Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/740f6e532e1d16c7b352c004c895d6a9721ce1bb.roa
File:                     740f6e532e1d16c7b352c004c895d6a9721ce1bb.roa (raw, json)
Hash identifier:          Rbrb3kOYjKaklhUqeFvx03XQXjbiBcxYBeuPwI79GQ8=
Subject key identifier:   EF:80:34:3B:30:A9:A4:22:D8:53:43:44:92:26:FD:AB:F3:86:C6:FA
Certificate issuer:       /CN=87d7ecf6694b4fce05cc75b585f16aa645244ba4
Certificate serial:       28091E
Authority key identifier: 1D:58:0A:D9:AD:FE:37:B8:8F:F8:2E:98:88:C8:0D:64:8C:0A:18:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87d7ecf6694b4fce05cc75b585f16aa645244ba4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/740f6e532e1d16c7b352c004c895d6a9721ce1bb.roa
Signing time:             Fri 01 Mar 2024 19:35:31 +0000
ROA not before:           Fri 01 Mar 2024 19:35:30 +0000
ROA not after:            Sun 01 Mar 2026 19:35:30 +0000
asID:                     64100
IP address blocks:        170.84.232.0/22 maxlen: 24
                          2803:db40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2623774 (0x28091e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d7ecf6694b4fce05cc75b585f16aa645244ba4
        Validity
            Not Before: Mar  1 19:35:30 2024 GMT
            Not After : Mar  1 19:35:30 2026 GMT
        Subject: CN=740f6e532e1d16c7b352c004c895d6a9721ce1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:80:04:9e:d4:e0:f1:f7:1e:b4:f7:6b:64:ee:
                    f7:29:a8:4d:89:df:fa:09:dc:1d:6e:2d:cf:2f:cb:
                    84:b9:f8:a0:40:de:69:f7:a4:3f:05:f1:56:97:d4:
                    31:99:92:b6:a4:d0:3c:22:b1:b4:d1:e3:40:de:6e:
                    1c:58:00:00:f9:e4:e6:cf:3b:a9:9f:03:49:5d:84:
                    53:0f:0a:a3:39:14:63:25:bc:4c:89:b6:68:1c:f3:
                    97:97:34:9d:e0:fe:30:65:29:79:48:7d:24:f0:fc:
                    b1:48:26:51:99:b6:19:06:6f:4c:cf:41:86:70:7c:
                    8d:a7:83:3a:6c:95:2e:39:9b:1a:d6:f7:0f:10:9a:
                    b6:32:5a:9c:48:c1:81:57:e1:60:84:9a:40:2d:dc:
                    85:c4:ce:21:7f:6e:80:75:50:1a:aa:b6:5e:5c:e0:
                    97:c4:3a:08:6d:bb:0f:32:5b:57:75:ca:7a:59:5d:
                    d8:05:89:e2:a8:0f:aa:1c:39:94:5d:4a:6c:2b:b2:
                    14:1f:c3:5f:08:a9:57:86:8d:f7:e2:59:30:7e:46:
                    d1:41:77:d4:43:8d:23:8f:58:13:e5:5a:65:87:d4:
                    74:92:bc:7b:af:93:b6:9d:79:c1:83:42:69:2d:5d:
                    85:9a:f7:6f:bc:0f:6f:57:a2:8a:8a:c8:69:85:11:
                    c7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:80:34:3B:30:A9:A4:22:D8:53:43:44:92:26:FD:AB:F3:86:C6:FA
            X509v3 Authority Key Identifier:
                keyid:1D:58:0A:D9:AD:FE:37:B8:8F:F8:2E:98:88:C8:0D:64:8C:0A:18:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87d7ecf6694b4fce05cc75b585f16aa645244ba4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/740f6e532e1d16c7b352c004c895d6a9721ce1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/87d7ecf6694b4fce05cc75b585f16aa645244ba4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.232.0/22
                IPv6:
                  2803:db40::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:45:3f:01:56:90:7b:e3:ae:62:23:ae:ac:9d:fa:c8:f2:ed:
         7d:ef:95:d0:4f:62:5f:1b:21:14:ac:de:17:33:40:ab:fa:8b:
         a7:09:9a:4e:24:c2:4c:2c:7c:e8:4d:0d:17:65:57:6d:9c:b8:
         b9:39:04:9b:8e:be:dd:34:d7:2f:91:3b:5b:47:56:33:bc:23:
         f6:76:86:66:83:b5:b9:d9:c8:45:a3:0d:1a:d4:95:ba:89:10:
         78:a5:61:ec:55:51:8d:69:ee:e9:19:d8:2c:ae:e2:3e:09:4c:
         8e:e4:a5:00:67:c5:3c:ea:4a:d6:0d:5a:09:05:96:bc:66:ff:
         78:1e:32:39:bd:e3:73:45:d1:83:61:60:3b:8d:82:34:32:0b:
         f6:03:ba:b5:c8:ea:51:37:d0:fd:69:e7:98:f6:df:95:83:7c:
         12:b6:71:31:a7:f3:cb:99:49:c0:44:6e:f3:55:d5:c3:18:af:
         da:8e:3f:eb:96:7d:25:0e:61:71:62:dd:07:ab:da:ea:af:8c:
         e7:e8:38:98:bb:5c:00:f9:36:b2:61:b6:6b:85:79:5a:79:9b:
         da:92:c4:f3:75:ec:b3:fb:ce:e1:ea:c1:58:5c:e0:f8:a8:63:
         f1:73:c3:60:2d:2d:c8:98:7a:21:44:30:b0:40:37:98:2d:99:
         d7:a6:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----