Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/3cf87114f15aca9a8830db78a9085cb2169abfba.roa
File:                     3cf87114f15aca9a8830db78a9085cb2169abfba.roa (raw, json)
Hash identifier:          TX95Pr3CgASKTmUVXd313KzqEAsb430rpGHQq73Scyg=
Subject key identifier:   EC:36:F6:99:C7:F0:F6:F9:B6:15:E4:2D:AE:E1:42:5C:53:F1:B6:94
Certificate issuer:       /CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
Certificate serial:       219B8D
Authority key identifier: 20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/3cf87114f15aca9a8830db78a9085cb2169abfba.roa
Signing time:             Tue 13 Jun 2023 23:34:40 +0000
ROA not before:           Mon 12 Jun 2023 23:34:40 +0000
ROA not after:            Fri 13 Jun 2025 23:34:40 +0000
asID:                     263244
IP address blocks:        186.0.180.0/22 maxlen: 24
                          2800:cb0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202509 (0x219b8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
        Validity
            Not Before: Jun 12 23:34:40 2023 GMT
            Not After : Jun 13 23:34:40 2025 GMT
        Subject: CN=3cf87114f15aca9a8830db78a9085cb2169abfba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:45:99:15:a4:45:d7:0f:30:42:21:f5:87:
                    1e:58:43:5c:ba:56:81:8d:32:59:63:db:0c:f4:34:
                    46:06:89:99:0a:15:fe:21:5d:6b:ac:48:e7:00:03:
                    7a:09:da:04:04:08:dc:8a:d4:0a:91:ce:7c:2d:4f:
                    d1:c7:41:9c:57:6a:43:03:e5:3f:9e:f8:40:7a:c6:
                    5d:26:d5:13:e5:69:39:a6:a1:a8:3b:44:d5:d3:75:
                    6a:ed:9d:92:f5:4c:5c:ea:e1:64:ab:1a:e5:20:23:
                    6c:85:70:e3:9b:6b:90:5c:5d:e4:87:14:e5:92:50:
                    77:f5:a4:eb:dc:be:13:c6:97:f6:2d:69:43:7e:2c:
                    d7:2d:e3:d9:b3:4c:bb:52:cc:98:77:86:34:1f:81:
                    2d:a9:ec:4e:49:5c:56:12:93:5b:81:60:21:6d:6f:
                    43:f9:ce:f6:8a:63:c4:d2:8e:2e:3e:bf:02:2c:43:
                    eb:9b:63:72:b3:d6:23:b7:b5:9d:59:cd:16:16:9d:
                    0d:86:6c:d5:0d:0d:23:22:42:e4:f6:0c:aa:97:14:
                    d7:e8:87:ea:e3:fb:03:66:e6:a3:47:47:19:6f:9a:
                    e8:75:8a:e9:4f:42:31:2f:a7:26:ca:83:85:08:c0:
                    da:19:ef:b1:c5:a9:de:b6:32:22:e9:e3:21:d2:6c:
                    aa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:36:F6:99:C7:F0:F6:F9:B6:15:E4:2D:AE:E1:42:5C:53:F1:B6:94
            X509v3 Authority Key Identifier:
                keyid:20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/3cf87114f15aca9a8830db78a9085cb2169abfba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/5cc9dbf17ab87f53456274667413bf07a4f85fc9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.180.0/22
                IPv6:
                  2800:cb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:fa:56:71:fd:e0:b6:23:e3:08:02:c6:d3:e3:d5:b5:5c:57:
         c1:f9:3e:b1:2a:18:d8:92:a9:d2:40:4b:31:81:fa:a9:90:ce:
         d4:39:d1:4c:27:1f:a9:33:cc:3a:3c:fa:f5:39:b0:c9:56:18:
         95:27:e4:50:25:5c:07:d6:e1:8f:dd:2f:26:30:21:93:ad:4f:
         e1:46:d8:09:50:24:62:eb:e6:9d:a7:29:15:e0:8e:6c:20:aa:
         69:93:94:32:5c:a3:cf:83:0f:5b:e5:ac:1c:3a:b9:e5:13:1f:
         85:75:03:43:cc:01:d0:ac:6f:21:e3:d0:1c:b6:b3:ce:9e:14:
         66:1c:a4:c4:7b:f4:57:c9:22:65:a6:c5:4b:88:11:5d:de:a7:
         40:84:b2:c3:70:43:f3:71:33:20:a2:cd:0c:27:d2:72:70:97:
         e6:c1:3f:58:ae:b7:d0:31:83:60:80:51:b7:b1:9a:3e:8d:03:
         85:c8:0f:db:5b:cc:0b:01:3e:3c:4b:84:db:97:d4:a5:58:27:
         76:da:70:61:6c:27:68:9c:ff:d9:30:c1:0e:6f:07:70:ec:f6:
         5c:4a:5a:39:49:0c:38:25:4f:58:b3:c3:85:02:dd:f1:44:55:
         d1:07:43:fa:a8:99:2c:7f:a3:99:06:d6:66:a1:72:e5:92:de:
         02:96:00:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----