Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19804360-d43d-43a2-9c29-fb0dfe93213f/71439d713038f85386a74a44488d4b820738fd96.roa
File:                     71439d713038f85386a74a44488d4b820738fd96.roa (raw, json)
Hash identifier:          boELqUsQX1dnpwOUkEiY2iyXGZMbYydB7XtmwN6UNJk=
Subject key identifier:   1C:D8:19:A1:E3:76:9E:18:11:D4:B9:78:B2:C3:39:DF:69:59:86:F2
Certificate issuer:       /CN=0fc0a5350730d95599a12c52d83db204dd0649b1
Certificate serial:       204BFC
Authority key identifier: 62:AC:59:8F:C5:0E:F9:E6:D5:14:5D:0C:EA:78:C0:4A:91:78:2B:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fc0a5350730d95599a12c52d83db204dd0649b1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/19804360-d43d-43a2-9c29-fb0dfe93213f/71439d713038f85386a74a44488d4b820738fd96.roa
Signing time:             Wed 31 May 2023 20:31:31 +0000
ROA not before:           Tue 30 May 2023 20:31:31 +0000
ROA not after:            Sat 31 May 2025 20:31:31 +0000
asID:                     264847
IP address blocks:        168.181.120.0/22 maxlen: 24
                          2803:9d40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116604 (0x204bfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fc0a5350730d95599a12c52d83db204dd0649b1
        Validity
            Not Before: May 30 20:31:31 2023 GMT
            Not After : May 31 20:31:31 2025 GMT
        Subject: CN=71439d713038f85386a74a44488d4b820738fd96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:e6:77:80:67:83:78:24:ef:4f:47:6b:15:
                    df:26:2a:b5:8c:52:ed:d9:65:c0:a3:06:95:f4:9c:
                    5a:11:f0:56:3e:7d:dc:09:19:9e:d4:c9:26:e5:a9:
                    7d:57:ef:e1:78:a1:45:f3:70:8e:db:73:31:2d:0a:
                    0f:f9:11:6e:0f:98:f3:48:95:08:e3:8b:42:e0:80:
                    f3:b0:88:99:ce:a3:8c:f0:52:73:3e:40:8b:4b:c8:
                    d1:b8:dd:7b:b3:04:26:9c:95:6a:6a:d9:b8:50:00:
                    74:b5:e3:14:04:46:da:72:54:1e:2b:7a:fc:79:2e:
                    f0:d8:51:6f:08:81:e2:5f:17:5a:fa:d1:d3:58:16:
                    49:83:fe:0f:2c:c2:bb:30:5f:74:66:46:32:c9:75:
                    ac:f1:dd:30:3d:c4:08:19:1c:4e:82:02:a6:1c:2d:
                    79:b7:78:c0:82:1c:3c:61:a6:18:cd:51:15:b4:be:
                    ff:ac:4d:09:08:e9:75:ae:c1:64:f8:3f:81:24:b9:
                    c0:b4:0b:ee:c5:78:0e:74:ac:9d:37:61:b1:33:ca:
                    6b:81:90:de:af:93:c6:d3:b7:2a:20:d3:79:7f:b3:
                    29:cb:67:df:d9:18:e0:71:38:36:d9:09:7f:13:9a:
                    cd:15:be:c2:71:82:4c:53:f8:70:12:a2:99:57:04:
                    21:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D8:19:A1:E3:76:9E:18:11:D4:B9:78:B2:C3:39:DF:69:59:86:F2
            X509v3 Authority Key Identifier:
                keyid:62:AC:59:8F:C5:0E:F9:E6:D5:14:5D:0C:EA:78:C0:4A:91:78:2B:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fc0a5350730d95599a12c52d83db204dd0649b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19804360-d43d-43a2-9c29-fb0dfe93213f/71439d713038f85386a74a44488d4b820738fd96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/19804360-d43d-43a2-9c29-fb0dfe93213f/0fc0a5350730d95599a12c52d83db204dd0649b1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.120.0/22
                IPv6:
                  2803:9d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:94:c6:28:82:af:15:ba:cb:93:08:d5:b2:1d:01:88:f8:
         52:85:64:39:42:e9:71:11:e8:7a:f0:b0:bd:ed:36:54:ac:23:
         d9:d8:20:f0:23:a0:ff:ce:b9:40:75:72:7e:a7:d9:05:bb:95:
         7c:08:62:92:f3:35:4f:a0:19:88:14:dd:c3:3d:80:16:ab:4d:
         77:29:bb:8e:eb:d4:d7:ab:a6:87:1f:8b:7d:ed:93:4d:4a:de:
         b9:57:7d:64:d7:a1:2d:c4:c1:41:df:1a:8b:b0:ed:7e:b5:59:
         ef:ba:35:e0:9f:f9:35:e3:0e:73:06:89:09:05:c9:1b:fc:21:
         28:4f:2b:2b:a0:d2:30:5d:d8:28:73:9b:e8:17:67:a3:31:3c:
         44:c7:e9:b4:f4:86:c2:a5:a1:15:c4:c7:86:e4:a9:43:21:e1:
         3e:1c:e1:d7:e4:30:84:2d:3b:e7:c3:94:40:f2:1a:c3:f1:bc:
         fc:89:9f:48:38:31:5d:f8:b9:f6:06:ca:19:32:7e:ea:5d:49:
         19:e7:3e:b1:41:b1:39:17:02:54:9e:f1:ef:03:11:5d:3a:5e:
         00:ce:dd:20:00:d0:88:63:9b:d6:e2:fb:0b:dc:52:3e:0f:86:
         86:05:66:2d:54:9e:fa:85:0f:99:24:35:44:12:2a:28:83:6b:
         22:61:42:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----