Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/a1af19ff1bcf689d8641f8964cba8edf07fa7826.roa
File:                     a1af19ff1bcf689d8641f8964cba8edf07fa7826.roa (raw, json)
Hash identifier:          MSLHlbrYrMPlqVe9RfR87wxNwb85oV8F1UbcQ9EZG8g=
Subject key identifier:   D2:B5:94:F6:5A:0A:90:C5:43:37:AE:DD:BE:B1:CF:00:39:DF:31:97
Certificate issuer:       /CN=9335683e4b18488db2c2495f3084999892751bfe
Certificate serial:       214103
Authority key identifier: F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/a1af19ff1bcf689d8641f8964cba8edf07fa7826.roa
Signing time:             Fri 25 Aug 2023 08:30:05 +0000
ROA not before:           Thu 24 Aug 2023 08:30:05 +0000
ROA not after:            Sat 23 Aug 2025 08:30:05 +0000
asID:                     263793
IP address blocks:        167.249.53.0/24 maxlen: 24
                          2803:840::/32 maxlen: 48
                          2803:840:2300::/48 maxlen: 48
                          2803:840:2301::/48 maxlen: 48
                          2803:840:ba00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179331 (0x214103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9335683e4b18488db2c2495f3084999892751bfe
        Validity
            Not Before: Aug 24 08:30:05 2023 GMT
            Not After : Aug 23 08:30:05 2025 GMT
        Subject: CN=a1af19ff1bcf689d8641f8964cba8edf07fa7826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cd:60:ba:e9:1f:2b:12:49:26:4b:de:94:7e:
                    7e:39:fc:cc:f8:0b:35:47:89:41:10:18:f5:08:b5:
                    02:b6:70:b6:d7:74:24:cd:1a:28:91:06:88:ad:37:
                    c9:0b:bb:89:fc:92:dc:7c:e1:e4:75:3b:9b:82:f0:
                    94:50:6d:78:04:36:84:90:08:4f:18:c9:6b:15:28:
                    b9:ae:bd:6c:a4:7a:26:a8:b8:07:d9:b5:1b:13:7b:
                    1e:fc:e6:2a:9a:6f:41:76:ae:45:fa:c7:63:60:d7:
                    95:1b:72:11:98:90:1d:30:d9:67:8d:1a:30:28:6a:
                    b4:80:77:00:b0:1e:f2:20:9a:bf:a6:28:c5:60:9c:
                    5f:bd:3d:1f:b4:62:96:bc:bf:33:34:c4:b1:5e:e7:
                    06:07:85:c9:f8:37:12:5d:48:1b:50:21:24:8f:fc:
                    2d:cc:1d:1a:e6:75:d6:ee:c2:52:bc:38:d9:c1:80:
                    56:5d:7e:6d:d7:4e:7d:29:7c:e6:1a:a8:e5:27:64:
                    5c:f3:49:69:27:b5:5e:7a:2d:bc:5a:e7:9f:6b:82:
                    ce:02:fd:0d:40:d7:8d:e9:3e:6e:5a:b6:08:bd:09:
                    57:1e:5a:16:1a:e2:31:49:a9:de:45:ca:dc:ca:f0:
                    7a:f7:3b:19:af:8e:7f:eb:8e:5f:91:35:4c:db:2a:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B5:94:F6:5A:0A:90:C5:43:37:AE:DD:BE:B1:CF:00:39:DF:31:97
            X509v3 Authority Key Identifier:
                keyid:F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/a1af19ff1bcf689d8641f8964cba8edf07fa7826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.53.0/24
                IPv6:
                  2803:840::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:03:45:f5:e2:4e:54:a0:90:4e:31:0f:e6:74:b6:46:54:
         c4:04:70:3c:89:d0:05:28:7a:fc:ae:c5:5b:71:80:75:ad:da:
         cd:b3:e6:71:c4:7c:b2:30:8d:32:18:32:77:3a:89:93:0c:76:
         51:fd:0e:d6:38:13:05:cc:48:2c:43:01:8a:87:32:18:65:4e:
         85:0a:0d:33:e0:24:61:c1:f8:c9:07:68:7e:04:9a:6d:55:ec:
         5e:53:49:ec:97:5c:0d:7a:29:76:01:eb:2b:5b:47:da:81:b0:
         2b:4c:19:a9:31:5e:66:9f:2e:80:bd:66:a0:73:b1:a5:3a:5b:
         cb:94:72:ed:cc:4d:53:8e:4f:ac:ba:22:1e:a6:b7:da:29:27:
         25:87:3e:4d:20:97:62:eb:16:6b:e3:2c:f3:01:12:5b:75:6f:
         84:6a:f8:e0:19:0f:34:91:3b:1d:fb:e2:ec:a4:a6:12:db:11:
         7a:07:c8:c9:3b:98:e6:53:40:0e:29:c8:94:1e:20:55:b7:d0:
         1e:96:b6:15:61:12:fc:dd:4b:af:3a:5a:46:77:53:89:7a:41:
         45:b1:15:cf:d8:7f:82:e2:5a:3b:d4:96:54:8e:33:1b:ba:22:
         85:72:d3:4a:17:72:4c:0d:03:8f:45:df:b5:49:23:bc:0a:18:
         1e:5f:40:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----