Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/12b9a2b97a21985dea9ee5ca11308eacccb565ca.roa
File:                     12b9a2b97a21985dea9ee5ca11308eacccb565ca.roa (raw, json)
Hash identifier:          iFgOKbF2+YcekdNwd1jcdTGfwmoKK350c6uVAS6Lh1Y=
Subject key identifier:   E2:5F:95:96:C5:AB:A1:C6:C0:15:AB:A7:C3:F0:E9:A6:02:06:A1:5D
Certificate issuer:       /CN=cfd77889f712db89177f6478b03af00c3bad37fa
Certificate serial:       1BF9E6
Authority key identifier: 3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/12b9a2b97a21985dea9ee5ca11308eacccb565ca.roa
Signing time:             Mon 17 Jul 2023 21:07:58 +0000
ROA not before:           Sun 16 Jul 2023 21:07:57 +0000
ROA not after:            Thu 17 Jul 2025 21:07:57 +0000
asID:                     269965
IP address blocks:        24.152.48.0/22 maxlen: 24
                          2803:56e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833446 (0x1bf9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd77889f712db89177f6478b03af00c3bad37fa
        Validity
            Not Before: Jul 16 21:07:57 2023 GMT
            Not After : Jul 17 21:07:57 2025 GMT
        Subject: CN=12b9a2b97a21985dea9ee5ca11308eacccb565ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:42:28:dc:70:43:01:6c:29:fb:b2:30:c7:
                    7b:94:d3:e5:2f:53:fd:dd:3a:62:21:ec:05:95:54:
                    12:e4:12:e6:6e:f2:f1:1a:63:e9:54:fe:3d:cc:04:
                    99:b7:12:91:49:25:e3:be:f0:69:d4:2c:f6:e6:d3:
                    29:e9:99:51:16:68:27:8c:ea:5b:9b:1d:27:fb:6c:
                    78:16:b6:6e:52:2e:ac:09:12:a4:06:9e:c1:06:b8:
                    c2:75:64:d9:24:16:82:c7:04:dc:58:27:ce:1e:4d:
                    f6:10:f8:20:23:a5:e5:5e:a7:e4:bd:fe:a9:cf:8f:
                    bf:4a:be:cc:82:95:40:dc:34:40:ad:e5:8e:d1:8e:
                    61:86:d9:4d:1f:2c:8f:98:10:2d:69:af:ea:25:78:
                    ca:01:f7:78:62:57:db:ee:ef:9a:72:74:42:4b:68:
                    63:1f:e1:52:ec:69:77:e5:4c:c7:8b:1a:b2:ef:55:
                    f2:7d:52:b7:f6:c8:92:ef:5f:eb:b4:65:2f:66:2f:
                    34:1f:00:94:29:17:53:d2:e1:44:65:b3:bd:c0:aa:
                    90:53:ca:c8:49:51:13:0a:d1:a4:2b:9c:04:3c:6c:
                    67:e6:8b:97:82:d4:09:16:d4:3c:70:67:98:ea:26:
                    2f:91:76:19:f6:47:38:09:d2:42:76:24:89:07:fc:
                    f6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5F:95:96:C5:AB:A1:C6:C0:15:AB:A7:C3:F0:E9:A6:02:06:A1:5D
            X509v3 Authority Key Identifier:
                keyid:3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/12b9a2b97a21985dea9ee5ca11308eacccb565ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.48.0/22
                IPv6:
                  2803:56e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:b6:fe:b2:b2:96:b1:10:5b:64:a7:22:d8:c7:94:bb:0d:6a:
         e6:6f:17:e1:25:16:1c:dd:d0:d0:b0:6b:05:50:e6:6e:05:34:
         4c:54:3a:3b:1a:4a:ec:60:9d:b4:17:12:ff:9f:b3:20:33:69:
         19:a6:a4:5e:0e:c7:25:38:2a:cd:55:af:4e:2f:bd:5b:fd:77:
         cc:4d:73:05:f0:26:1b:36:4b:c9:94:52:ef:d0:72:3f:54:9e:
         ce:78:53:fe:33:1c:e9:9c:e5:df:eb:41:66:33:73:a5:d2:98:
         13:c0:57:16:48:0e:20:41:1f:23:b2:01:60:85:7b:88:57:c5:
         2d:2d:08:3a:6f:62:fb:f8:41:b7:6c:7f:26:8e:c0:40:6a:dd:
         64:7e:3b:7f:a2:c7:d7:23:47:55:92:0c:9b:1d:d6:cd:6b:fa:
         5b:97:40:b7:fb:27:e4:17:d6:c7:9e:04:2c:e2:a1:a7:61:ce:
         62:7d:7d:3a:d8:59:86:d5:47:64:0b:9d:07:ac:12:50:9c:2d:
         ff:ca:04:ad:58:0f:9c:ba:9a:93:c2:5b:7e:7a:92:63:f7:28:
         16:8c:3e:8b:e5:31:a0:d8:be:b9:1d:b6:7f:87:43:29:08:b5:
         95:17:46:a3:11:98:a3:58:25:51:9d:6b:52:b0:0a:6b:6c:05:
         5c:c1:57:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----