Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/158ddf4f-5f78-42ef-9724-8252d8a96768/6ca23b9856e54a2958c4438c5679ac1fff0ce192.roa
File:                     6ca23b9856e54a2958c4438c5679ac1fff0ce192.roa (raw, json)
Hash identifier:          efxXveZ9GtHydqtC7KV2mi9TAc68U2vQ5hUMkRw/WYo=
Subject key identifier:   0E:15:EB:26:8A:4D:98:C7:FB:98:5F:7C:78:47:C6:7A:6B:3D:6E:20
Certificate issuer:       /CN=e69266f43136d01085b032c20114ec9b7a27a57b
Certificate serial:       0669
Authority key identifier: FD:80:98:E3:65:40:16:31:11:F8:4F:8C:06:04:BB:04:F5:0A:CE:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e69266f43136d01085b032c20114ec9b7a27a57b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/158ddf4f-5f78-42ef-9724-8252d8a96768/6ca23b9856e54a2958c4438c5679ac1fff0ce192.roa
Signing time:             Tue 11 Apr 2023 16:37:39 +0000
ROA not before:           Mon 10 Apr 2023 16:36:18 +0000
ROA not after:            Fri 11 Apr 2025 16:36:18 +0000
asID:                     36511
IP address blocks:        170.233.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641 (0x669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69266f43136d01085b032c20114ec9b7a27a57b
        Validity
            Not Before: Apr 10 16:36:18 2023 GMT
            Not After : Apr 11 16:36:18 2025 GMT
        Subject: CN=6ca23b9856e54a2958c4438c5679ac1fff0ce192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:1a:5a:7b:ab:50:23:79:ad:69:e5:e8:4d:
                    36:78:e2:6e:9d:a1:37:d8:4d:6d:94:13:86:be:12:
                    3a:22:b6:ad:69:f7:d6:b9:37:85:3d:1a:2a:3b:40:
                    79:f2:c8:79:3f:96:e9:a9:75:98:13:2d:94:9d:61:
                    87:6b:47:7d:27:b0:44:26:6c:73:5e:41:38:ce:00:
                    33:d4:35:d4:71:f5:4c:be:27:20:69:ca:22:0f:e8:
                    88:51:42:b9:68:4d:e5:51:22:f2:c7:92:ee:65:d6:
                    d7:3d:97:f4:77:99:8b:7d:8a:df:3d:7b:af:d6:08:
                    93:19:95:87:85:d2:81:39:42:c1:fa:e4:9e:0e:eb:
                    25:45:89:ef:dd:9a:54:be:1e:8d:31:2a:62:77:30:
                    be:b5:15:ea:8b:e5:23:50:25:a4:3e:a5:75:c1:a2:
                    d8:a3:8f:e6:0c:2f:cf:3a:50:bc:62:80:85:93:b4:
                    f2:58:19:87:67:a4:4b:99:af:23:5c:f9:31:69:93:
                    e7:0d:80:74:0e:db:1a:e9:1b:a2:e6:81:02:7d:eb:
                    31:b8:7e:2c:26:10:e8:49:a8:d6:14:78:92:0a:bb:
                    9e:cd:fe:de:df:fa:18:fa:24:d6:62:93:c9:82:33:
                    47:62:b0:a3:dc:8b:7c:c4:e0:e4:28:77:ba:4c:92:
                    6b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:15:EB:26:8A:4D:98:C7:FB:98:5F:7C:78:47:C6:7A:6B:3D:6E:20
            X509v3 Authority Key Identifier:
                keyid:FD:80:98:E3:65:40:16:31:11:F8:4F:8C:06:04:BB:04:F5:0A:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e69266f43136d01085b032c20114ec9b7a27a57b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/158ddf4f-5f78-42ef-9724-8252d8a96768/6ca23b9856e54a2958c4438c5679ac1fff0ce192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/158ddf4f-5f78-42ef-9724-8252d8a96768/e69266f43136d01085b032c20114ec9b7a27a57b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:12:63:06:87:f1:4d:2e:6d:6d:49:3a:9f:24:6f:3f:20:e4:
         83:6b:32:64:9e:46:79:5d:9e:ca:97:6d:02:ea:09:74:d4:6d:
         3c:62:e5:e9:2f:79:79:23:86:cd:26:54:67:73:cb:8a:f7:d6:
         80:8d:e3:dc:22:11:6f:66:7c:35:36:ab:50:7a:51:a2:58:36:
         5b:8d:99:1c:da:27:f3:68:bd:98:fc:66:ee:2e:42:b7:d8:bf:
         81:aa:7e:cd:9e:66:c5:72:83:f8:f6:78:1f:55:67:86:f8:cc:
         c3:ea:9f:17:9a:d3:57:eb:0c:5f:4d:69:d7:ee:53:b3:71:93:
         66:8c:5e:34:22:d9:1f:02:67:d7:4e:68:b5:e2:3b:44:04:fb:
         dd:6c:5e:63:b4:73:bb:d0:7e:31:f7:08:61:ab:5f:ce:99:77:
         0a:39:b0:7b:4d:e8:95:56:96:1f:fc:5c:7e:00:54:f1:d9:47:
         25:f7:fd:d3:43:48:0c:48:38:54:be:33:db:db:5c:63:a0:b0:
         26:e5:db:75:13:c0:4e:97:81:34:bc:07:59:ad:9d:72:5c:ae:
         77:ae:8a:c6:f3:f7:47:a6:a7:f3:6f:d2:87:2d:09:9e:8d:c6:
         cc:c2:1b:07:8f:cf:f6:0d:29:29:88:00:b6:79:1d:2c:1b:a1:
         a7:dd:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----