Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/17d009439ecbaaae1e3e0a961b33fed2ae57462a.roa
File:                     17d009439ecbaaae1e3e0a961b33fed2ae57462a.roa (raw, json)
Hash identifier:          C8BSaWbsygvVndmJI6zIYERp/c1tW65lyum1HIvMLSI=
Subject key identifier:   13:6A:38:C8:1D:50:00:D2:8C:FC:59:1B:5C:2F:E1:62:75:E2:17:90
Certificate issuer:       /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial:       224AF1
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/17d009439ecbaaae1e3e0a961b33fed2ae57462a.roa
Signing time:             Fri 14 Jul 2023 20:39:27 +0000
ROA not before:           Thu 13 Jul 2023 20:39:21 +0000
ROA not after:            Mon 14 Jul 2025 20:39:21 +0000
asID:                     3273
IP address blocks:        66.231.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2247409 (0x224af1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
        Validity
            Not Before: Jul 13 20:39:21 2023 GMT
            Not After : Jul 14 20:39:21 2025 GMT
        Subject: CN=17d009439ecbaaae1e3e0a961b33fed2ae57462a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:10:c4:50:f4:02:62:3d:34:a3:09:25:62:
                    78:4a:7f:9b:c1:b0:3e:7d:dd:ca:b9:e5:e4:b4:08:
                    b1:bb:7f:27:49:5e:e2:0b:f0:87:b5:e2:61:76:c0:
                    18:b1:fa:a1:d2:37:03:f0:12:8f:12:b2:b9:42:ff:
                    70:a6:90:e6:a4:c9:92:ca:b0:2b:7f:43:09:ca:25:
                    00:d0:06:02:1c:8b:9f:14:a5:ed:b7:90:54:15:f7:
                    6d:97:7a:de:0b:38:3e:31:20:16:d0:8e:33:52:1b:
                    8d:14:33:e0:dc:6b:ad:45:24:60:16:36:a3:2d:72:
                    32:4d:d0:d0:24:31:8f:eb:8e:85:55:81:26:3b:0c:
                    2d:d9:e0:3b:c7:df:ef:43:e0:39:45:fb:84:63:b9:
                    ef:55:f9:4e:bf:a5:50:bf:d8:67:b7:b0:7f:ca:4b:
                    d4:50:05:42:d5:22:4c:f5:d9:df:8d:a8:bf:b0:24:
                    21:f3:a9:11:26:49:1f:12:0d:84:7a:0f:8b:12:88:
                    e8:1e:23:c6:8d:d3:2e:e6:16:63:57:e7:bf:a4:71:
                    38:e2:e7:fc:0a:67:ca:54:de:0b:2f:af:fe:c8:9b:
                    6d:68:99:fd:46:b5:f1:ee:f3:66:63:9b:a8:c0:74:
                    08:bb:dd:ff:67:d8:d2:35:5e:c4:ad:cf:39:8e:bc:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6A:38:C8:1D:50:00:D2:8C:FC:59:1B:5C:2F:E1:62:75:E2:17:90
            X509v3 Authority Key Identifier:
                keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/17d009439ecbaaae1e3e0a961b33fed2ae57462a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:60:67:49:ce:5d:71:c8:67:ec:1b:ad:f6:42:79:7c:7b:c1:
         e1:4b:4a:0e:b3:4e:8f:2c:fc:96:4a:cb:43:f7:e7:36:f6:2c:
         ee:0c:27:dd:e7:81:6d:f7:bf:b8:5a:8e:9d:7c:96:6b:12:e9:
         6d:7d:89:f4:63:44:37:01:49:e1:fe:e7:62:42:4b:c8:9b:36:
         1b:34:94:79:71:5d:ca:e6:d2:b8:f9:66:a1:97:87:b6:a1:0b:
         a3:6b:36:bc:d0:6f:52:b1:22:17:c3:63:1d:4a:9f:43:4e:1a:
         8b:8e:17:a2:ee:c2:c7:be:57:f4:0a:7a:31:df:bc:dd:77:16:
         a0:75:85:c3:44:6e:1c:14:4f:42:ba:71:56:81:42:9a:77:56:
         89:6d:a1:2f:00:68:cf:5d:55:d3:b2:d2:f8:2a:f3:69:a6:fc:
         16:52:2b:30:ec:2a:a1:ba:0b:79:a4:23:0e:8f:79:74:41:fa:
         1b:a3:12:32:77:51:4b:9f:71:9d:d8:3f:30:6b:3a:f6:ea:7e:
         4b:b0:0e:17:d2:af:02:53:c1:c8:cd:96:f3:72:cd:0e:4c:c5:
         3e:dc:aa:3e:d3:9a:7d:88:80:0d:f9:1c:42:4f:72:f4:8f:8c:
         b6:11:bc:8a:4f:59:bb:0f:dd:fa:06:3b:13:ee:bd:ec:55:cd:
         a4:b4:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----