Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/493fe8dc-9381-4b65-924c-e37d7fc847ad/176a68d70f31ee4b155618bed26ec1cad6ffae65.roa
File:                     176a68d70f31ee4b155618bed26ec1cad6ffae65.roa (raw, json)
Hash identifier:          zR8YcCsKDWcnp2kKhUDJQNW9itPNUPCOj4FQmBjbqgo=
Subject key identifier:   67:51:2E:5C:4F:54:F2:E0:80:38:83:95:60:18:0A:5B:5B:08:B5:A9
Certificate issuer:       /CN=36db2a9dc7f54f37a110e0c2fb87e02babea4634
Certificate serial:       1037D8
Authority key identifier: AD:1E:18:01:5D:B9:7A:96:FA:44:6D:6F:FE:CE:11:50:A8:02:E9:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36db2a9dc7f54f37a110e0c2fb87e02babea4634.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/493fe8dc-9381-4b65-924c-e37d7fc847ad/176a68d70f31ee4b155618bed26ec1cad6ffae65.roa
Signing time:             Wed 18 Jan 2023 03:52:07 +0000
ROA not before:           Tue 17 Jan 2023 03:52:06 +0000
ROA not after:            Tue 18 Jan 2028 03:52:06 +0000
asID:                     28398
IP address blocks:        138.99.148.0/22 maxlen: 22
                          2806:206::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062872 (0x1037d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36db2a9dc7f54f37a110e0c2fb87e02babea4634
        Validity
            Not Before: Jan 17 03:52:06 2023 GMT
            Not After : Jan 18 03:52:06 2028 GMT
        Subject: CN=176a68d70f31ee4b155618bed26ec1cad6ffae65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:8a:27:dc:ab:30:75:b0:d7:e0:48:63:2b:
                    3c:fd:e9:7e:9e:7d:a2:d5:8a:05:21:e2:08:c7:b3:
                    99:8a:08:98:a1:3d:ba:1b:3f:ea:2b:7d:5d:d2:06:
                    19:3a:81:1d:4a:ba:45:85:62:58:bd:7b:3a:6f:db:
                    02:5f:ca:52:db:9a:28:e4:46:57:c1:14:d5:38:a6:
                    c1:41:20:a4:10:b7:f0:9c:61:3a:96:67:81:94:bf:
                    d8:b4:92:51:db:24:43:db:c6:29:96:f2:20:14:0a:
                    26:91:b8:1c:38:53:89:2e:9d:05:45:e6:b9:2c:1e:
                    f6:09:d3:1c:34:65:bf:3b:b2:30:13:9c:7d:97:fd:
                    47:d1:bf:ea:b0:3b:22:a6:b5:ae:98:96:7a:5e:66:
                    27:bf:83:b1:72:b7:3c:b2:0a:3e:ea:b5:55:79:76:
                    2b:64:c0:e6:46:0a:3a:a0:12:10:6c:7f:dd:99:3b:
                    da:94:52:d2:74:c7:fb:c1:0a:7a:e6:0a:6b:2d:21:
                    a0:38:56:8e:d5:f7:44:36:0a:d8:01:12:c9:bb:41:
                    40:81:d0:c7:a8:ef:bf:01:63:f2:74:3b:67:44:68:
                    24:62:6c:0e:0e:de:60:c6:13:d6:b9:7f:1d:92:7c:
                    e7:97:53:f2:fd:ea:a9:d0:a6:e0:42:25:08:d8:7a:
                    29:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:51:2E:5C:4F:54:F2:E0:80:38:83:95:60:18:0A:5B:5B:08:B5:A9
            X509v3 Authority Key Identifier:
                keyid:AD:1E:18:01:5D:B9:7A:96:FA:44:6D:6F:FE:CE:11:50:A8:02:E9:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36db2a9dc7f54f37a110e0c2fb87e02babea4634.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/493fe8dc-9381-4b65-924c-e37d7fc847ad/176a68d70f31ee4b155618bed26ec1cad6ffae65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/493fe8dc-9381-4b65-924c-e37d7fc847ad/36db2a9dc7f54f37a110e0c2fb87e02babea4634.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.148.0/22
                IPv6:
                  2806:206::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:27:23:13:2b:7b:7d:60:3d:34:d6:c4:f0:84:b8:2e:8c:34:
         8a:5d:61:62:ba:c3:4c:fe:71:43:a8:f1:88:8b:8a:be:58:51:
         b6:49:74:df:15:94:69:4f:47:e0:a2:cf:56:7f:48:40:09:47:
         d0:a3:62:f0:76:47:52:51:50:a2:01:4d:c6:93:4c:c4:16:e0:
         c7:67:64:6d:0c:80:61:4b:09:06:0a:2e:86:0f:fa:31:5f:df:
         52:7a:09:1e:40:09:56:14:7e:00:cb:52:0e:8b:30:c0:d3:aa:
         31:f7:ea:d5:c9:7e:51:cd:a9:7a:d0:18:11:06:c8:af:ce:3e:
         72:36:c3:dd:18:27:0a:32:04:6c:d9:87:65:f3:05:71:28:b3:
         0b:15:d3:18:c5:02:06:79:35:4d:5e:7e:94:12:87:44:cf:a7:
         df:c3:9f:1f:ba:66:43:cc:3b:36:58:48:78:4d:c2:28:d8:61:
         ea:e4:56:af:fb:97:be:39:d1:92:3b:ba:ce:c7:af:5a:ee:0a:
         09:18:4e:fa:39:8b:c9:20:8f:a2:09:06:14:bd:4f:37:3e:b3:
         b6:4b:1f:6b:ab:fd:c2:f6:97:b7:42:e3:b6:43:de:89:49:02:
         cc:da:f5:c6:20:10:56:88:7a:41:f1:16:66:dc:ee:7f:a9:6f:
         41:79:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----