Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/1a28ac633a9cd9257ce07395dfbf7c1d85ba48ed.roa
File:                     1a28ac633a9cd9257ce07395dfbf7c1d85ba48ed.roa (raw, json)
Hash identifier:          QnDy0XR2nrfFkzYscfTdSI8udlD84/eJ8ij/H2rSSvo=
Subject key identifier:   EC:D4:1E:26:A4:6F:F3:76:47:02:99:9E:04:04:AD:B8:5E:31:47:4A
Certificate issuer:       /CN=fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10
Certificate serial:       208E7B
Authority key identifier: 78:76:9D:A7:C7:99:59:9E:F4:6F:DD:79:75:96:43:C3:76:83:7E:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/1a28ac633a9cd9257ce07395dfbf7c1d85ba48ed.roa
Signing time:             Sat 01 Jul 2023 17:29:52 +0000
ROA not before:           Fri 30 Jun 2023 17:29:51 +0000
ROA not after:            Tue 01 Jul 2025 17:29:51 +0000
asID:                     264712
IP address blocks:        170.150.8.0/22 maxlen: 24
                          2803:eb40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133627 (0x208e7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10
        Validity
            Not Before: Jun 30 17:29:51 2023 GMT
            Not After : Jul  1 17:29:51 2025 GMT
        Subject: CN=1a28ac633a9cd9257ce07395dfbf7c1d85ba48ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:69:13:f3:e3:ee:49:7c:89:36:bb:d3:4f:35:
                    fe:2e:ad:4f:c8:ff:be:9f:10:3e:e2:ca:86:5f:e0:
                    d4:0e:21:40:81:12:d5:7f:5c:97:df:1d:c6:60:cb:
                    d9:17:cd:bd:78:b8:a5:d3:8b:12:73:8a:21:1b:bc:
                    77:53:66:6a:56:7f:be:5d:71:24:05:55:d1:8d:08:
                    f8:e4:7d:66:4e:90:6e:31:59:3f:b8:93:27:eb:be:
                    f5:1c:d6:b1:20:1a:73:02:ce:f1:2a:50:49:6a:cf:
                    11:5e:d7:4d:f9:98:1e:b9:b8:7a:df:6b:c2:cd:c8:
                    c6:1a:87:84:1b:d5:90:83:20:09:ce:04:3a:76:cf:
                    ca:01:5a:71:90:84:36:17:23:0e:8a:cf:f0:cf:80:
                    60:75:17:09:34:34:dc:24:3f:6c:07:65:58:72:5f:
                    05:20:b4:ed:cc:b0:67:1d:4f:1f:5d:80:23:06:52:
                    64:ba:88:3d:b7:75:af:24:49:21:d4:55:30:f8:16:
                    5a:dc:a2:37:74:89:51:70:6a:49:34:fa:5c:f3:20:
                    96:26:9b:8f:39:cb:81:b3:09:7d:1f:2c:e5:f0:e2:
                    e4:c3:da:81:52:1d:56:4e:f2:ea:fc:12:23:06:72:
                    17:a9:9c:58:f7:7f:31:29:46:57:05:3d:09:ad:1b:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D4:1E:26:A4:6F:F3:76:47:02:99:9E:04:04:AD:B8:5E:31:47:4A
            X509v3 Authority Key Identifier:
                keyid:78:76:9D:A7:C7:99:59:9E:F4:6F:DD:79:75:96:43:C3:76:83:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/1a28ac633a9cd9257ce07395dfbf7c1d85ba48ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.8.0/22
                IPv6:
                  2803:eb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:10:62:41:a2:80:d3:f7:9a:e0:26:da:6c:11:71:5c:11:81:
         98:01:92:97:ec:a5:53:a9:f4:f0:58:f9:b0:c8:ce:a7:73:78:
         02:9a:28:7d:95:53:83:27:89:44:2d:6f:e0:d4:c3:f8:47:6e:
         02:74:bc:10:87:32:d7:33:d7:1d:05:84:ad:c5:6e:18:a3:24:
         ef:8b:43:82:ec:3f:5c:de:8a:a6:95:4e:96:0f:c4:60:e4:fd:
         d1:50:e8:92:13:42:87:cb:9e:52:cd:8a:7c:f2:9f:ba:c8:ed:
         69:c2:42:11:6c:bc:7d:ab:5b:fd:a0:a6:59:4e:74:5f:25:fe:
         62:d8:bb:24:c1:0f:75:d9:b6:95:f1:e2:c6:85:ed:05:ef:73:
         ee:86:fe:ee:83:c3:77:43:46:62:02:6d:55:aa:dd:5e:34:13:
         1a:50:16:f5:11:f9:98:1f:af:aa:2a:65:91:35:eb:86:2c:5e:
         50:ff:0d:74:2c:d6:70:a2:f3:fb:80:76:f8:a3:cc:87:8a:7c:
         05:2c:98:11:4a:8a:9e:55:c8:43:23:aa:77:59:fe:64:31:05:
         20:14:04:02:2d:95:41:b6:f5:c8:c3:93:62:46:a1:2c:79:6f:
         38:fa:fc:6d:1e:30:db:b0:af:70:ce:69:6c:16:fd:65:e2:ee:
         ea:e8:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----