Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/b24b5e0b6833288bbe3c76d22dc6b924921d9a77.roa
File:                     b24b5e0b6833288bbe3c76d22dc6b924921d9a77.roa (raw, json)
Hash identifier:          dsRHUGOiY5MwmzplXmmL9k1Z/twpahcPMXWVSOz/u5U=
Subject key identifier:   81:24:C4:14:C8:AA:46:A2:D7:46:C3:43:BD:13:53:E1:01:D4:D7:03
Certificate issuer:       /CN=150f32775997390a892546bcb71f77c91bf1ccc6
Certificate serial:       18B2F2
Authority key identifier: BB:95:00:1D:BD:4C:43:1D:D3:24:CB:3C:3D:EB:E1:A6:42:E1:F5:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/150f32775997390a892546bcb71f77c91bf1ccc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/b24b5e0b6833288bbe3c76d22dc6b924921d9a77.roa
Signing time:             Thu 21 Sep 2023 08:30:00 +0000
ROA not before:           Wed 20 Sep 2023 08:30:00 +0000
ROA not after:            Fri 19 Sep 2025 08:30:00 +0000
asID:                     269968
IP address blocks:        177.37.40.0/22 maxlen: 22
                          2803:d6e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618674 (0x18b2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150f32775997390a892546bcb71f77c91bf1ccc6
        Validity
            Not Before: Sep 20 08:30:00 2023 GMT
            Not After : Sep 19 08:30:00 2025 GMT
        Subject: CN=b24b5e0b6833288bbe3c76d22dc6b924921d9a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:37:ab:a5:1b:2a:c7:17:0d:7a:16:01:b7:a6:
                    48:30:ad:46:6a:0a:60:d5:04:d8:86:a5:eb:bf:28:
                    22:4d:4f:df:fe:43:15:ec:d7:cc:2e:ab:4c:94:ae:
                    77:14:e4:d6:cb:6d:9a:c5:2f:83:28:73:08:b9:11:
                    0f:f1:39:f1:78:e1:b6:f0:47:ff:35:16:ce:92:8c:
                    db:b9:07:b5:88:be:e2:74:27:f0:6e:64:59:da:11:
                    57:a7:43:93:b6:d4:1c:05:07:f7:c0:ec:e7:5d:47:
                    86:91:5e:64:2b:39:0a:f3:63:b2:c1:1e:19:74:6f:
                    04:c4:4f:33:ba:18:05:e9:28:88:81:d8:b3:3e:0d:
                    b3:c6:cf:5b:00:5c:8b:4a:04:80:d6:ed:70:a7:6b:
                    cb:be:ea:a1:13:7d:57:1f:10:56:c4:71:a9:a0:cb:
                    52:7e:a6:11:81:a1:60:a2:7f:07:b2:ae:e2:dc:1c:
                    72:16:56:59:24:d9:a8:66:9e:72:b6:9c:ee:0f:95:
                    11:4e:b5:b6:e3:d7:0d:53:e8:e4:a2:99:d8:46:b3:
                    d2:ef:94:a7:9d:9a:f7:b6:b6:e4:e0:80:1e:bb:15:
                    eb:3b:2e:a4:b9:d7:4a:83:4a:0f:6f:10:e6:67:2a:
                    f9:4f:f1:3d:cf:e4:11:38:f6:41:c9:b5:b4:46:73:
                    55:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:24:C4:14:C8:AA:46:A2:D7:46:C3:43:BD:13:53:E1:01:D4:D7:03
            X509v3 Authority Key Identifier:
                keyid:BB:95:00:1D:BD:4C:43:1D:D3:24:CB:3C:3D:EB:E1:A6:42:E1:F5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/150f32775997390a892546bcb71f77c91bf1ccc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/b24b5e0b6833288bbe3c76d22dc6b924921d9a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/150f32775997390a892546bcb71f77c91bf1ccc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.40.0/22
                IPv6:
                  2803:d6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:dc:ba:a3:6e:1d:5f:4f:0e:b2:a5:6e:0d:b1:3a:cb:8f:ef:
         66:d2:6e:dd:31:46:c1:2a:ab:f9:72:b5:fe:56:15:c5:60:9a:
         49:48:75:c7:f5:08:98:74:2b:65:70:ee:58:01:dd:15:0e:a9:
         51:71:25:2d:22:98:c7:01:08:4d:ff:c1:66:81:d8:aa:bf:78:
         3f:66:97:34:15:71:c9:0f:5b:09:ea:98:e2:9f:82:19:50:ab:
         dc:ea:25:f9:01:66:c6:58:7f:87:25:7f:46:05:34:32:5e:a1:
         94:db:f7:a2:79:f2:46:06:0f:80:fd:95:52:95:9b:e9:ec:57:
         ac:81:a7:9e:ad:7a:47:e8:f0:a2:43:c6:86:91:2c:f9:39:8b:
         5f:dc:04:56:32:03:bf:08:88:7e:2f:5e:f0:b2:da:c7:ab:4b:
         97:d6:13:d5:90:c1:24:b5:9c:52:cb:e1:77:c4:3a:c2:11:ca:
         82:82:79:b5:36:d7:75:f7:71:c0:dc:d9:4e:05:0d:50:79:ff:
         ad:db:e7:c4:b0:27:3d:c0:d6:57:4e:94:8e:00:d7:bd:81:51:
         30:db:41:0f:36:1d:99:40:bd:8b:96:38:53:3b:22:22:12:b0:
         c8:4a:f4:95:f3:6f:4d:26:ad:62:dd:f9:cd:6c:6a:91:64:32:
         e3:9a:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----