Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/f9c2c4435e2952e5dd5e94dad419ae03cff9fe67.roa
File:                     f9c2c4435e2952e5dd5e94dad419ae03cff9fe67.roa (raw, json)
Hash identifier:          /wwubQl8y0bKcL19DC8erk2QyG7aytOcfzbS3j7RHX8=
Subject key identifier:   AE:5F:5D:5D:44:E8:FB:EA:D7:10:D5:37:F4:4E:44:3A:18:3A:F4:4D
Certificate issuer:       /CN=5fea161e2c66e493ae97ef08f4b440569dd42244
Certificate serial:       2017EA
Authority key identifier: A9:AB:0C:D1:4A:1A:EE:A7:11:2A:E6:C1:29:3E:B3:33:DB:10:19:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fea161e2c66e493ae97ef08f4b440569dd42244.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/f9c2c4435e2952e5dd5e94dad419ae03cff9fe67.roa
Signing time:             Mon 15 May 2023 16:37:19 +0000
ROA not before:           Sun 14 May 2023 16:37:19 +0000
ROA not after:            Thu 15 May 2025 16:37:19 +0000
asID:                     264838
IP address blocks:        170.239.188.0/22 maxlen: 24
                          2803:3cc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103274 (0x2017ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fea161e2c66e493ae97ef08f4b440569dd42244
        Validity
            Not Before: May 14 16:37:19 2023 GMT
            Not After : May 15 16:37:19 2025 GMT
        Subject: CN=f9c2c4435e2952e5dd5e94dad419ae03cff9fe67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c6:53:b5:56:45:d1:81:dd:8e:97:df:13:09:
                    24:80:80:42:34:8c:e1:1e:d4:c5:fe:12:a5:80:68:
                    46:70:6a:76:42:1b:ab:85:1b:f6:ba:20:14:fb:57:
                    5d:d6:1e:52:93:da:b4:34:41:c3:9b:51:ad:22:55:
                    d4:fa:6b:20:d9:a0:a4:fe:2b:9d:71:ac:b1:1a:2c:
                    51:76:ce:bb:08:4e:d8:67:90:a6:fd:f1:cd:bd:e9:
                    c7:d5:b0:d1:e9:9d:08:35:58:a5:56:94:f0:60:8c:
                    01:8f:df:10:c7:b4:a5:f6:9e:fd:6c:1d:60:c7:f1:
                    99:76:d2:d6:b4:93:86:23:11:47:79:7c:32:fb:66:
                    e8:fc:8c:44:97:29:6e:b7:93:a7:5b:1b:46:12:a7:
                    d9:3e:4b:5a:23:52:ab:aa:ff:67:3d:f5:83:e5:b6:
                    fc:8f:52:42:c5:54:75:78:ff:2b:d2:02:ae:33:95:
                    d2:3a:8c:70:14:c1:14:f5:e9:16:d5:64:e0:82:28:
                    25:0f:a6:cd:5a:93:e9:87:6f:b5:e7:ba:7e:d2:76:
                    05:92:9c:8b:14:14:da:60:a0:64:59:63:8b:22:f2:
                    ed:2b:41:c5:c9:06:57:9d:16:82:d4:d8:bb:1a:3c:
                    fc:05:9c:7c:7a:6b:42:64:88:ea:55:04:25:1f:6b:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5F:5D:5D:44:E8:FB:EA:D7:10:D5:37:F4:4E:44:3A:18:3A:F4:4D
            X509v3 Authority Key Identifier:
                keyid:A9:AB:0C:D1:4A:1A:EE:A7:11:2A:E6:C1:29:3E:B3:33:DB:10:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fea161e2c66e493ae97ef08f4b440569dd42244.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/f9c2c4435e2952e5dd5e94dad419ae03cff9fe67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/5fea161e2c66e493ae97ef08f4b440569dd42244.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.188.0/22
                IPv6:
                  2803:3cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:1d:5f:96:73:55:45:71:ad:de:11:d3:e5:b2:eb:71:0a:1e:
         85:20:00:a7:97:2f:2e:f8:07:71:da:8c:72:22:7b:47:cd:b5:
         2f:f9:db:ba:de:72:78:66:c8:83:c2:87:b5:e6:ef:6d:c8:2a:
         14:2a:d5:8b:2e:d8:d4:44:8d:87:93:96:4d:06:f1:82:e5:05:
         67:d4:5f:ff:06:86:57:cd:16:c2:45:37:fb:5b:b7:eb:dd:ab:
         df:df:a5:c5:ca:0e:d2:cf:46:5a:a9:3d:08:e8:22:ed:5c:ec:
         a7:d1:75:d6:e6:a6:8f:d6:c1:6e:dc:d6:05:0c:59:37:82:eb:
         90:9a:2e:b5:32:02:e1:c6:98:61:7b:40:c2:14:5c:de:52:ac:
         bf:3f:39:f9:33:7d:07:8c:4f:3c:85:a0:bb:b0:ca:d3:16:03:
         e0:b3:68:d8:d5:20:f0:3a:03:15:be:fe:c5:83:60:bc:8a:30:
         e5:17:89:de:fd:93:86:d8:37:e3:2a:6c:0e:d5:1e:86:9e:71:
         d0:e4:06:d1:8e:b3:9b:38:aa:6f:76:31:29:bd:1c:6a:1b:35:
         84:80:8d:ca:cd:e2:83:87:11:ff:34:ef:6b:06:d8:54:26:ed:
         52:16:01:4b:50:db:9f:bd:d3:2d:cf:57:2c:1f:52:92:07:76:
         f2:f6:57:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----