Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37c413f5-3a98-401d-9f0a-a3f221857e50/146da571fd8c0dae2f55d0f8dfe313d9c606fe2a.roa
File:                     146da571fd8c0dae2f55d0f8dfe313d9c606fe2a.roa (raw, json)
Hash identifier:          iEHZg6Zduy9JM5nm5MYWU43AbitJOxioE+12P1H/KCg=
Subject key identifier:   CB:0B:91:14:5F:C8:6B:55:C4:EC:87:8C:FB:7C:0B:38:02:DB:AC:C9
Certificate issuer:       /CN=a270232b8c133bf837c7d6af508613a05b5a58e0
Certificate serial:       01FA9C
Authority key identifier: 09:CB:0B:4B:86:33:25:4B:64:DC:5B:A5:2E:62:C2:1F:2B:F2:B2:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a270232b8c133bf837c7d6af508613a05b5a58e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37c413f5-3a98-401d-9f0a-a3f221857e50/146da571fd8c0dae2f55d0f8dfe313d9c606fe2a.roa
Signing time:             Mon 19 Feb 2024 16:16:31 +0000
ROA not before:           Mon 19 Feb 2024 16:16:31 +0000
ROA not after:            Thu 19 Feb 2026 16:16:31 +0000
asID:                     64155
IP address blocks:        148.222.228.0/23 maxlen: 24
                          2803:e850::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129692 (0x1fa9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a270232b8c133bf837c7d6af508613a05b5a58e0
        Validity
            Not Before: Feb 19 16:16:31 2024 GMT
            Not After : Feb 19 16:16:31 2026 GMT
        Subject: CN=146da571fd8c0dae2f55d0f8dfe313d9c606fe2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:aa:5b:9a:5b:b5:d5:24:e6:4c:90:7e:b0:99:
                    5c:d5:d8:4a:1f:8c:6c:4c:8a:7b:da:bc:14:22:c4:
                    4d:d3:9b:d1:f1:ad:7e:f7:df:19:a2:99:f8:8e:bf:
                    be:d1:55:7b:35:52:b4:76:e4:34:e6:92:59:5f:2a:
                    97:fc:47:ed:dd:03:5e:7f:a1:52:38:d1:ae:1b:b6:
                    c4:0c:2b:2c:21:6d:6c:6a:18:6e:82:10:41:a5:e1:
                    e4:5f:89:d6:1a:6c:e2:c4:fd:a0:83:69:f5:c2:4f:
                    64:51:d0:67:a1:13:32:56:92:b3:85:aa:7f:b3:1c:
                    90:89:60:a8:37:33:44:26:f5:df:23:83:c9:f2:24:
                    a7:72:72:29:30:4a:3e:0d:6f:31:ec:63:59:b6:6a:
                    ba:5d:2d:e7:e3:37:f6:6f:6c:57:1b:44:90:74:b1:
                    cd:97:e3:7c:6f:6e:92:60:56:ea:4a:36:7f:ba:5d:
                    4d:f8:2f:dd:3b:3e:79:37:f7:ea:fb:1a:52:4b:89:
                    29:12:16:be:fd:14:c2:c7:88:c2:3c:43:d3:18:39:
                    24:c9:9b:aa:91:34:14:51:9d:03:7a:c7:31:77:db:
                    24:63:fb:67:41:7d:1e:7a:ae:af:71:ea:58:a1:68:
                    7a:e8:96:77:e0:41:8f:23:d6:5d:37:73:1e:24:84:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0B:91:14:5F:C8:6B:55:C4:EC:87:8C:FB:7C:0B:38:02:DB:AC:C9
            X509v3 Authority Key Identifier:
                keyid:09:CB:0B:4B:86:33:25:4B:64:DC:5B:A5:2E:62:C2:1F:2B:F2:B2:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a270232b8c133bf837c7d6af508613a05b5a58e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37c413f5-3a98-401d-9f0a-a3f221857e50/146da571fd8c0dae2f55d0f8dfe313d9c606fe2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37c413f5-3a98-401d-9f0a-a3f221857e50/a270232b8c133bf837c7d6af508613a05b5a58e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.228.0/23
                IPv6:
                  2803:e850::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:43:ef:10:f8:eb:4d:32:df:3e:ec:2b:b5:8e:8c:99:01:85:
         ec:17:62:2e:11:3b:4d:1c:46:9a:94:f9:df:e3:2d:d6:d9:3b:
         48:7b:b2:46:a8:d8:f0:07:e0:29:37:ec:d3:fd:56:bf:c9:1f:
         13:08:94:d3:31:4a:e0:15:f7:73:f4:e0:d1:31:95:06:f5:45:
         a8:ce:ca:ba:90:b2:c8:c2:42:30:16:f9:be:82:15:d7:24:af:
         e0:75:cd:20:21:29:82:69:ad:f4:5d:8e:bd:9a:79:43:9f:a6:
         71:41:c2:77:93:d0:76:8e:75:56:fd:3d:c6:68:7f:96:1e:99:
         50:08:a2:6d:fb:fc:0e:d2:97:8b:20:46:be:dd:57:88:e9:ae:
         74:6c:81:1b:68:77:a6:b7:8f:ec:21:0c:0a:14:39:7e:a8:62:
         4e:f1:8a:09:06:db:2e:92:b0:c7:fa:65:d1:2b:56:df:40:0f:
         ba:4d:a5:1e:79:d1:f2:a4:c1:d7:f0:e7:b1:d9:9a:03:21:d8:
         13:3b:55:08:47:14:ef:43:ab:cd:db:55:30:c7:58:89:55:99:
         3b:51:60:95:8f:87:33:86:ac:35:4d:ca:5c:93:7b:af:65:d2:
         a3:ba:e7:ac:37:6e:d5:e7:c2:48:0b:bf:cb:95:a0:fe:a9:e7:
         b6:e9:c0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----