Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/fbd8901486b527d5cbf9564706fcb1d44a728351.roa
File:                     fbd8901486b527d5cbf9564706fcb1d44a728351.roa (raw, json)
Hash identifier:          ZScExk6z2DuXFlghTBrN5d9nsEZfW9Fb0eUGaQsNeCY=
Subject key identifier:   A3:95:DD:29:C5:2F:98:00:1D:E8:1C:82:44:5D:9B:8E:90:B5:6C:BB
Certificate issuer:       /CN=8cecba4d06719b0701405567ea7739bad8040b51
Certificate serial:       2273D0
Authority key identifier: 80:CB:5A:5C:56:CC:08:65:09:95:00:14:30:A2:11:C1:AE:DF:A4:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cecba4d06719b0701405567ea7739bad8040b51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/fbd8901486b527d5cbf9564706fcb1d44a728351.roa
Signing time:             Thu 10 Aug 2023 22:24:50 +0000
ROA not before:           Wed 09 Aug 2023 22:24:49 +0000
ROA not after:            Sun 10 Aug 2025 22:24:49 +0000
asID:                     267788
IP address blocks:        170.247.0.0/22 maxlen: 24
                          2803:26c0::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257872 (0x2273d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cecba4d06719b0701405567ea7739bad8040b51
        Validity
            Not Before: Aug  9 22:24:49 2023 GMT
            Not After : Aug 10 22:24:49 2025 GMT
        Subject: CN=fbd8901486b527d5cbf9564706fcb1d44a728351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:97:78:07:8a:73:52:e5:9e:42:e3:a8:ce:
                    83:c7:31:ac:58:e8:0e:35:82:bf:8c:02:56:52:8b:
                    6c:82:48:9b:42:15:ea:3c:15:e5:4b:2a:83:71:bd:
                    ba:cd:f9:e6:8f:65:96:41:23:1f:52:66:00:36:ac:
                    c3:dd:48:53:33:0c:01:f3:8c:b2:b9:71:4b:fe:a7:
                    a1:28:c5:7a:7b:8e:f9:34:56:e5:c6:23:a5:fe:44:
                    6c:33:dd:33:95:65:3c:62:05:da:26:1e:2c:2d:dc:
                    67:58:df:22:ab:a7:35:17:dc:7d:87:9e:63:dd:18:
                    94:95:67:ae:cf:20:d0:7d:d0:51:01:f0:82:d3:a0:
                    7f:0e:cf:29:e0:c0:8d:a7:98:3c:bc:aa:74:b7:ea:
                    bf:7d:ba:33:de:02:54:3e:d6:a2:77:83:32:a6:f2:
                    c0:11:01:34:f1:ee:da:be:6b:ca:2f:8c:b1:d2:ba:
                    f4:19:95:7b:d0:33:5d:16:58:0b:0a:4b:8d:36:a3:
                    3c:82:24:09:54:31:42:22:c6:cf:bd:78:2f:0c:48:
                    ba:d6:e8:85:b9:3a:d3:8a:21:4d:81:b3:9f:36:85:
                    67:da:dc:7d:12:ba:b8:4d:da:1c:0c:a7:62:24:df:
                    a0:6b:52:6d:69:37:31:46:a0:6b:66:c6:a8:f1:2f:
                    8d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:95:DD:29:C5:2F:98:00:1D:E8:1C:82:44:5D:9B:8E:90:B5:6C:BB
            X509v3 Authority Key Identifier:
                keyid:80:CB:5A:5C:56:CC:08:65:09:95:00:14:30:A2:11:C1:AE:DF:A4:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cecba4d06719b0701405567ea7739bad8040b51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/fbd8901486b527d5cbf9564706fcb1d44a728351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/8cecba4d06719b0701405567ea7739bad8040b51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.0.0/22
                IPv6:
                  2803:26c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:ff:c6:80:06:df:81:b2:69:8f:df:5e:a0:a9:86:7a:fd:7a:
         c3:6b:d3:ae:55:a9:85:0d:52:d2:79:07:52:9f:97:3f:19:86:
         70:aa:37:c2:aa:bf:1e:57:a4:4d:7f:42:d4:47:41:f0:28:55:
         a3:71:f1:85:e6:21:ed:c0:49:f3:0a:84:27:8a:cf:5d:39:ef:
         d9:60:fe:15:74:4f:a2:85:19:58:fc:0b:37:23:9e:54:c5:62:
         73:ba:a1:f8:c2:b5:ee:2c:7d:3c:e5:93:72:62:d9:2a:bb:02:
         86:ac:aa:1e:f6:28:80:cf:e8:af:87:86:29:f5:c5:04:eb:08:
         93:94:d7:98:32:cd:85:39:4c:ac:8e:14:0f:3f:27:a5:d1:d3:
         5e:5a:d2:e9:f8:a1:09:5f:60:44:6a:1a:2c:72:05:03:83:80:
         77:ad:0c:90:dc:6b:c8:93:f1:02:53:4f:04:ff:81:10:99:86:
         e7:0e:d1:49:e2:19:d3:63:8e:29:90:41:d3:f3:73:17:e9:e6:
         44:e3:73:d1:c9:36:f0:c8:1d:aa:a4:43:cc:9c:c4:72:9b:e2:
         e0:4d:50:16:73:86:61:34:b9:c6:1e:ec:0b:18:f7:84:5f:91:
         e7:e9:45:ce:0e:a9:29:c3:96:42:c9:4a:8c:5a:5c:33:0b:b0:
         3c:59:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----