d:78:78:9a:e4:
         be:6d:c7:29:c4:64:6a:d2:24:a6:a8:9d:ca:20:8f:5e:76:5c:
         6d:d0:ac:d0:fe:99:22:2a:d1:d9:c1:ee:6d:17:d9:1f:36:fd:
         af:cf:cc:c7:da:c1:50:0e:80:2e:47:11:6f:5f:49:45:91:3a:
         1c:5e:9a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----