Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ecbfa20-6ac8-4fce-9fc0-bbda596b652c/cb3b1c707952ba81fb6311d8537168f19d1fca9e.roa
File:                     cb3b1c707952ba81fb6311d8537168f19d1fca9e.roa (raw, json)
Hash identifier:          eIEK5Jyg1qeDoiiVR7mvOn7fjyFFP5yCxdPbBWB/ovc=
Subject key identifier:   AF:B5:76:7E:BF:B5:12:BB:01:1E:00:C4:FC:5A:DC:78:CE:3F:E8:75
Certificate issuer:       /CN=e84cb642b7860fab75abd8516251a0639a3a2530
Certificate serial:       02B0
Authority key identifier: 12:EF:59:3E:08:7A:C8:DA:F2:5C:35:63:A8:F7:1A:B3:55:62:D5:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84cb642b7860fab75abd8516251a0639a3a2530.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ecbfa20-6ac8-4fce-9fc0-bbda596b652c/cb3b1c707952ba81fb6311d8537168f19d1fca9e.roa
Signing time:             Sun 14 May 2023 17:42:03 +0000
ROA not before:           Sat 13 May 2023 17:42:03 +0000
ROA not after:            Wed 14 May 2025 17:42:03 +0000
asID:                     271819
IP address blocks:        170.80.200.0/22 maxlen: 24
                          2803:c810::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84cb642b7860fab75abd8516251a0639a3a2530
        Validity
            Not Before: May 13 17:42:03 2023 GMT
            Not After : May 14 17:42:03 2025 GMT
        Subject: CN=cb3b1c707952ba81fb6311d8537168f19d1fca9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:22:5a:41:9a:d9:7c:d8:7f:aa:07:a0:08:29:
                    b6:dc:a6:47:e7:e9:d4:17:ce:60:32:fa:84:d4:f6:
                    91:4f:05:41:73:ee:f9:73:76:63:f7:27:d1:4b:67:
                    3e:0a:4a:69:d7:f9:9a:6f:14:49:7b:c7:31:a7:93:
                    37:93:8b:a6:1b:4f:a3:57:c8:05:7a:74:7f:b6:9a:
                    d0:81:35:30:14:27:b3:3d:3b:07:71:6e:88:34:42:
                    95:14:a4:eb:19:dd:90:17:a4:26:60:f9:45:57:22:
                    cf:41:41:82:c4:95:16:af:c6:87:09:68:e9:09:b8:
                    7c:5e:9b:28:c0:d5:59:2e:74:95:ed:73:9a:67:72:
                    61:61:68:aa:45:f5:8b:b3:e2:ae:f1:31:cd:38:7f:
                    0c:d9:5a:5a:e2:74:b2:d0:b4:38:a3:d5:71:21:32:
                    49:4a:df:9d:a2:0d:e5:0f:c0:e9:5f:1e:fe:ef:88:
                    c7:a6:a0:41:45:bd:d9:31:9d:f2:27:1d:55:e9:5a:
                    22:d3:4b:a3:c2:50:cc:c1:f9:52:24:7c:d1:d5:4c:
                    a1:27:46:54:4a:da:3c:06:b1:db:d4:11:89:f1:83:
                    93:3a:2d:e8:20:a8:f2:44:d3:0c:f7:9a:7b:34:3c:
                    3c:0e:11:41:8e:3b:30:f7:5b:4e:53:24:1a:a1:a0:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B5:76:7E:BF:B5:12:BB:01:1E:00:C4:FC:5A:DC:78:CE:3F:E8:75
            X509v3 Authority Key Identifier:
                keyid:12:EF:59:3E:08:7A:C8:DA:F2:5C:35:63:A8:F7:1A:B3:55:62:D5:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84cb642b7860fab75abd8516251a0639a3a2530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ecbfa20-6ac8-4fce-9fc0-bbda596b652c/cb3b1c707952ba81fb6311d8537168f19d1fca9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ecbfa20-6ac8-4fce-9fc0-bbda596b652c/e84cb642b7860fab75abd8516251a0639a3a2530.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.200.0/22
                IPv6:
                  2803:c810::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:65:4c:7b:ef:f5:a9:f9:51:b5:b0:e6:46:84:69:ee:30:73:
         f3:d8:8b:90:52:e1:3f:97:d4:51:55:10:34:94:bf:54:13:b1:
         79:7d:45:f6:7e:5c:17:7e:5b:69:25:2b:da:c6:e1:00:c9:c3:
         15:75:bb:0c:0d:1f:af:1e:de:6f:48:db:6e:54:a7:dd:a5:e0:
         48:b4:c2:de:09:a2:d7:db:8d:35:b4:81:06:ba:53:cc:a0:09:
         37:82:53:1b:d9:0b:23:7a:c9:de:56:e5:dc:25:f0:d6:7b:f9:
         10:14:44:ae:23:2b:20:5a:e5:5a:15:ba:53:85:01:3f:78:90:
         53:5e:f8:71:18:da:11:ce:c9:82:15:ed:51:98:bf:31:ed:98:
         db:9c:93:ad:24:0c:12:43:cf:aa:5d:14:a7:60:2e:76:d5:3a:
         46:fe:37:bf:a5:56:54:8f:27:e8:fe:2b:bf:a5:d8:d7:a5:79:
         46:66:e2:7d:6b:70:47:09:6d:dc:dc:be:e0:04:40:92:2e:f8:
         32:8f:74:bb:59:28:c9:46:c2:53:ea:f8:c5:d9:f2:de:b9:cc:
         5a:55:e6:d7:0b:52:b8:53:85:21:64:2e:9a:5d:5b:33:d0:04:
         5b:52:18:a8:15:25:13:64:ec:71:41:c4:a7:f4:00:ac:cd:82:
         94:23:33:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----