Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/2a3ff213985e6020240d46c496289b6ef05becb6.roa
File:                     2a3ff213985e6020240d46c496289b6ef05becb6.roa (raw, json)
Hash identifier:          D3kxerqVtD7+JxsWhGA6NklVs2UqtBtHBl46wJ0ssiU=
Subject key identifier:   A9:F1:CB:32:34:B4:2B:F1:A1:17:34:B6:CA:DC:40:17:F3:57:BA:0E
Certificate issuer:       /CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
Certificate serial:       20EBE4
Authority key identifier: 0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/2a3ff213985e6020240d46c496289b6ef05becb6.roa
Signing time:             Mon 26 Jun 2023 16:09:05 +0000
ROA not before:           Sun 25 Jun 2023 16:09:05 +0000
ROA not after:            Thu 26 Jun 2025 16:09:05 +0000
asID:                     52471
IP address blocks:        103.8.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157540 (0x20ebe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
        Validity
            Not Before: Jun 25 16:09:05 2023 GMT
            Not After : Jun 26 16:09:05 2025 GMT
        Subject: CN=2a3ff213985e6020240d46c496289b6ef05becb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:74:ea:d2:e0:bd:d4:a4:da:04:ab:ba:9f:
                    b8:b4:2f:89:9a:db:ff:89:fa:0e:04:bc:5f:a2:15:
                    ea:df:52:84:b8:8c:13:c3:ce:0f:c2:6f:b9:de:03:
                    d1:47:94:9c:ca:de:9f:73:26:8c:59:9b:eb:08:ae:
                    24:dd:05:58:83:0b:75:6e:0d:58:c8:f2:e2:c3:6a:
                    97:8b:28:eb:6f:8a:a7:7f:24:52:00:41:bd:a4:a3:
                    73:a3:77:16:6d:90:5f:b9:3f:ee:9e:b4:a7:87:f9:
                    aa:3f:7f:d4:a5:68:9d:8e:10:12:77:ff:56:0d:0b:
                    9f:21:cc:ef:1e:d7:b5:44:19:8b:5b:60:2e:f2:bd:
                    75:9c:10:89:d8:d9:01:5c:5d:ce:70:4f:a4:8e:71:
                    c7:fd:59:5f:13:6f:05:c3:59:04:c5:d7:98:8f:01:
                    50:d5:e0:7d:24:b0:b7:2b:69:6d:08:9c:1f:74:eb:
                    99:6e:ce:82:b0:4b:5b:a2:54:28:4c:da:6b:48:58:
                    57:44:68:52:d2:f5:0b:98:2b:40:0b:26:9a:1b:e5:
                    72:a9:25:16:f9:05:38:6f:fd:75:e2:8d:8d:27:b6:
                    6d:50:5a:d9:9b:be:75:40:69:6e:5a:db:7a:b8:d6:
                    d9:b0:75:40:90:33:e0:64:e4:1e:7b:84:15:e4:93:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F1:CB:32:34:B4:2B:F1:A1:17:34:B6:CA:DC:40:17:F3:57:BA:0E
            X509v3 Authority Key Identifier:
                keyid:0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/2a3ff213985e6020240d46c496289b6ef05becb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:5d:7f:f1:62:64:ca:86:72:59:ff:b9:2d:0d:45:a9:59:c7:
         7e:93:98:94:f3:7f:b5:e0:03:91:e5:66:d7:11:a1:43:f0:2e:
         e0:9d:ee:17:20:6c:8d:60:2a:e6:9d:d6:44:c0:7c:f2:ec:fa:
         ac:ef:e4:2a:62:b6:d4:6c:ef:e4:58:61:4d:73:00:6c:a4:42:
         48:40:b6:6d:23:b8:dd:6b:11:92:6e:08:66:2e:dc:60:d6:8f:
         43:7a:90:6f:e1:cf:b7:a8:38:3c:10:21:a1:85:e1:55:33:29:
         58:72:be:9f:40:3e:75:ce:94:48:16:b3:31:f6:08:41:0f:ac:
         fd:6a:90:f1:43:f5:3b:0f:a3:22:e9:c2:6e:eb:7c:bd:18:ee:
         1e:5d:ce:ba:12:45:f6:98:8c:b0:dc:c4:76:8a:1d:fd:2f:87:
         77:ef:c8:6a:06:96:58:d2:a0:d8:c0:e8:1d:87:0c:b6:db:06:
         d6:d0:d7:c8:3d:b1:9f:0d:93:e4:18:4a:5b:87:ba:64:d9:14:
         35:7e:f2:ea:71:f5:ab:8d:4f:19:fc:d4:7e:96:37:07:b2:a0:
         8f:18:44:0b:f7:80:b8:e6:dc:f4:52:ed:a6:3c:70:fa:e4:8e:
         78:88:54:85:d2:02:27:f5:f4:5d:84:b8:27:35:7d:bd:07:ee:
         3f:c6:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----