Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/e33f863a5b42881bf964e04d318afd689c2337f9.roa
File:                     e33f863a5b42881bf964e04d318afd689c2337f9.roa (raw, json)
Hash identifier:          HTMheUslZnYE2ifs20fdyg+sQ6Y7/5Z9f5uVzcttmdc=
Subject key identifier:   57:7A:1C:B4:E7:54:A3:08:A3:47:94:58:95:45:88:8C:AB:8A:64:05
Certificate issuer:       /CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Certificate serial:       2484C3
Authority key identifier: 93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/e33f863a5b42881bf964e04d318afd689c2337f9.roa
Signing time:             Thu 28 Sep 2023 20:10:19 +0000
ROA not before:           Wed 27 Sep 2023 20:10:19 +0000
ROA not after:            Sun 28 Sep 2025 20:10:19 +0000
asID:                     52468
IP address blocks:        170.244.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2393283 (0x2484c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
        Validity
            Not Before: Sep 27 20:10:19 2023 GMT
            Not After : Sep 28 20:10:19 2025 GMT
        Subject: CN=e33f863a5b42881bf964e04d318afd689c2337f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:15:7b:08:41:be:4f:00:e1:54:de:3a:76:
                    9e:2a:54:4d:e6:a0:4a:49:a3:4f:eb:08:b2:fa:2d:
                    52:c5:aa:74:83:80:e9:c9:e4:55:02:cc:21:73:fc:
                    58:1b:d8:24:ba:97:e3:84:7a:2c:c4:4a:5d:3c:98:
                    97:e0:c5:e7:48:f9:a1:e9:65:f0:7a:2b:27:7c:7c:
                    29:00:4a:86:15:42:56:a7:e6:4e:56:b6:60:86:cc:
                    90:2f:4d:4e:b2:7e:8b:dc:7e:c1:49:05:db:44:84:
                    12:ef:86:69:33:26:ac:70:ba:53:de:12:b5:ea:3e:
                    61:a8:3b:51:b6:33:b0:fc:36:95:95:26:88:18:ee:
                    e6:f9:b9:33:e6:7e:23:37:cc:27:22:74:f2:cc:c4:
                    f7:bb:1d:ac:96:86:3c:83:31:ed:d8:18:61:2c:7e:
                    db:96:5b:52:ab:1d:ab:ee:84:bb:84:8f:9f:28:01:
                    db:6c:e2:c9:c2:1f:81:b0:e5:35:f7:a8:b1:00:9b:
                    38:3a:63:d5:43:47:88:c3:19:16:e0:dc:95:ab:41:
                    ad:71:98:c9:74:7c:c7:d4:b0:eb:ce:a7:3b:d9:28:
                    ad:d3:7f:fc:6b:81:05:71:3f:6a:84:26:d2:9b:c1:
                    42:c4:e2:09:b9:27:54:1e:35:fa:ae:bc:4c:a5:a1:
                    7f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7A:1C:B4:E7:54:A3:08:A3:47:94:58:95:45:88:8C:AB:8A:64:05
            X509v3 Authority Key Identifier:
                keyid:93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/e33f863a5b42881bf964e04d318afd689c2337f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:df:d1:62:2b:d4:de:d1:8c:39:64:ef:7a:43:f7:1e:30:ff:
         41:81:0a:e9:37:aa:aa:16:79:cf:04:8d:76:de:3f:f8:fc:4d:
         77:1f:d6:42:5d:a0:bd:0c:c5:ff:81:d8:94:c5:49:eb:02:ff:
         39:3d:68:17:3a:72:48:71:d9:9d:d4:63:20:5e:e8:25:87:7c:
         93:e8:e0:bf:e3:92:90:a3:0c:a7:b8:28:6e:2b:af:7e:bd:5d:
         18:eb:8f:b5:f8:56:51:6e:7b:26:c5:f2:0f:fa:49:fe:62:81:
         37:68:a8:b2:46:ec:d0:6f:2e:ba:04:5e:f9:88:ba:87:b3:f4:
         36:49:10:01:76:81:6f:26:b6:7d:1a:db:a4:2a:ce:21:7b:00:
         59:dc:24:33:95:31:88:2f:a1:eb:ad:4d:d6:35:e2:ed:08:53:
         16:98:c4:af:ad:b7:bf:67:96:f0:2b:1e:33:a0:ef:81:4a:5e:
         5f:00:f1:53:40:51:b6:64:12:27:35:f2:a4:39:dc:a1:ef:03:
         97:f8:97:d9:3b:de:1a:fe:3c:0a:2b:5b:a3:81:d7:f4:c1:12:
         22:4a:0e:6e:6e:75:0c:ff:3d:53:e6:04:ca:f6:0d:2d:6c:14:
         ee:67:ee:19:16:cd:f6:6a:d6:37:8f:ca:63:c9:99:4b:47:a9:
         73:ab:79:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----