Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35b3235e-ce23-43d4-8267-464cc17e23e3/b7fb70bd0e0ed0dfd9f7699dce4d8ba9584ce7b2.roa
File:                     b7fb70bd0e0ed0dfd9f7699dce4d8ba9584ce7b2.roa (raw, json)
Hash identifier:          2Z1BV/OI852L4cIM6T1kgU4E6XS3KENWUCiv/xytA7U=
Subject key identifier:   E7:B8:10:DB:44:94:B7:CD:11:D9:CB:5C:27:C1:43:4B:6E:B2:5C:CE
Certificate issuer:       /CN=a00be52fb1703479378bccb8b91bc50cf6d4e5d6
Certificate serial:       2158CC
Authority key identifier: 65:65:5A:2A:55:22:36:73:F1:DA:E0:B2:FB:9D:DF:6C:05:D0:F2:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00be52fb1703479378bccb8b91bc50cf6d4e5d6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35b3235e-ce23-43d4-8267-464cc17e23e3/b7fb70bd0e0ed0dfd9f7699dce4d8ba9584ce7b2.roa
Signing time:             Wed 14 Jun 2023 04:47:32 +0000
ROA not before:           Tue 13 Jun 2023 04:47:31 +0000
ROA not after:            Sat 14 Jun 2025 04:47:31 +0000
asID:                     2549
IP address blocks:        148.202.0.0/16 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185420 (0x2158cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00be52fb1703479378bccb8b91bc50cf6d4e5d6
        Validity
            Not Before: Jun 13 04:47:31 2023 GMT
            Not After : Jun 14 04:47:31 2025 GMT
        Subject: CN=b7fb70bd0e0ed0dfd9f7699dce4d8ba9584ce7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:2d:7f:6b:36:9c:8e:23:c9:90:63:d8:23:
                    cc:40:79:22:28:01:85:f2:78:2e:65:5b:05:42:a5:
                    3c:64:0d:9b:66:3b:d6:6c:5d:27:99:e3:de:be:00:
                    15:2a:13:62:05:e8:43:88:e3:0c:6e:d6:1a:d1:db:
                    75:fd:ed:58:5a:0e:34:96:43:ae:56:db:af:c4:1e:
                    4c:39:c8:a8:36:1d:3e:32:8b:16:18:6e:22:4e:13:
                    bb:b2:c1:71:48:89:a2:ce:78:4d:e7:f0:2c:aa:47:
                    92:25:56:a6:21:9f:bb:3c:fb:db:b3:55:5b:19:66:
                    c4:e8:70:f5:00:04:d9:1d:0b:c9:a0:f9:33:3d:4f:
                    e5:31:c6:60:f2:ec:3d:e4:57:21:40:61:0f:56:17:
                    d9:18:76:39:a4:04:ed:80:25:82:de:a4:d0:f2:9e:
                    52:e9:2b:7e:3c:fd:fa:ef:df:0f:89:1d:27:93:ad:
                    00:d4:d8:0a:e4:2d:52:8c:20:e2:1e:0e:27:41:f1:
                    94:85:f1:3b:7f:99:e6:1e:06:bf:81:66:b5:be:28:
                    39:f4:ce:e0:b2:41:f9:1c:fe:1d:b3:46:de:87:e4:
                    8a:ed:b6:86:5e:ba:02:14:fd:79:e8:fb:ec:b3:ee:
                    58:6e:48:f2:1d:66:b8:4a:50:93:81:5e:00:fe:95:
                    cf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B8:10:DB:44:94:B7:CD:11:D9:CB:5C:27:C1:43:4B:6E:B2:5C:CE
            X509v3 Authority Key Identifier:
                keyid:65:65:5A:2A:55:22:36:73:F1:DA:E0:B2:FB:9D:DF:6C:05:D0:F2:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00be52fb1703479378bccb8b91bc50cf6d4e5d6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35b3235e-ce23-43d4-8267-464cc17e23e3/b7fb70bd0e0ed0dfd9f7699dce4d8ba9584ce7b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35b3235e-ce23-43d4-8267-464cc17e23e3/a00be52fb1703479378bccb8b91bc50cf6d4e5d6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.202.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:1f:61:89:ca:9d:f1:1d:12:22:0e:c3:1c:d1:2d:18:b8:a2:
         e2:98:fc:e3:41:96:06:77:28:1e:3c:6d:73:fa:19:96:43:4b:
         1a:4d:e5:8f:6f:61:c1:51:6d:02:43:1b:a9:58:33:dd:af:a4:
         a5:9d:11:c2:fa:e9:9c:eb:70:e9:2b:f5:53:50:bc:29:a8:c8:
         8c:7f:3c:1a:ad:08:37:d2:69:d9:f4:0c:25:3a:57:69:b7:d4:
         97:fa:b1:17:80:f3:76:51:60:9b:15:47:b3:fb:0c:e2:03:aa:
         4f:17:34:9e:78:9f:7d:be:35:c6:9d:9c:a4:0c:1d:f0:a9:e6:
         20:7b:33:45:40:e4:3e:c7:4e:e1:0b:95:9a:f2:fa:de:b6:de:
         a0:1c:71:17:5f:00:5c:39:e0:20:7d:12:4e:52:e0:6c:04:2c:
         b6:bd:f3:ee:22:05:c3:ef:fb:ea:25:d8:29:2a:ec:86:ba:c8:
         b4:ff:98:52:e2:9b:7e:dc:1a:cc:7e:d5:08:d0:2d:20:57:c7:
         78:23:f2:74:23:05:ee:87:55:c3:51:d0:fd:2f:9c:2e:db:77:
         3b:41:e4:c0:d4:66:d4:41:2b:a2:15:d8:53:e8:6e:da:b5:19:
         8e:00:ba:47:27:6b:2b:85:21:58:e5:00:5e:e0:98:f8:e4:6e:
         e6:2a:2a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----