Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/8237cd22b031a7dd9eb6be614c1ab5c1f30cd27a.roa
File:                     8237cd22b031a7dd9eb6be614c1ab5c1f30cd27a.roa (raw, json)
Hash identifier:          NkFz3rPnAUkENLNgwvTwy6Uo8BtTcpsj0R2/NhVMIEY=
Subject key identifier:   9C:8C:EB:33:C0:76:45:E7:45:73:66:19:8A:CF:57:85:9E:26:A0:91
Certificate issuer:       /CN=f77ab90cbd16229b500c705ad494b563882e5d72
Certificate serial:       170895
Authority key identifier: 04:E7:DD:2C:10:0C:C6:FF:46:03:3D:6E:BF:1D:72:DF:79:BA:1B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f77ab90cbd16229b500c705ad494b563882e5d72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/8237cd22b031a7dd9eb6be614c1ab5c1f30cd27a.roa
Signing time:             Mon 29 May 2023 16:47:32 +0000
ROA not before:           Sun 28 May 2023 16:47:32 +0000
ROA not after:            Thu 29 May 2025 16:47:32 +0000
asID:                     270089
IP address blocks:        170.80.92.0/22 maxlen: 24
                          2803:6be0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509525 (0x170895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77ab90cbd16229b500c705ad494b563882e5d72
        Validity
            Not Before: May 28 16:47:32 2023 GMT
            Not After : May 29 16:47:32 2025 GMT
        Subject: CN=8237cd22b031a7dd9eb6be614c1ab5c1f30cd27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:3c:e0:00:48:c7:0f:26:61:40:55:ee:ea:
                    7e:50:0d:5e:37:17:6d:05:55:45:fc:6a:a7:85:16:
                    15:47:a7:a2:19:22:3c:2f:19:6b:25:10:fb:d9:eb:
                    8a:ef:56:41:ce:ff:7f:08:60:f3:24:db:75:fb:36:
                    d1:5f:b1:77:c7:68:49:ea:70:50:b6:97:13:20:38:
                    55:b9:ee:fd:43:80:23:06:d5:6f:2f:a6:5b:b0:1a:
                    1b:5c:f8:57:6c:4d:2e:22:5a:00:8b:74:13:22:df:
                    2d:e3:0b:7b:12:93:02:95:f2:41:00:89:16:c9:0a:
                    28:59:96:4f:32:19:66:a1:13:91:6f:eb:92:9b:f5:
                    8b:db:c0:5b:ab:88:7d:7a:d4:9e:d0:12:0a:7f:74:
                    3f:e9:15:09:31:5c:ea:b3:98:6b:10:2e:bd:8f:ba:
                    9c:b2:cc:07:d2:f0:1b:90:22:46:af:a4:74:00:01:
                    56:11:ff:01:e0:20:4a:91:e9:f6:04:0f:fd:0a:f3:
                    85:7b:95:fc:2f:f6:58:d3:ba:cf:cb:38:4b:21:d7:
                    ed:00:5b:34:82:61:b8:cd:e7:23:96:08:ae:ab:84:
                    6d:46:ab:24:80:50:dd:72:b5:8d:a3:62:c9:ae:d4:
                    7a:a4:5a:0c:be:9e:41:1b:4b:eb:1e:17:df:8f:a5:
                    78:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8C:EB:33:C0:76:45:E7:45:73:66:19:8A:CF:57:85:9E:26:A0:91
            X509v3 Authority Key Identifier:
                keyid:04:E7:DD:2C:10:0C:C6:FF:46:03:3D:6E:BF:1D:72:DF:79:BA:1B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f77ab90cbd16229b500c705ad494b563882e5d72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/8237cd22b031a7dd9eb6be614c1ab5c1f30cd27a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/f77ab90cbd16229b500c705ad494b563882e5d72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.92.0/22
                IPv6:
                  2803:6be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:47:c6:49:f5:71:dd:c2:2e:d4:98:93:b7:5d:c2:ec:af:9f:
         8a:94:9c:1c:07:de:38:5d:d9:b2:0b:19:1a:40:b7:03:f4:be:
         46:77:a2:8d:e7:e3:68:46:1a:18:77:92:f0:c2:48:08:99:eb:
         35:2c:ee:80:05:bd:8b:40:42:05:54:14:7f:08:b9:c3:34:96:
         be:e7:a9:aa:0c:e3:00:7f:2e:9c:8a:a4:2d:26:32:3b:9c:4d:
         6e:17:d0:9f:44:a7:b3:a7:0f:5a:b1:64:4b:cf:95:00:25:91:
         d3:2e:41:a8:96:89:6a:3d:e8:0a:97:f4:ee:6f:ec:06:44:8e:
         17:58:53:ee:f3:a0:d7:6d:d6:d0:b8:9a:e2:d2:c1:06:29:3c:
         b2:15:f2:61:92:96:29:ed:31:81:ce:02:ea:c4:a3:1c:59:4c:
         3b:45:2a:29:63:5e:ff:2d:48:7c:2f:7c:c1:b0:9a:b0:25:6d:
         22:f6:10:a8:e0:35:8c:34:49:1f:4c:d9:d4:64:df:b0:14:42:
         5b:40:d9:e0:f2:eb:e3:d9:e5:3b:e9:b7:ae:58:be:a8:53:b1:
         15:ea:e7:d9:04:d2:bd:ed:e8:b0:7a:6a:e7:4d:fa:62:8d:c9:
         02:8f:d3:9a:bb:14:3b:cc:39:e1:c2:58:d3:47:33:42:e4:dd:
         03:27:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----