Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/95702f838a0808267de2045acd3f4af48502246a.roa
File:                     95702f838a0808267de2045acd3f4af48502246a.roa (raw, json)
Hash identifier:          J9FDg+RxDn7HVyNsViStZFxAw5laDofKd5WBYyxudWo=
Subject key identifier:   A8:12:01:35:D2:23:11:30:38:D4:D5:1B:CE:47:68:18:60:E6:FA:13
Certificate issuer:       /CN=c355af2587e04fcb2db519de3ca0af885d613b77
Certificate serial:       23EE9F
Authority key identifier: BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/95702f838a0808267de2045acd3f4af48502246a.roa
Signing time:             Mon 02 Oct 2023 18:23:50 +0000
ROA not before:           Sun 01 Oct 2023 18:23:50 +0000
ROA not after:            Thu 02 Oct 2025 19:23:50 +0000
asID:                     265780
IP address blocks:        168.227.20.0/22 maxlen: 24
                          2803:fd40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2354847 (0x23ee9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c355af2587e04fcb2db519de3ca0af885d613b77
        Validity
            Not Before: Oct  1 18:23:50 2023 GMT
            Not After : Oct  2 19:23:50 2025 GMT
        Subject: CN=95702f838a0808267de2045acd3f4af48502246a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b3:a2:da:ad:64:0a:50:b3:93:17:7b:09:a1:
                    de:48:fb:d8:6f:80:9e:92:16:5f:93:1f:43:f2:70:
                    03:31:a6:a5:26:30:2c:ca:7b:4e:77:01:17:d8:d0:
                    b2:2f:f5:35:5e:10:0f:89:54:c2:a3:73:fe:3a:73:
                    fe:00:91:e8:c0:1e:22:ea:f0:8b:bc:70:c0:c9:e5:
                    30:75:8d:de:49:a9:91:d4:14:88:66:e9:40:f4:f2:
                    03:28:d9:7f:3a:01:d0:ce:83:1c:da:93:42:b7:36:
                    89:8a:b8:bb:bd:44:ed:a2:1a:a3:ae:c6:69:24:3b:
                    ac:f9:6f:f1:cf:80:ee:38:04:03:0b:dd:95:97:bc:
                    db:42:76:54:05:f4:23:2d:6e:e9:30:3e:17:d3:30:
                    8b:7b:7a:59:e3:2c:da:b5:c1:6d:e7:6b:6b:01:32:
                    df:89:71:82:62:42:b9:5d:78:81:6f:2b:25:ca:92:
                    d1:e4:be:e7:01:4c:ac:b4:41:74:d9:32:fd:3f:93:
                    5d:c8:9d:6d:1a:b0:45:28:a5:67:66:c0:ca:b7:77:
                    14:7c:ce:a0:0f:ee:68:9e:63:7b:10:2a:a1:f4:ad:
                    2b:b0:03:ee:ac:a5:38:d8:f5:58:6b:4e:ba:40:60:
                    ea:e1:dc:53:8b:3a:82:6a:08:be:ec:55:d7:df:eb:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:12:01:35:D2:23:11:30:38:D4:D5:1B:CE:47:68:18:60:E6:FA:13
            X509v3 Authority Key Identifier:
                keyid:BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/95702f838a0808267de2045acd3f4af48502246a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/c355af2587e04fcb2db519de3ca0af885d613b77.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.20.0/22
                IPv6:
                  2803:fd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:0e:7d:99:b4:f1:c6:75:30:96:ff:ae:eb:4b:69:24:ba:6a:
         c9:30:ee:08:8b:23:ea:e9:ca:1b:eb:ce:df:5d:b6:9e:9f:2c:
         ed:2b:6e:35:f7:a5:93:91:61:e0:20:e2:82:8d:40:c4:65:e1:
         aa:5c:26:0d:40:e7:e4:c2:ec:0f:90:8f:a4:97:5c:bc:c9:6d:
         12:99:5b:19:92:08:e8:d0:ea:6b:dd:0d:cf:7b:82:e1:e3:c9:
         46:31:6a:9a:c2:23:41:62:96:7d:bc:56:89:4e:88:cb:22:45:
         2e:0b:b4:be:e0:cd:30:e6:d2:46:45:9c:9f:31:d8:8f:48:f6:
         b0:0c:ab:ed:ce:e2:33:f9:49:01:9b:7d:27:a1:68:60:d4:3b:
         69:10:61:0a:4d:cf:7e:31:46:fd:45:44:91:66:9c:8f:2a:2d:
         43:66:e9:c5:93:8d:e4:93:da:79:5a:70:5e:67:3c:34:db:cd:
         c3:bd:f6:41:01:28:ff:9d:30:5d:2a:7e:55:bb:35:0e:0f:ac:
         60:c5:05:6f:c6:cb:fd:76:fd:89:b7:c7:54:2a:aa:84:fe:2a:
         fc:06:77:f9:35:64:85:0c:f0:0f:7f:32:0e:b4:4b:ed:f0:bd:
         a7:85:45:d8:1a:61:cc:10:4c:95:71:bf:8b:5e:97:fc:c9:b0:
         89:ce:20:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----