Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40dd351c-cfcb-44e3-98ca-413b9fc35950/952442397446cb4cb9cd3e6028ee17e1a62ca6d2.roa
File:                     952442397446cb4cb9cd3e6028ee17e1a62ca6d2.roa (raw, json)
Hash identifier:          SOaS9ks6E0DdQqwWryLHaxEI1pe9lDdAIS1bT/h3HB4=
Subject key identifier:   62:07:80:B6:2E:9B:D4:55:B4:7F:07:A4:42:CD:A5:30:96:2C:B8:E0
Certificate issuer:       /CN=a77c14a35ce76168c220a6f261b4440c65ee7c38
Certificate serial:       14AC82
Authority key identifier: F2:D4:DC:38:7A:56:75:6E:22:B9:75:AF:55:69:B4:A7:38:CD:85:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a77c14a35ce76168c220a6f261b4440c65ee7c38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40dd351c-cfcb-44e3-98ca-413b9fc35950/952442397446cb4cb9cd3e6028ee17e1a62ca6d2.roa
Signing time:             Tue 26 Sep 2023 10:24:57 +0000
ROA not before:           Mon 25 Sep 2023 10:24:57 +0000
ROA not after:            Fri 26 Sep 2025 10:24:57 +0000
asID:                     52373
IP address blocks:        201.217.244.0/22 maxlen: 24
                          2803:e400::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1354882 (0x14ac82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77c14a35ce76168c220a6f261b4440c65ee7c38
        Validity
            Not Before: Sep 25 10:24:57 2023 GMT
            Not After : Sep 26 10:24:57 2025 GMT
        Subject: CN=952442397446cb4cb9cd3e6028ee17e1a62ca6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:59:d6:2c:1b:cf:e9:b1:b4:b3:ee:2a:e8:
                    7d:cf:44:fc:e4:28:74:05:1b:9e:44:7d:58:cc:e3:
                    67:2c:54:67:14:ea:a5:c9:1e:65:ce:d2:88:63:46:
                    2a:3f:cc:31:e7:60:4e:85:e2:ea:d3:d4:f7:fc:86:
                    18:75:5f:2c:1a:8a:ac:48:94:2a:23:dc:6a:6b:82:
                    d9:40:3c:08:25:4c:07:05:3b:85:3f:a7:fa:ee:ac:
                    d5:7e:43:d3:d6:3c:c2:13:7d:02:75:d8:59:d4:d9:
                    95:e4:4d:16:ad:59:60:d5:e6:c1:ed:6d:63:21:c4:
                    7c:db:62:4c:45:35:4e:78:91:4e:3d:bf:ba:43:af:
                    a9:54:b5:8d:3c:5d:78:67:08:f6:97:59:e0:b5:7f:
                    81:bb:67:37:80:38:ef:35:f7:3b:4f:00:2e:d1:d9:
                    75:ce:9b:2e:87:88:e7:70:ef:be:a6:77:86:a2:a0:
                    27:0b:d1:71:67:9c:c5:f9:b6:a0:f9:95:e9:02:2e:
                    05:fe:aa:32:de:c8:92:e4:5b:fc:c6:4b:f6:58:66:
                    5f:45:2d:59:cc:d6:a0:a4:1f:ef:c9:0c:a4:c5:1d:
                    a3:73:b2:12:22:0d:cf:31:a4:b4:d4:b7:38:e3:e4:
                    4e:33:9b:26:89:fb:28:77:47:66:f1:b3:39:e7:bb:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:07:80:B6:2E:9B:D4:55:B4:7F:07:A4:42:CD:A5:30:96:2C:B8:E0
            X509v3 Authority Key Identifier:
                keyid:F2:D4:DC:38:7A:56:75:6E:22:B9:75:AF:55:69:B4:A7:38:CD:85:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a77c14a35ce76168c220a6f261b4440c65ee7c38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40dd351c-cfcb-44e3-98ca-413b9fc35950/952442397446cb4cb9cd3e6028ee17e1a62ca6d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40dd351c-cfcb-44e3-98ca-413b9fc35950/a77c14a35ce76168c220a6f261b4440c65ee7c38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.244.0/22
                IPv6:
                  2803:e400::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:33:b4:22:5b:ea:50:6f:28:13:5a:e6:f4:17:10:d8:5f:ab:
         bd:d2:ab:2d:9c:56:af:ff:48:11:ed:ca:bd:66:a1:f5:1f:3f:
         ec:28:5e:71:5d:d7:3d:83:e4:d1:80:98:16:ad:8f:3b:db:2a:
         75:81:9d:c4:ff:7c:58:3a:90:68:33:4b:c0:56:4a:61:70:8b:
         48:78:42:a3:8c:bc:0c:0e:c1:b3:9f:66:6a:f3:21:8f:9c:88:
         8d:9a:e0:71:7e:3f:7c:aa:18:10:40:2c:4a:3c:fc:30:c2:b1:
         5c:ed:54:2e:af:d4:36:c4:41:8d:b6:1e:e0:d1:2c:5f:07:57:
         e8:ed:08:3f:0e:22:d1:3b:b2:91:3d:c1:bf:16:0f:a7:02:47:
         2d:24:17:30:61:2f:e0:0e:3d:cf:00:43:bc:8c:5b:3e:da:2d:
         79:bd:fd:5d:54:12:14:7e:f7:5b:02:38:35:63:ed:28:ad:83:
         3e:e5:2f:0c:12:2b:53:be:7b:e5:b5:96:e3:b1:8f:90:ab:60:
         0c:9e:8c:42:6e:f3:4b:b4:17:eb:ba:c2:3b:c3:b6:37:e5:11:
         a5:99:88:0a:02:7f:41:a2:80:f5:8f:9a:ed:d2:43:14:d6:ea:
         a8:9c:8b:e5:60:b4:83:33:5b:08:24:aa:4c:98:ca:79:bd:ff:
         01:4f:9c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----