Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9cc977feb2997a9ae59c40d3f4db71f7b82175e7.roa
File:                     9cc977feb2997a9ae59c40d3f4db71f7b82175e7.roa (raw, json)
Hash identifier:          4klH9zB3JIvICEJiqEGEu7q9qx4RVBit8IRiZAM7bNs=
Subject key identifier:   F6:BA:69:06:46:D9:F5:5F:F1:0F:8F:AE:11:81:67:3C:C6:02:6C:99
Certificate issuer:       /CN=9d0eefbeed1a04984bf835792198e2b00880f6fa
Certificate serial:       17F348
Authority key identifier: 1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9cc977feb2997a9ae59c40d3f4db71f7b82175e7.roa
Signing time:             Tue 12 Sep 2023 15:08:10 +0000
ROA not before:           Mon 11 Sep 2023 15:08:10 +0000
ROA not after:            Fri 12 Sep 2025 15:08:10 +0000
asID:                     270072
IP address blocks:        131.0.132.0/22 maxlen: 24
                          2803:13e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569608 (0x17f348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d0eefbeed1a04984bf835792198e2b00880f6fa
        Validity
            Not Before: Sep 11 15:08:10 2023 GMT
            Not After : Sep 12 15:08:10 2025 GMT
        Subject: CN=9cc977feb2997a9ae59c40d3f4db71f7b82175e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:cc:b4:34:f6:a3:0a:e0:77:99:35:ec:00:
                    80:7a:d3:ec:ee:b9:72:bf:5e:6f:de:f8:0a:26:0d:
                    18:5e:e8:1e:18:f8:bf:c0:46:7f:40:75:c5:46:b8:
                    5d:6f:cd:1f:7b:c6:32:b8:48:8e:58:14:57:b1:1c:
                    ac:4c:a2:96:1f:ee:8d:94:11:8e:e6:de:7a:c6:24:
                    08:1f:13:e3:da:54:a3:bf:a7:2f:ac:38:c8:a8:3b:
                    b2:76:9b:9a:2d:1a:3c:54:57:a7:ff:29:a8:12:ba:
                    8b:ec:c9:5d:1f:c2:d0:d8:5e:0e:32:cd:03:7f:72:
                    59:d2:aa:60:90:60:25:0b:eb:bf:21:9b:32:54:2e:
                    0c:18:5e:7f:99:39:08:27:f4:65:69:2a:4f:b7:03:
                    18:62:fa:26:58:42:c7:e5:fc:b7:36:f1:34:c9:1d:
                    52:2f:06:d9:1d:48:4a:19:27:06:60:42:10:7d:3b:
                    df:d2:3d:4b:9c:fc:77:8b:e6:1a:8a:50:f2:f4:63:
                    33:ad:68:bb:a9:81:7a:db:a0:6d:c2:07:93:9c:90:
                    a2:f6:31:93:da:c2:0f:e5:86:f6:e2:09:11:dd:71:
                    58:3b:d8:4a:ff:f0:49:c6:77:a4:dd:5b:cc:49:b7:
                    41:13:d5:46:74:0a:ad:20:07:d4:e7:cc:b9:7e:55:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:69:06:46:D9:F5:5F:F1:0F:8F:AE:11:81:67:3C:C6:02:6C:99
            X509v3 Authority Key Identifier:
                keyid:1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9cc977feb2997a9ae59c40d3f4db71f7b82175e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.132.0/22
                IPv6:
                  2803:13e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:c4:80:52:d4:82:d4:ff:c1:f9:db:21:90:e6:57:f9:0d:94:
         90:60:ba:2b:3a:5a:42:2e:f0:4e:8c:5e:b5:fc:c5:77:73:7e:
         c3:c5:1a:9c:fe:64:81:4e:be:58:f4:79:eb:5c:8c:ae:bb:bf:
         ac:c0:4b:1a:9d:53:39:ae:c8:d5:cc:67:d1:f1:4f:b3:ff:d4:
         4a:55:0f:6e:4a:40:91:64:0d:d1:4c:2b:f6:7e:86:bb:c2:f8:
         f3:83:20:38:0d:53:b0:0e:b4:a3:dd:ad:0d:27:20:7f:87:db:
         4d:17:a6:ea:ce:af:39:49:e9:e5:39:2d:01:ed:71:39:b5:86:
         34:86:37:cc:1e:f5:ac:8f:23:28:b1:1e:6d:a7:8c:be:d4:5b:
         27:e9:e4:86:95:38:9d:5b:17:17:c1:26:20:9c:1e:5c:f9:58:
         37:65:f8:f3:d2:43:81:0e:cc:f5:55:78:27:9b:c1:23:94:b3:
         08:0b:62:36:3a:73:4e:64:c0:f1:e1:d5:7f:5b:1b:d0:64:a7:
         29:04:f5:7b:c5:a6:93:37:ad:7b:98:57:98:51:9d:d6:cb:01:
         87:e1:dc:1f:b7:69:3d:e6:a5:27:f3:d2:d9:34:42:6e:50:c7:
         09:8b:2b:f3:7b:1e:bb:50:4e:4e:de:75:c3:67:73:07:cd:2c:
         e7:eb:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----