Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/f8db6e9450d8e10799a2e7cf5b62af944d8d5bc3.roa
File:                     f8db6e9450d8e10799a2e7cf5b62af944d8d5bc3.roa (raw, json)
Hash identifier:          OG3QZ3f8OXuCZ1wqG+Ei6YcaxnKzoTt9EPgR2e7aHwc=
Subject key identifier:   AA:32:02:9A:E0:19:41:8A:43:36:4D:9B:DD:A1:00:48:99:C9:13:84
Certificate issuer:       /CN=c0336e51f59b3eb4c8fdcd66973da9eaefcef446
Certificate serial:       2134C7
Authority key identifier: 81:A2:5A:1C:E5:AB:54:EE:7D:9E:62:06:92:CC:C7:B9:8A:4F:EA:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/f8db6e9450d8e10799a2e7cf5b62af944d8d5bc3.roa
Signing time:             Mon 29 May 2023 14:52:09 +0000
ROA not before:           Sun 28 May 2023 14:52:09 +0000
ROA not after:            Thu 29 May 2025 14:52:09 +0000
asID:                     265641
IP address blocks:        170.254.172.0/22 maxlen: 32
                          2803:6f40::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2176199 (0x2134c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0336e51f59b3eb4c8fdcd66973da9eaefcef446
        Validity
            Not Before: May 28 14:52:09 2023 GMT
            Not After : May 29 14:52:09 2025 GMT
        Subject: CN=f8db6e9450d8e10799a2e7cf5b62af944d8d5bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:38:31:72:e2:85:a5:43:93:95:23:6c:d0:88:
                    e0:e6:00:9c:3b:ab:73:98:29:85:26:d3:dc:bb:e6:
                    e2:cc:fc:68:ff:46:38:4a:b4:e4:31:0f:07:a4:78:
                    86:2f:ac:0a:0f:e7:5e:7b:fa:63:55:f3:b9:2c:06:
                    31:6e:d8:89:8b:f4:e6:37:20:f5:c3:04:db:e9:40:
                    51:24:ff:37:80:85:4a:97:8a:8f:10:26:8b:39:a0:
                    d5:e2:37:ed:b4:d9:e8:3b:b2:76:c5:ee:3f:03:77:
                    23:68:54:53:46:fd:2c:28:28:69:2c:45:d9:a7:56:
                    3f:3d:78:c9:5a:b0:5a:59:79:39:3e:f7:96:b2:98:
                    5e:d0:aa:c8:43:88:5b:3f:42:2a:97:c3:33:7c:4c:
                    eb:97:4d:e8:11:1e:e6:1c:2b:9c:39:85:cd:ae:e6:
                    50:21:3d:be:97:e1:48:5c:e0:4c:33:22:ca:f8:1f:
                    0a:53:34:ad:11:fb:ae:20:fc:4a:6f:e0:fd:50:8f:
                    f7:17:4b:8f:03:56:87:43:a2:03:19:7e:c0:6f:b3:
                    54:15:2a:fb:5c:da:10:54:5f:16:ff:27:1f:1e:a5:
                    06:11:84:82:dd:27:2a:32:28:15:48:97:40:ec:8a:
                    16:89:12:22:74:9f:da:92:25:32:27:f8:c0:47:99:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:32:02:9A:E0:19:41:8A:43:36:4D:9B:DD:A1:00:48:99:C9:13:84
            X509v3 Authority Key Identifier:
                keyid:81:A2:5A:1C:E5:AB:54:EE:7D:9E:62:06:92:CC:C7:B9:8A:4F:EA:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/f8db6e9450d8e10799a2e7cf5b62af944d8d5bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.172.0/22
                IPv6:
                  2803:6f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:10:48:43:75:78:8c:4f:38:76:88:75:1c:9b:c4:d5:bc:87:
         be:78:e7:f4:55:38:b4:4e:0c:eb:ed:6f:43:1d:7b:43:81:61:
         a4:fd:fe:43:89:19:98:c7:77:03:59:45:77:90:5c:54:ed:bb:
         6f:61:99:bf:89:c9:11:22:68:81:b0:a8:69:6e:cc:b2:aa:b5:
         c0:8a:0d:a2:bf:8d:ac:f5:a1:be:92:7a:40:5c:5f:a8:73:f2:
         d1:7d:0a:45:67:83:2e:b7:b7:b6:5e:78:b7:ef:4a:9b:6e:3f:
         5a:33:7b:0d:63:33:5d:61:2f:64:8c:11:73:79:5b:b3:4d:c9:
         a7:6e:8a:e7:1c:b9:86:cc:10:8f:86:e1:39:dc:cf:98:c7:e6:
         59:08:8f:e2:95:d4:4d:38:f1:eb:5b:0e:c8:94:e3:3d:5a:31:
         95:c9:32:27:5f:05:8f:04:40:13:e0:fb:0e:f0:b1:6c:ae:f3:
         e0:31:72:a1:0f:68:3a:7f:6e:51:4c:3e:4b:dc:af:0a:e6:80:
         dc:c3:8c:38:d9:29:05:0a:47:ae:3a:ab:0e:f3:9e:54:86:49:
         44:82:8c:8f:2d:d1:c1:0e:dc:5f:7c:c5:48:68:0a:4c:cf:cf:
         15:48:7b:f3:a2:4c:cd:20:3f:2b:1a:08:c9:df:de:d8:d2:5f:
         7c:3a:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----