Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/232d7b389cbe500aa04f07c2b5eb3a83546fe54e.roa
File:                     232d7b389cbe500aa04f07c2b5eb3a83546fe54e.roa (raw, json)
Hash identifier:          YsNSQN2DuvYvJ6XDdqndpgt+2IWiH8Bt8KakB8yYfhk=
Subject key identifier:   CC:DA:80:05:1C:1E:B1:6B:EB:7D:3C:86:A1:9F:2D:96:BF:33:C2:A6
Certificate issuer:       /CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
Certificate serial:       227C04
Authority key identifier: AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/232d7b389cbe500aa04f07c2b5eb3a83546fe54e.roa
Signing time:             Mon 31 Jul 2023 20:58:31 +0000
ROA not before:           Sun 30 Jul 2023 20:58:30 +0000
ROA not after:            Thu 31 Jul 2025 20:58:30 +0000
asID:                     269805
IP address blocks:        179.43.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259972 (0x227c04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
        Validity
            Not Before: Jul 30 20:58:30 2023 GMT
            Not After : Jul 31 20:58:30 2025 GMT
        Subject: CN=232d7b389cbe500aa04f07c2b5eb3a83546fe54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b2:0d:51:1e:41:2e:2b:d4:31:17:38:e1:d6:
                    69:ec:44:6b:df:df:9b:eb:a9:ef:e4:74:2d:04:6e:
                    5d:37:07:df:b0:88:3c:38:f9:86:75:5a:38:fb:65:
                    d4:fc:ac:fb:01:1c:bd:c6:d0:ec:bf:38:f6:66:08:
                    74:2c:2c:78:d6:55:97:36:c9:89:b5:71:df:74:9b:
                    21:89:8d:a4:d3:8d:64:d5:05:d8:52:5c:fc:fe:63:
                    f6:84:7c:be:98:40:5e:9a:bb:5e:0b:44:33:1f:f9:
                    9e:d5:21:41:0c:8d:1c:31:ec:84:3e:e8:56:40:49:
                    84:da:11:c7:c0:18:bf:db:87:94:50:75:e2:95:72:
                    15:b8:28:8c:7f:33:af:18:9d:b6:fc:56:a7:e3:39:
                    3f:53:d4:61:86:a2:06:d4:93:91:93:2e:04:10:71:
                    1e:eb:ee:4e:0c:e4:31:b7:f1:c4:e5:58:27:e8:f7:
                    73:d9:99:14:04:74:c3:d1:f8:3d:06:36:71:13:20:
                    ca:bd:d1:ba:54:ec:2e:00:29:74:1a:d2:02:87:c6:
                    8f:4e:d8:7a:90:8a:3d:45:5b:54:6a:aa:57:ae:6a:
                    79:ad:de:af:53:3d:b1:3b:7a:9a:1e:eb:e6:13:0a:
                    bc:10:2c:6c:8f:7f:6a:d1:53:fa:d3:2e:c2:fb:7b:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DA:80:05:1C:1E:B1:6B:EB:7D:3C:86:A1:9F:2D:96:BF:33:C2:A6
            X509v3 Authority Key Identifier:
                keyid:AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/232d7b389cbe500aa04f07c2b5eb3a83546fe54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:61:5b:82:da:bf:18:07:97:a9:9b:9a:b1:0a:c4:80:a2:af:
         b8:75:41:53:ed:68:40:38:7d:47:9c:ad:de:75:3c:c9:a0:f0:
         ea:ff:76:bf:1e:08:3a:b0:88:34:0d:ae:27:43:40:7f:fe:f6:
         24:bc:fe:dd:bd:ff:1c:25:55:de:f5:0b:86:57:1f:ba:a9:ed:
         f8:87:42:2f:db:ce:92:96:0d:a2:fb:b8:35:bd:92:51:95:cd:
         1b:0c:db:5f:52:86:97:a6:b9:cd:07:46:14:a2:12:e2:26:8d:
         0b:10:20:95:d0:2a:e0:4c:ba:35:f9:af:b4:d2:c4:e8:b7:39:
         5a:15:51:b7:61:c9:27:d8:bf:3c:ea:19:e8:ae:33:b2:d4:6d:
         e9:73:79:d9:e0:61:7e:4c:53:eb:bb:70:bd:d7:43:f3:50:7c:
         95:80:0e:3e:aa:23:91:59:65:4b:77:61:a8:38:59:4b:47:f9:
         b8:a9:78:ab:bb:fc:23:b1:75:e2:fa:72:c2:cd:2e:d1:a0:08:
         84:6a:86:ba:a3:0c:94:29:0c:01:d8:94:57:71:47:ad:c6:9d:
         7a:9e:a1:3e:18:3a:76:2b:ce:21:c2:d4:1a:f3:ff:74:79:c1:
         ca:31:27:ef:61:b3:01:cc:71:1c:de:85:3c:89:47:b8:14:0c:
         d9:ca:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----