Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/97c2ec8ef678a463ae82d9d756f0c44029032b6c.roa
File:                     97c2ec8ef678a463ae82d9d756f0c44029032b6c.roa (raw, json)
Hash identifier:          2W7Zpg5t101ARFzGXHMVkTsXUKEuSgrVPU2D8bkQCO4=
Subject key identifier:   53:FA:11:64:FE:93:2C:9B:AC:D7:A8:2F:55:0A:BC:3C:55:82:A6:71
Certificate issuer:       /CN=466e9c553c1e6136fda5fe5189aa28c81ce61dec
Certificate serial:       254DCF
Authority key identifier: 44:97:A8:BD:7C:6E:64:1D:7D:8F:BD:1C:40:97:78:38:5B:7E:9D:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e9c553c1e6136fda5fe5189aa28c81ce61dec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/97c2ec8ef678a463ae82d9d756f0c44029032b6c.roa
Signing time:             Thu 16 Nov 2023 04:01:38 +0000
ROA not before:           Thu 16 Nov 2023 04:01:38 +0000
ROA not after:            Sun 16 Nov 2025 04:01:38 +0000
asID:                     264837
IP address blocks:        170.81.144.0/22 maxlen: 24
                          2803:22c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2444751 (0x254dcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466e9c553c1e6136fda5fe5189aa28c81ce61dec
        Validity
            Not Before: Nov 16 04:01:38 2023 GMT
            Not After : Nov 16 04:01:38 2025 GMT
        Subject: CN=97c2ec8ef678a463ae82d9d756f0c44029032b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:37:fa:ed:be:c1:e8:10:0f:db:93:a9:6f:
                    63:cf:72:7f:29:bc:24:45:bc:ca:70:35:43:f4:0f:
                    3e:ae:b0:40:a0:a3:c2:a6:a3:98:06:26:43:21:20:
                    17:25:9c:dc:09:6a:39:d9:c8:03:74:65:0a:b5:94:
                    3f:e7:83:09:02:dd:f0:da:d0:bf:d6:25:bd:66:cd:
                    d9:d4:24:27:34:c6:e7:92:e8:78:3e:1e:88:8b:af:
                    b9:1c:23:07:3e:50:e0:be:f7:f9:30:bf:ed:6e:f3:
                    04:4c:08:95:de:a9:4d:b9:73:78:ee:6f:2e:c7:7e:
                    8f:d7:4d:05:67:19:61:7a:44:39:a3:d7:31:e3:73:
                    c0:07:4b:c5:99:66:70:d5:31:d1:86:0e:e5:bc:11:
                    08:1e:f9:76:a8:7c:c5:3e:54:44:17:ca:68:aa:c4:
                    2c:a3:b7:f5:94:6a:93:a1:83:d5:ca:80:e9:26:58:
                    0a:2e:f3:da:d5:65:40:f6:93:50:b9:5d:71:0f:94:
                    6e:16:14:1e:eb:20:aa:c4:2a:bc:af:4d:b5:f5:fb:
                    7c:59:ff:d1:51:f8:d4:ca:4e:ae:1b:6f:52:10:34:
                    e3:9f:ba:6c:4a:fd:ef:33:29:e3:84:d4:ca:cd:ec:
                    f2:16:62:3a:ae:2e:76:80:9a:48:32:5b:57:0a:5f:
                    19:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FA:11:64:FE:93:2C:9B:AC:D7:A8:2F:55:0A:BC:3C:55:82:A6:71
            X509v3 Authority Key Identifier:
                keyid:44:97:A8:BD:7C:6E:64:1D:7D:8F:BD:1C:40:97:78:38:5B:7E:9D:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e9c553c1e6136fda5fe5189aa28c81ce61dec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/97c2ec8ef678a463ae82d9d756f0c44029032b6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/466e9c553c1e6136fda5fe5189aa28c81ce61dec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.144.0/22
                IPv6:
                  2803:22c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:f3:a4:8f:1b:cd:75:ef:9d:a5:f2:ce:b5:3e:b3:42:72:5c:
         f2:12:c9:06:27:08:93:2b:3b:0b:08:65:94:0a:52:26:2d:de:
         1c:6d:be:85:87:6f:0c:e2:f8:6f:6f:ac:b5:a9:45:9d:e0:18:
         54:77:7c:58:a1:ad:4d:b5:b3:4d:4e:b5:5f:4e:88:fa:a0:df:
         d4:f9:c8:41:08:22:d2:6d:bf:6a:86:e5:18:69:b8:24:ee:c2:
         0c:a3:49:39:fd:76:76:a8:4c:26:14:4e:23:02:59:5a:0c:d7:
         45:59:2b:89:86:9b:60:f5:c4:d5:80:e8:e1:20:c3:df:f6:d9:
         95:8a:24:d8:0f:7a:ea:26:dd:1b:d0:6f:9e:4c:5d:f4:6f:8d:
         58:8e:1b:50:c1:b2:8c:8c:0a:95:18:9e:9d:44:9a:91:37:32:
         b2:4d:f5:36:2a:d2:bf:47:cd:b2:64:06:fb:22:18:8b:e0:0f:
         65:10:16:33:73:03:b4:de:4b:4a:30:d7:94:c7:72:2d:7e:0d:
         43:6b:2f:e9:1a:97:e5:21:fe:b2:94:1c:19:70:88:39:7d:ba:
         f5:3d:c9:f1:41:dd:e7:5b:f3:91:6e:25:b6:2c:86:24:22:27:
         b3:76:f3:0c:d2:1b:ed:73:c7:4d:c5:b4:05:26:99:06:0c:6b:
         af:f0:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----