Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2b030d66-8387-4c3a-8d3f-84ab0449b6f0/bd92a2fd84ed2b000c17b4ac4b51da9e34d0a686.roa
File:                     bd92a2fd84ed2b000c17b4ac4b51da9e34d0a686.roa (raw, json)
Hash identifier:          0S//SduL4PqeFkFJ/3ORq5C5dR1I5EGlfSpcJ5+3ZQ0=
Subject key identifier:   A3:22:8C:E1:D7:8B:15:F1:4B:95:E5:FB:23:51:33:20:8B:72:01:28
Certificate issuer:       /CN=bb9edf01828f3707ed8a3a1dda7972aaab536846
Certificate serial:       148DDD
Authority key identifier: BB:54:12:68:D5:9B:3B:F5:EC:27:82:89:1A:37:96:7D:C3:F7:49:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb9edf01828f3707ed8a3a1dda7972aaab536846.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2b030d66-8387-4c3a-8d3f-84ab0449b6f0/bd92a2fd84ed2b000c17b4ac4b51da9e34d0a686.roa
Signing time:             Wed 04 Oct 2023 00:16:20 +0000
ROA not before:           Tue 03 Oct 2023 00:16:20 +0000
ROA not after:            Sat 04 Oct 2025 01:16:20 +0000
asID:                     264619
IP address blocks:        143.202.96.0/22 maxlen: 24
                          2803:7e40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1347037 (0x148ddd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb9edf01828f3707ed8a3a1dda7972aaab536846
        Validity
            Not Before: Oct  3 00:16:20 2023 GMT
            Not After : Oct  4 01:16:20 2025 GMT
        Subject: CN=bd92a2fd84ed2b000c17b4ac4b51da9e34d0a686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:90:c7:c3:a9:72:44:06:f5:66:34:e6:22:
                    01:d5:74:78:df:0d:78:93:33:93:79:52:58:e3:54:
                    21:16:1c:3c:ec:37:2e:64:c1:03:74:05:71:8e:fe:
                    25:6d:1f:1d:8d:2e:12:65:6f:62:2d:7f:a7:ba:a5:
                    67:12:82:74:2b:1a:ec:50:87:18:63:dd:a1:7b:89:
                    75:c1:e7:6a:38:cf:e9:89:75:10:49:89:e4:b9:f6:
                    d0:55:54:11:ee:e3:09:ba:6b:f1:af:ba:28:b1:bf:
                    70:dd:11:95:1f:64:63:41:16:b7:b6:ef:27:15:5b:
                    0d:9c:d8:c9:fd:c7:21:7a:d9:ba:47:fc:19:f6:2e:
                    18:de:91:28:b5:f3:91:41:3f:ee:9a:30:b0:ef:4f:
                    cd:df:93:4f:2b:c3:1e:69:bc:bf:af:1f:b0:d2:0a:
                    7b:fb:a2:25:dc:55:94:07:72:91:bf:bb:3b:36:bb:
                    7e:37:c4:52:61:2a:06:b8:e1:45:1b:7f:33:f0:65:
                    d5:37:0c:e6:2f:6b:d6:01:1d:f3:27:f7:9c:b1:cd:
                    93:84:44:2b:4a:04:db:55:c0:26:93:7a:21:9e:22:
                    6b:79:ac:02:0a:b5:5d:ee:38:06:d7:d0:50:f4:d9:
                    a9:9e:42:e1:ad:16:84:2b:1a:24:69:5d:07:32:c8:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:22:8C:E1:D7:8B:15:F1:4B:95:E5:FB:23:51:33:20:8B:72:01:28
            X509v3 Authority Key Identifier:
                keyid:BB:54:12:68:D5:9B:3B:F5:EC:27:82:89:1A:37:96:7D:C3:F7:49:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb9edf01828f3707ed8a3a1dda7972aaab536846.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2b030d66-8387-4c3a-8d3f-84ab0449b6f0/bd92a2fd84ed2b000c17b4ac4b51da9e34d0a686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2b030d66-8387-4c3a-8d3f-84ab0449b6f0/bb9edf01828f3707ed8a3a1dda7972aaab536846.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.96.0/22
                IPv6:
                  2803:7e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:c7:2a:39:e9:1b:80:b1:bf:52:1b:b0:a1:d3:72:4b:0d:4b:
         92:d8:db:f4:a5:6f:4d:78:9e:bf:df:a8:a0:36:c0:5e:4b:1d:
         8a:5f:40:29:33:cc:92:3c:36:11:e3:df:e8:82:3c:0a:da:45:
         16:18:23:24:f1:8e:ee:dc:28:75:3c:af:73:47:a1:7f:3f:eb:
         71:58:50:75:a3:09:06:d7:57:73:f2:a7:73:99:72:6a:48:d3:
         fd:c5:40:5c:3d:42:6c:70:5a:67:f0:8c:34:b0:2e:4b:5e:f9:
         78:4a:31:e1:b8:fb:81:47:15:d7:ef:cf:9e:a0:15:7c:2b:f0:
         82:d1:c1:1f:4a:0c:79:15:72:27:4d:0a:14:0b:a2:f8:4f:c1:
         25:3c:15:aa:7f:3c:9c:7b:07:c7:68:61:bc:62:2a:7d:a6:e6:
         5a:0b:5e:42:39:54:da:94:3b:d3:db:e4:a2:da:f4:60:64:9c:
         83:48:20:f6:b6:61:62:57:43:1a:02:49:da:64:c1:06:29:14:
         10:0d:be:26:ad:f9:aa:4c:38:0b:dd:3c:27:cd:55:6d:f9:6e:
         46:2b:fe:63:e8:d3:00:1c:cd:73:84:dc:2a:2d:eb:71:29:c6:
         0e:2d:f3:1f:19:16:ad:d9:91:f5:45:1f:05:5a:10:dd:e6:62:
         2a:f7:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----