Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/04dfa8441cdef1ccad85c36193a6e946ba65bc00.roa
File:                     04dfa8441cdef1ccad85c36193a6e946ba65bc00.roa (raw, json)
Hash identifier:          w9Q/VHiujeGBvvn2J/hguM8y/9MKnQlqBliNJAY8jcw=
Subject key identifier:   17:98:E4:07:A6:7A:9F:5C:EE:CC:C9:2D:11:77:59:A7:C9:82:8B:68
Certificate issuer:       /CN=150f32775997390a892546bcb71f77c91bf1ccc6
Certificate serial:       1C7D5E
Authority key identifier: BB:95:00:1D:BD:4C:43:1D:D3:24:CB:3C:3D:EB:E1:A6:42:E1:F5:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/150f32775997390a892546bcb71f77c91bf1ccc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/04dfa8441cdef1ccad85c36193a6e946ba65bc00.roa
Signing time:             Tue 20 Feb 2024 14:37:56 +0000
ROA not before:           Tue 20 Feb 2024 14:37:56 +0000
ROA not after:            Fri 20 Feb 2026 14:37:56 +0000
asID:                     269968
IP address blocks:        177.37.40.0/22 maxlen: 24
                          2803:d6e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867102 (0x1c7d5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150f32775997390a892546bcb71f77c91bf1ccc6
        Validity
            Not Before: Feb 20 14:37:56 2024 GMT
            Not After : Feb 20 14:37:56 2026 GMT
        Subject: CN=04dfa8441cdef1ccad85c36193a6e946ba65bc00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:49:36:aa:a3:43:49:52:87:9a:67:05:af:
                    0d:c0:e4:d8:b7:b6:ce:1d:f5:b4:98:a0:bf:75:a1:
                    a8:df:6f:bc:96:50:5f:75:fa:5a:19:e1:4d:bf:76:
                    0c:8a:cf:1e:92:f7:6b:3a:38:61:1f:99:10:73:83:
                    3b:f2:b2:b7:74:58:ba:68:14:d4:6a:b3:10:6d:09:
                    45:31:01:21:71:46:a4:b8:7a:ae:7e:3a:0f:75:5a:
                    70:31:f5:8c:8e:ff:25:f3:4a:39:d5:85:21:87:bf:
                    ad:e1:94:b2:6b:69:93:0b:77:8d:24:2f:d8:6f:87:
                    b3:a2:99:f7:f3:fc:c4:a9:02:a2:40:dc:aa:fc:84:
                    4f:dd:37:1f:d3:1e:c2:1f:99:e8:93:51:0c:6c:81:
                    be:c0:9c:5a:ce:9b:52:e4:1c:95:c4:24:28:91:97:
                    9b:30:06:ad:9c:d6:eb:2f:e5:55:24:68:6c:9d:40:
                    16:1b:e3:fa:e1:4f:ee:73:3e:23:fa:98:d4:5d:d0:
                    ca:24:e0:3e:06:1e:d9:c6:96:18:0b:b8:f0:06:92:
                    a1:e9:19:c1:33:cf:84:17:ab:7d:3f:1c:8e:49:eb:
                    16:43:f1:d2:01:8b:ae:21:03:a1:77:db:f0:fa:44:
                    49:49:48:95:89:5a:38:96:6d:be:38:5b:ff:f8:b0:
                    8d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:98:E4:07:A6:7A:9F:5C:EE:CC:C9:2D:11:77:59:A7:C9:82:8B:68
            X509v3 Authority Key Identifier:
                keyid:BB:95:00:1D:BD:4C:43:1D:D3:24:CB:3C:3D:EB:E1:A6:42:E1:F5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/150f32775997390a892546bcb71f77c91bf1ccc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/04dfa8441cdef1ccad85c36193a6e946ba65bc00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/150f32775997390a892546bcb71f77c91bf1ccc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.40.0/22
                IPv6:
                  2803:d6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:b9:fb:ee:fe:e9:62:66:8d:91:c1:69:cc:88:17:89:76:8e:
         02:33:31:94:ea:aa:dc:11:7f:9d:ab:3b:f8:17:9f:71:61:03:
         06:61:ba:16:f1:a1:07:26:12:5d:f1:f7:25:70:8f:43:81:c7:
         52:f8:ea:1d:58:f4:d0:86:a4:3a:69:33:50:03:ff:0f:d1:17:
         7c:df:52:a2:52:7e:66:07:d8:3f:37:94:21:46:49:ff:c4:62:
         b5:8d:44:01:cd:df:39:10:67:b5:f5:59:45:00:53:83:9e:08:
         85:3c:a3:80:31:e1:52:e7:50:f4:ac:0c:a1:6e:0b:95:1a:78:
         2d:7d:68:55:2d:f2:80:46:bf:46:bd:fb:45:16:01:ac:ae:8a:
         11:d6:d0:f5:42:25:dd:3c:0f:1a:66:15:7e:9f:31:c9:c1:ed:
         51:a3:6d:68:10:34:11:54:a8:df:84:b9:88:e2:40:64:0c:e6:
         24:c1:cc:69:17:30:4e:5b:45:8f:3d:f5:f1:4e:5e:18:2f:65:
         78:66:f8:d7:93:f1:83:ee:65:a3:3b:a0:4c:7d:3e:8c:0a:c3:
         1e:32:40:57:97:3e:02:67:fd:18:bb:6a:d0:a5:8b:45:c7:03:
         1a:c6:c2:0e:8a:ba:58:5d:23:22:76:98:00:56:9d:98:6d:3e:
         a0:51:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----