Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dbf97af-7b75-4a4d-857a-4d734541ebbb/c3459cebe469033cbfa20b0605862856d2b9e32b.roa
File:                     c3459cebe469033cbfa20b0605862856d2b9e32b.roa (raw, json)
Hash identifier:          4VKbNIiPITbYx/fwMq3vSGrqBog0PnIlTeSP1C0ed0M=
Subject key identifier:   96:84:AD:63:CA:BE:D5:80:7A:F2:16:38:5A:3B:DC:E4:34:23:A6:A9
Certificate issuer:       /CN=6903b9f59c9133cf1913c5de49b07f345c8247eb
Certificate serial:       24609F
Authority key identifier: 80:21:37:00:CF:17:87:43:AA:F6:9D:10:BC:F7:84:17:60:28:36:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6903b9f59c9133cf1913c5de49b07f345c8247eb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dbf97af-7b75-4a4d-857a-4d734541ebbb/c3459cebe469033cbfa20b0605862856d2b9e32b.roa
Signing time:             Wed 06 Dec 2023 11:16:26 +0000
ROA not before:           Wed 06 Dec 2023 11:16:26 +0000
ROA not after:            Sat 06 Dec 2025 11:16:26 +0000
asID:                     264832
IP address blocks:        170.81.228.0/22 maxlen: 24
                          2803:82c0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2384031 (0x24609f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6903b9f59c9133cf1913c5de49b07f345c8247eb
        Validity
            Not Before: Dec  6 11:16:26 2023 GMT
            Not After : Dec  6 11:16:26 2025 GMT
        Subject: CN=c3459cebe469033cbfa20b0605862856d2b9e32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5f:40:59:4a:0d:51:24:30:28:15:ed:c9:91:
                    27:05:b2:ae:63:37:6a:0a:30:c0:90:a7:14:58:3f:
                    97:a6:6a:fc:91:eb:37:f4:eb:1d:40:2f:18:73:27:
                    58:91:2e:a4:c8:45:07:23:e1:47:70:b5:dc:13:aa:
                    69:09:3b:68:3f:3f:19:4f:dc:ec:db:6e:92:41:90:
                    9d:4e:d1:a9:de:ab:74:25:e8:61:ee:39:63:d9:03:
                    a5:3f:b4:b9:51:0a:1c:5d:c0:4d:b3:64:bc:29:c0:
                    24:73:12:e9:4d:9e:32:b3:cb:9e:d3:6c:bf:14:74:
                    24:7a:af:2a:da:be:a0:b8:4e:03:10:63:cf:66:9e:
                    a6:4e:26:21:13:49:0e:85:19:79:db:b0:8a:51:a1:
                    4f:6d:b8:43:9f:cd:81:2a:ad:80:ef:5d:e1:12:4e:
                    d9:d9:e6:36:9e:d5:28:13:08:06:36:3c:2b:1c:ce:
                    44:b9:a7:86:00:38:4a:88:58:87:bf:d5:ab:90:ec:
                    f3:85:cb:fd:2a:b9:b8:f7:de:f4:8c:44:1f:09:2e:
                    92:2a:95:50:a8:fe:ef:86:6f:5b:6c:98:18:8b:a1:
                    7d:83:56:f5:1f:33:98:8b:48:ef:e9:df:b8:33:c2:
                    98:da:41:c8:71:77:f1:94:82:57:a0:79:84:f0:d5:
                    c2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:84:AD:63:CA:BE:D5:80:7A:F2:16:38:5A:3B:DC:E4:34:23:A6:A9
            X509v3 Authority Key Identifier:
                keyid:80:21:37:00:CF:17:87:43:AA:F6:9D:10:BC:F7:84:17:60:28:36:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6903b9f59c9133cf1913c5de49b07f345c8247eb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dbf97af-7b75-4a4d-857a-4d734541ebbb/c3459cebe469033cbfa20b0605862856d2b9e32b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dbf97af-7b75-4a4d-857a-4d734541ebbb/6903b9f59c9133cf1913c5de49b07f345c8247eb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.228.0/22
                IPv6:
                  2803:82c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:a1:af:1c:22:64:2d:7a:81:1a:6c:06:a4:c4:39:ee:83:95:
         71:63:2f:f1:52:e0:bc:10:a6:9e:a3:22:a8:d6:75:84:53:97:
         82:6f:ea:f9:ec:75:29:1b:12:16:42:71:5e:09:d2:1f:96:6e:
         69:96:3b:f7:ca:be:2a:1b:4f:7b:fa:f5:03:d1:67:7b:83:be:
         e4:19:95:55:cd:de:f7:76:f2:cc:95:98:0b:b7:d8:00:07:c4:
         02:ea:b5:92:de:1c:1f:a0:02:6a:18:c6:c8:73:7a:35:0a:33:
         92:5a:6c:12:43:81:72:4b:df:f4:ef:5a:ce:bc:7f:0e:89:01:
         4b:18:79:27:a5:eb:6e:bc:d7:14:01:c9:da:f5:95:e8:cb:94:
         26:a0:31:a9:22:86:9f:da:d9:1c:eb:66:21:2a:f3:2c:30:58:
         85:f4:c3:83:11:b4:36:3a:f6:cd:fc:c9:ba:37:e0:d9:21:9f:
         9e:88:85:f7:bb:ca:8a:57:96:21:9e:1b:ba:e1:7c:63:3d:4d:
         b8:23:01:28:0e:ab:7f:15:18:bf:95:4f:d7:60:08:4d:2e:34:
         5a:c4:ea:8e:fc:7e:6e:d8:68:d5:81:bf:5b:f2:da:79:5f:3a:
         e2:b4:0d:e7:7f:66:09:31:08:be:97:7e:af:9d:54:a6:b8:5d:
         f5:a4:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----