Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/9fc846a68642d448333a521842eccd25020cd4c8.roa
File:                     9fc846a68642d448333a521842eccd25020cd4c8.roa (raw, json)
Hash identifier:          NGAIGWUYqsGkhWzt4BNX83fRwQUFwNps0A6CUJrViFU=
Subject key identifier:   01:35:2D:F3:83:67:6A:6D:F9:73:0B:D0:31:FC:AB:5D:23:FB:09:99
Certificate issuer:       /CN=cfd77889f712db89177f6478b03af00c3bad37fa
Certificate serial:       146C0E
Authority key identifier: 3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/9fc846a68642d448333a521842eccd25020cd4c8.roa
Signing time:             Wed 21 Sep 2022 13:56:18 +0000
ROA not before:           Tue 20 Sep 2022 15:53:19 +0000
ROA not after:            Fri 20 Sep 2024 15:53:19 +0000
asID:                     269965
IP address blocks:        24.152.48.0/22 maxlen: 24
                          2803:56e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338382 (0x146c0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd77889f712db89177f6478b03af00c3bad37fa
        Validity
            Not Before: Sep 20 15:53:19 2022 GMT
            Not After : Sep 20 15:53:19 2024 GMT
        Subject: CN=9fc846a68642d448333a521842eccd25020cd4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:81:7b:e8:15:ff:9b:a7:ce:cf:8f:8e:2a:
                    23:42:5c:12:1b:69:3a:60:65:7a:6c:97:1b:84:3d:
                    42:80:87:e1:40:53:23:d8:55:69:83:75:9f:36:14:
                    9d:e9:95:9e:97:d4:7b:0b:3a:be:47:72:bb:15:9f:
                    f9:c5:c6:8b:a7:38:cd:84:f5:de:fd:ae:07:d2:76:
                    3c:85:b8:36:17:10:81:af:bd:aa:21:f9:c9:d5:47:
                    44:67:c6:aa:36:1a:ac:b3:bd:2a:8e:c3:b7:a3:a3:
                    96:a3:f0:fc:27:f8:07:fd:69:7a:7d:88:72:b9:18:
                    13:25:d6:ca:4e:0d:1d:fb:49:e2:b9:10:00:4b:18:
                    c0:2e:d2:f7:b0:3e:63:3a:06:9d:58:12:5f:22:d4:
                    85:f8:d9:b6:eb:fe:60:0d:30:11:9e:5c:3e:f3:d3:
                    05:b0:fd:20:59:14:4b:f3:e9:05:c6:9d:5e:e6:77:
                    c8:d6:f9:a2:e7:01:0a:1e:75:41:ad:6b:53:44:da:
                    65:f8:09:0a:9c:ad:95:55:da:1c:dc:63:04:13:12:
                    30:94:74:ae:b2:39:42:66:e0:8f:1a:4f:01:1d:28:
                    d0:e2:8c:57:58:c8:3a:e5:fd:12:34:56:24:86:37:
                    9b:40:e0:f7:78:19:df:5b:f3:8a:77:49:f1:85:a4:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:35:2D:F3:83:67:6A:6D:F9:73:0B:D0:31:FC:AB:5D:23:FB:09:99
            X509v3 Authority Key Identifier:
                keyid:3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/9fc846a68642d448333a521842eccd25020cd4c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.48.0/22
                IPv6:
                  2803:56e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:74:66:62:7c:57:0b:b8:c4:43:12:1b:de:e2:39:03:93:e5:
         5b:10:4b:d5:11:dd:68:df:9e:5b:d7:a3:0c:ca:23:b0:cd:d2:
         ba:7c:4a:d3:96:47:b4:25:c0:41:39:89:ea:c9:14:00:5c:4f:
         49:63:74:5c:16:18:c3:d2:df:62:42:27:eb:50:f6:b4:3f:6f:
         3f:67:e1:b8:5d:89:d7:b9:99:1c:9b:2f:cd:e6:26:cf:4a:9d:
         17:29:51:64:e5:62:8b:6d:2a:ec:dd:7f:91:a3:29:3b:e1:13:
         b6:95:da:1e:87:27:ad:73:75:11:f0:e7:51:58:b2:04:7e:a2:
         a3:58:53:6f:9d:04:b8:0c:e4:00:cc:8f:5c:e4:6a:16:9b:f0:
         a7:de:2e:87:70:42:2f:75:91:4b:1f:10:6d:50:05:db:2b:76:
         7d:0f:7c:e7:53:54:aa:f6:ad:4b:5e:e8:b4:23:8e:c9:33:cb:
         8e:a6:b1:3c:3a:7d:54:84:76:d2:7f:61:98:90:a0:64:b7:f6:
         9e:5f:d7:a2:48:1f:61:5b:c1:2b:ae:b1:91:29:98:be:a7:6c:
         84:e4:24:fe:35:8a:58:ab:3d:ff:2e:41:c5:3c:7b:97:b7:28:
         9c:d6:18:55:d0:9c:fa:17:b7:41:03:74:5e:23:e7:2a:7c:64:
         61:fa:bd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----