Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10c1a5e2-4a4f-4cef-9a8e-033b8662ecbf/024c01486685c446405323f665aee6d69a908cd6.roa
File:                     024c01486685c446405323f665aee6d69a908cd6.roa (raw, json)
Hash identifier:          a+1WbO3593IY/IIS5gi53RsNvNaKkDlCx2GdU4b2Zbs=
Subject key identifier:   98:A0:FF:D1:0E:C3:77:A1:76:F6:A7:FE:59:15:D1:97:F2:35:A1:25
Certificate issuer:       /CN=03c97d9cfab8a5f23ecb7034405d3d11e5b5203a
Certificate serial:       13A6FE
Authority key identifier: 77:6F:DB:A2:A8:11:8A:B7:1F:2E:B6:C2:E8:2A:16:D6:94:85:72:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03c97d9cfab8a5f23ecb7034405d3d11e5b5203a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10c1a5e2-4a4f-4cef-9a8e-033b8662ecbf/024c01486685c446405323f665aee6d69a908cd6.roa
Signing time:             Tue 27 Jun 2023 22:33:58 +0000
ROA not before:           Mon 26 Jun 2023 22:33:58 +0000
ROA not after:            Fri 27 Jun 2025 22:33:58 +0000
asID:                     271904
IP address blocks:        179.63.108.0/22 maxlen: 24
                          2803:6210::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287934 (0x13a6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c97d9cfab8a5f23ecb7034405d3d11e5b5203a
        Validity
            Not Before: Jun 26 22:33:58 2023 GMT
            Not After : Jun 27 22:33:58 2025 GMT
        Subject: CN=024c01486685c446405323f665aee6d69a908cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cf:fb:d4:19:ec:2b:47:f1:fb:16:69:d0:88:
                    d4:48:61:d9:d0:97:ec:47:a5:d5:5f:c9:8d:c4:54:
                    e9:09:1b:10:09:79:bc:56:ba:cc:91:d3:d5:31:0f:
                    bf:2e:d5:09:3c:2c:6b:a2:75:25:3f:cf:2d:c8:37:
                    b5:67:db:1f:e8:2e:20:24:48:fa:7a:60:1d:e5:40:
                    76:55:68:f8:25:7c:b0:5a:3a:80:8b:e3:85:ae:a7:
                    3c:ba:a5:46:c1:97:07:8e:53:cd:a3:63:5f:40:08:
                    ca:81:37:23:d1:f5:e3:28:eb:a8:6b:c9:d7:a0:6a:
                    eb:8f:82:37:a4:eb:f0:46:bf:7f:32:8f:ed:35:1a:
                    98:ca:4b:03:ee:4b:62:4d:76:b1:1b:30:15:8c:15:
                    14:b5:39:d7:3f:73:c5:f3:84:5b:45:bb:62:a2:23:
                    c1:05:6e:b7:54:73:92:8f:80:38:bc:3e:d7:cd:41:
                    58:d8:2e:70:24:1a:ae:78:f1:ad:72:18:fb:c4:e2:
                    d7:2b:15:35:a0:88:17:c9:86:f2:84:a2:a4:64:68:
                    77:a3:90:36:d2:85:60:dc:b4:12:24:14:7e:21:b8:
                    3f:94:aa:89:e3:d9:77:6b:af:41:2e:75:16:ba:c5:
                    00:bf:48:de:41:86:c9:4d:aa:14:29:7e:df:02:7f:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A0:FF:D1:0E:C3:77:A1:76:F6:A7:FE:59:15:D1:97:F2:35:A1:25
            X509v3 Authority Key Identifier:
                keyid:77:6F:DB:A2:A8:11:8A:B7:1F:2E:B6:C2:E8:2A:16:D6:94:85:72:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03c97d9cfab8a5f23ecb7034405d3d11e5b5203a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10c1a5e2-4a4f-4cef-9a8e-033b8662ecbf/024c01486685c446405323f665aee6d69a908cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10c1a5e2-4a4f-4cef-9a8e-033b8662ecbf/03c97d9cfab8a5f23ecb7034405d3d11e5b5203a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.108.0/22
                IPv6:
                  2803:6210::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:e5:dd:1e:cd:a8:ae:ea:20:f3:fe:34:25:91:5a:a8:84:13:
         ef:4d:a0:39:90:02:ff:0b:c9:20:c6:34:d9:ed:5a:a8:b8:7c:
         3e:51:2f:b0:70:c1:96:f0:ab:2b:ce:54:3c:7e:8e:b5:18:5a:
         67:e1:4b:1a:d2:ce:10:f5:b5:19:44:f4:80:71:f5:bb:d5:c2:
         92:83:7c:82:91:7c:f9:94:67:27:8d:ef:9a:8c:98:30:b8:23:
         8d:d6:1f:3f:05:51:bd:18:95:2e:44:8d:95:a1:de:26:bb:de:
         78:2c:c3:42:60:e3:d4:46:ca:7e:97:b3:89:e5:f5:ab:54:b2:
         89:da:31:f3:4a:07:d6:3c:92:86:1a:31:ac:91:90:b3:6f:a5:
         21:d8:29:cd:8a:4f:c8:e7:e6:59:a9:98:27:12:8a:6a:11:a1:
         21:44:87:1e:71:0b:2c:1e:5c:a8:b8:ca:d5:65:44:79:65:80:
         82:8f:6f:2b:98:f9:0c:7b:da:48:5d:68:2d:9c:56:9d:b6:67:
         d1:ba:f5:6c:62:0b:53:1b:b4:43:4c:5a:2a:b5:64:97:92:08:
         66:0b:43:d1:7f:69:6b:aa:1f:5c:0c:45:98:f1:6c:48:99:72:
         ed:ba:a9:a9:86:57:dd:c0:e1:4f:09:28:3b:dc:d1:3b:d9:55:
         e1:82:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----