Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1edb487f-8854-45e9-a3da-9e6ec1c691d6/5a93b9d5c1279a1ccca9080ee4b664cd86fc350b.roa
File:                     5a93b9d5c1279a1ccca9080ee4b664cd86fc350b.roa (raw, json)
Hash identifier:          LB4W+7MHRyv5qodqdUBDQzXEUjxwBeehUgnpuA0Bv98=
Subject key identifier:   51:EA:28:9E:46:72:A2:49:6B:FF:B5:6E:18:4F:78:DF:C3:8B:00:01
Certificate issuer:       /CN=b28670de25fd7cab3c0633d8b542e72d0d27342e
Certificate serial:       26C947
Authority key identifier: BA:B3:40:D9:C8:1C:66:53:E5:66:88:A5:49:53:E8:4F:65:AC:82:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b28670de25fd7cab3c0633d8b542e72d0d27342e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1edb487f-8854-45e9-a3da-9e6ec1c691d6/5a93b9d5c1279a1ccca9080ee4b664cd86fc350b.roa
Signing time:             Thu 11 Jan 2024 22:42:29 +0000
ROA not before:           Thu 11 Jan 2024 22:42:29 +0000
ROA not after:            Sun 11 Jan 2026 22:42:29 +0000
asID:                     264835
IP address blocks:        170.82.40.0/23 maxlen: 23
                          2801:144::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2541895 (0x26c947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b28670de25fd7cab3c0633d8b542e72d0d27342e
        Validity
            Not Before: Jan 11 22:42:29 2024 GMT
            Not After : Jan 11 22:42:29 2026 GMT
        Subject: CN=5a93b9d5c1279a1ccca9080ee4b664cd86fc350b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:04:8a:7f:01:a1:1d:85:dd:f7:37:81:63:59:
                    e1:f3:71:32:d1:19:c0:0f:5a:c0:30:c1:38:36:a3:
                    c6:6c:be:1d:9b:3a:75:8e:d4:ef:53:62:96:6b:d9:
                    7a:3f:7b:90:13:60:75:75:24:65:66:87:83:82:48:
                    bb:04:c0:25:55:5f:a3:a8:19:6f:b2:9b:a6:c8:c3:
                    21:9a:06:6d:44:ab:3f:b9:e1:39:17:70:9e:29:85:
                    ba:37:40:67:10:99:90:31:03:18:ab:9b:0d:14:f7:
                    37:fc:66:63:87:22:96:c8:da:e8:ec:7b:d7:5b:6f:
                    eb:04:f0:54:31:d1:3d:a3:a5:0a:63:bd:b5:8f:69:
                    b7:48:c3:db:49:10:55:15:2b:fa:7d:d9:85:d0:d0:
                    ec:b6:c1:19:14:eb:bd:21:b1:bc:40:65:d8:19:0b:
                    f9:5f:79:73:b0:b8:e2:d1:21:dd:41:92:2b:48:df:
                    6c:19:ca:65:4e:3d:7f:5a:15:1d:26:82:11:2f:ae:
                    3e:22:32:96:22:9d:00:f9:e0:f2:a7:7c:81:63:49:
                    37:9d:d3:67:35:7b:73:38:30:1d:48:ba:34:ec:0c:
                    25:9f:ee:02:5c:ee:1d:9a:bf:dd:58:13:5a:4f:71:
                    ac:03:92:ba:c5:5f:98:49:d5:65:3b:1a:74:a4:24:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EA:28:9E:46:72:A2:49:6B:FF:B5:6E:18:4F:78:DF:C3:8B:00:01
            X509v3 Authority Key Identifier:
                keyid:BA:B3:40:D9:C8:1C:66:53:E5:66:88:A5:49:53:E8:4F:65:AC:82:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b28670de25fd7cab3c0633d8b542e72d0d27342e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1edb487f-8854-45e9-a3da-9e6ec1c691d6/5a93b9d5c1279a1ccca9080ee4b664cd86fc350b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1edb487f-8854-45e9-a3da-9e6ec1c691d6/b28670de25fd7cab3c0633d8b542e72d0d27342e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.40.0/23
                IPv6:
                  2801:144::/42

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:f8:16:5a:14:8e:4e:b2:6e:de:b2:9c:c5:fd:04:a6:97:
         75:bf:7b:ed:93:e4:a8:1c:8e:68:99:66:85:2b:f2:0c:95:c8:
         19:b7:f8:d0:16:fa:0e:c5:68:cd:d3:d6:fe:5f:52:79:47:76:
         b3:27:fd:ba:b8:08:be:61:93:41:60:9f:49:c4:69:5f:6a:d1:
         7b:d9:d4:60:4b:77:d8:2a:46:de:ba:ef:ff:6f:0b:5d:0f:f9:
         d5:7f:ee:7e:bf:18:9b:06:19:6a:13:57:93:63:6e:f5:c9:f4:
         93:28:24:42:d9:24:7a:a1:db:07:e7:4d:9f:2c:e7:a9:97:d4:
         ec:3f:6b:42:a3:47:fa:93:4f:81:8a:60:21:de:8f:d6:1e:d2:
         b6:5d:12:df:d0:1e:27:9f:cc:9f:94:0f:42:48:da:a9:db:8d:
         e1:b1:30:53:6d:2d:fd:83:b6:1c:e8:b2:68:59:bf:60:bc:89:
         3e:7e:31:ef:96:3b:90:c8:9f:e3:57:ef:01:3d:32:64:d8:15:
         e3:5c:a8:44:1e:77:ab:52:75:b5:67:d0:7f:00:29:99:8e:d5:
         52:40:99:1e:60:3c:81:32:35:c8:19:07:b6:8e:53:47:a4:c0:
         9a:08:4c:b5:9d:c8:6c:99:06:06:2d:dc:0f:e1:29:34:3f:04:
         06:56:d6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----