Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/0c4ac2f35bd1d7522d6a95d57dc0bd5b38372c3f.roa
File:                     0c4ac2f35bd1d7522d6a95d57dc0bd5b38372c3f.roa (raw, json)
Hash identifier:          UhZG9zyB1f4wJSmF5EJoqsK0ZrFg7wYQBQEfJYbhAVE=
Subject key identifier:   EE:11:8B:42:F3:40:41:BE:FD:EB:13:A0:C0:04:D8:3B:47:53:AD:CE
Certificate issuer:       /CN=0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067
Certificate serial:       20395C
Authority key identifier: 7D:14:32:7E:D0:E3:39:25:8E:68:E7:8A:B5:17:AB:D6:C5:F4:69:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/0c4ac2f35bd1d7522d6a95d57dc0bd5b38372c3f.roa
Signing time:             Tue 09 May 2023 19:19:51 +0000
ROA not before:           Mon 08 May 2023 19:19:51 +0000
ROA not after:            Fri 09 May 2025 19:19:51 +0000
asID:                     264815
IP address blocks:        170.239.168.0/22 maxlen: 24
                          2801:13:5000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111836 (0x20395c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067
        Validity
            Not Before: May  8 19:19:51 2023 GMT
            Not After : May  9 19:19:51 2025 GMT
        Subject: CN=0c4ac2f35bd1d7522d6a95d57dc0bd5b38372c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:04:2f:72:53:48:77:09:23:43:60:bc:51:
                    2d:03:fb:41:bc:85:75:c5:13:48:53:f9:e5:e7:dc:
                    51:14:3f:84:d3:e2:b9:81:6b:ef:28:4e:8e:4a:68:
                    ed:bd:85:ff:5d:c5:84:b3:da:6b:26:a8:90:c3:85:
                    84:8f:43:f8:19:b5:25:00:4d:70:e1:3e:a1:ac:c0:
                    b9:39:b5:8a:e4:df:92:65:d6:02:b8:63:3a:6f:bb:
                    e0:69:66:4b:f5:e2:b1:3b:a7:15:37:31:e4:12:74:
                    a3:3d:33:fb:f1:10:85:48:f3:c9:0e:5e:15:cf:35:
                    49:2a:63:37:e9:f0:35:b7:21:5d:b8:fa:28:a1:55:
                    77:ba:8b:aa:2d:bd:c9:72:69:16:af:8d:73:8a:f5:
                    a3:15:40:18:ed:1c:e7:1c:4a:7f:17:56:2c:57:05:
                    69:16:7f:22:4d:db:24:cd:c6:fe:48:0c:60:75:18:
                    4d:03:ad:23:75:3e:6f:72:a9:5f:19:93:fe:ee:1d:
                    2a:60:75:28:99:ca:4c:2d:4b:9d:c3:e5:43:ef:96:
                    6d:cd:09:a5:ba:1d:ab:fe:d4:a8:88:dd:8e:f5:a9:
                    65:02:4e:47:b1:26:de:ec:7e:ed:83:78:19:f1:d5:
                    43:0a:61:56:e5:8d:a6:5a:f5:ef:8d:8d:7a:ec:41:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:11:8B:42:F3:40:41:BE:FD:EB:13:A0:C0:04:D8:3B:47:53:AD:CE
            X509v3 Authority Key Identifier:
                keyid:7D:14:32:7E:D0:E3:39:25:8E:68:E7:8A:B5:17:AB:D6:C5:F4:69:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/0c4ac2f35bd1d7522d6a95d57dc0bd5b38372c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.168.0/22
                IPv6:
                  2801:13:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:a2:6a:b3:2c:c8:8c:f4:aa:ec:cf:80:1b:77:b1:d0:6f:5b:
         f1:d8:d8:a3:6e:f4:5b:05:e7:42:74:35:8c:1e:0a:00:fa:5f:
         8f:75:37:19:90:94:0c:05:9a:c4:12:57:8a:8b:a1:04:2f:54:
         cb:87:94:0a:fe:79:34:34:79:f3:cc:a7:9a:34:18:51:19:f2:
         f9:3e:b3:e4:08:30:c1:69:d8:ed:e8:2a:f9:ee:4a:bc:f1:24:
         33:3c:39:b6:6f:a0:d0:a6:6e:0a:de:2d:bd:08:8c:02:f0:af:
         fc:7f:86:b6:7f:88:20:59:0d:b6:07:36:3b:bb:04:da:08:2d:
         a0:ae:56:28:b7:a3:48:78:fe:51:10:df:ff:78:aa:56:8e:92:
         db:5d:cb:2b:5a:38:9d:5b:c6:65:c1:c7:89:0e:d6:a0:ce:a7:
         1e:b9:2c:0e:6a:2f:3d:7f:2d:89:55:1e:01:da:6a:03:28:a1:
         d2:90:82:ce:e5:e0:2b:88:d9:33:4d:be:b8:91:5e:d0:f6:aa:
         c1:8a:c1:67:60:64:ab:05:60:85:38:15:42:32:69:83:84:ed:
         e5:25:27:c7:65:41:2e:d8:39:23:e9:a4:4e:d3:7c:9b:23:94:
         f0:f8:62:bc:a3:6f:17:6b:d1:41:89:75:00:dd:95:b7:96:4c:
         cc:3f:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----