Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/d4df8bc1eb8a8eba625afba230a3adb6ae51b06d.roa
File:                     d4df8bc1eb8a8eba625afba230a3adb6ae51b06d.roa (raw, json)
Hash identifier:          7nII2SmBrBla6y8Rtjutfc1Me1hKFSmK0sQqAf4N9gs=
Subject key identifier:   CA:FC:92:A1:91:BC:85:E4:2F:AF:75:59:45:0B:E1:05:95:7B:F7:DB
Certificate issuer:       /CN=9c7da47e32403057dfd314b092451260ac87e53f
Certificate serial:       23BCE4
Authority key identifier: EF:B2:C0:02:F9:14:87:9E:0E:89:CE:CD:21:7F:0F:CC:47:F4:F5:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c7da47e32403057dfd314b092451260ac87e53f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/d4df8bc1eb8a8eba625afba230a3adb6ae51b06d.roa
Signing time:             Fri 06 Oct 2023 19:04:39 +0000
ROA not before:           Thu 05 Oct 2023 19:04:39 +0000
ROA not after:            Mon 06 Oct 2025 19:04:39 +0000
asID:                     264858
IP address blocks:        170.82.244.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2342116 (0x23bce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c7da47e32403057dfd314b092451260ac87e53f
        Validity
            Not Before: Oct  5 19:04:39 2023 GMT
            Not After : Oct  6 19:04:39 2025 GMT
        Subject: CN=d4df8bc1eb8a8eba625afba230a3adb6ae51b06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:78:89:92:09:cb:b7:17:4d:e6:27:c6:43:20:
                    11:97:eb:67:30:81:b8:b8:59:23:91:d9:33:8f:a0:
                    63:49:71:46:ae:bd:f7:f0:8e:17:d4:4c:73:44:bc:
                    8c:ed:40:ce:4d:ff:b7:8b:b2:a1:8f:95:e4:6e:87:
                    45:aa:1c:bf:fe:5d:41:a6:97:33:bb:78:b3:3f:3d:
                    f6:81:a3:02:e6:79:a6:7d:86:0b:27:c2:ee:41:27:
                    d1:47:23:ca:ea:c0:c0:9d:61:e0:94:a0:6a:ad:09:
                    0b:dc:17:e7:68:ab:6e:d3:b5:c0:ef:70:2f:2b:e6:
                    35:98:0c:26:f5:40:30:20:74:36:9f:64:ea:36:47:
                    90:38:23:35:17:8f:29:4f:fd:4e:ee:28:b5:84:4e:
                    98:3f:f8:bb:ee:6a:bd:c9:c7:e4:00:c4:05:de:40:
                    61:f4:92:10:b8:3c:2c:5b:83:22:5b:06:f4:c7:fe:
                    a2:71:c9:ad:cc:fb:44:19:78:5a:94:6a:cb:c0:4d:
                    64:69:d2:3d:11:11:72:1f:cd:fc:15:9c:cc:b3:3d:
                    0f:c1:7a:74:1c:15:6c:6e:57:e6:dd:81:0a:bc:86:
                    b8:86:ac:8b:d5:e3:ae:b8:c2:e5:24:12:51:cb:4c:
                    f7:ef:88:65:70:be:a1:96:3c:4a:1a:fe:08:6e:73:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FC:92:A1:91:BC:85:E4:2F:AF:75:59:45:0B:E1:05:95:7B:F7:DB
            X509v3 Authority Key Identifier:
                keyid:EF:B2:C0:02:F9:14:87:9E:0E:89:CE:CD:21:7F:0F:CC:47:F4:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c7da47e32403057dfd314b092451260ac87e53f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/d4df8bc1eb8a8eba625afba230a3adb6ae51b06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/9c7da47e32403057dfd314b092451260ac87e53f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:33:f8:2a:6b:bd:f4:7b:8b:80:ca:7e:3b:a1:2b:b3:c8:
         4e:f6:39:ab:1a:ab:86:5b:1d:ff:e1:d9:17:f2:bb:95:2f:62:
         ef:f7:39:c7:25:f5:53:9b:d1:a7:6b:fa:24:7f:b5:79:a7:65:
         54:c5:5c:e6:8c:02:90:8c:03:a2:66:1b:cb:ef:45:2d:2f:20:
         12:8b:48:47:bd:a0:26:dc:74:4b:b8:2c:ab:0f:c2:55:e3:c3:
         ea:8e:8f:87:a1:23:ee:cb:59:97:72:93:fe:7f:0d:55:9d:55:
         e8:24:7d:7c:11:87:77:68:ab:94:65:cc:a0:2f:ea:37:93:f9:
         19:b6:06:60:2b:8a:c7:6e:8c:c7:c1:2a:3a:63:8f:42:56:ad:
         21:71:f4:07:e6:cf:d0:c5:e8:e9:24:1b:d4:8f:28:86:d1:37:
         9d:45:9a:bf:99:81:48:17:bd:98:e7:09:d8:4c:6d:17:19:e5:
         e5:5d:bc:8e:51:7d:88:ab:41:e2:3f:e7:56:6b:da:03:70:26:
         11:7d:8b:43:77:53:6e:15:92:ec:28:70:12:4e:41:bb:d6:4f:
         46:f0:c4:ce:95:b9:79:95:bc:41:30:12:e8:bc:a9:e9:91:0c:
         dc:b0:8c:bb:f3:6e:fe:1d:e7:e4:2f:d6:b6:ad:82:dd:c1:e3:
         a4:cf:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----