Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/520d46d8-18d0-43a1-9d10-3b2c6547c07f/bea37dbcbfebbcffe4d9a5b88d93002d11745d76.roa
File:                     bea37dbcbfebbcffe4d9a5b88d93002d11745d76.roa (raw, json)
Hash identifier:          0OZepDBZuXmktTiaVGDLEgrCENx9/wk9JH4EWzNCjpM=
Subject key identifier:   4D:93:C2:E8:6E:48:FC:C4:CE:7B:2D:00:1E:3E:55:41:E7:94:29:96
Certificate issuer:       /CN=046c6c87e55bb7fb72fee72270aa89d00135211d
Certificate serial:       234C23
Authority key identifier: FA:AB:BF:64:B3:33:40:93:81:AC:9E:11:A5:E2:28:97:4C:3B:48:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/046c6c87e55bb7fb72fee72270aa89d00135211d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/520d46d8-18d0-43a1-9d10-3b2c6547c07f/bea37dbcbfebbcffe4d9a5b88d93002d11745d76.roa
Signing time:             Fri 15 Sep 2023 08:30:01 +0000
ROA not before:           Thu 14 Sep 2023 08:30:01 +0000
ROA not after:            Sat 13 Sep 2025 08:30:01 +0000
asID:                     264629
IP address blocks:        143.202.32.0/22 maxlen: 24
                          2803:6140::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313251 (0x234c23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046c6c87e55bb7fb72fee72270aa89d00135211d
        Validity
            Not Before: Sep 14 08:30:01 2023 GMT
            Not After : Sep 13 08:30:01 2025 GMT
        Subject: CN=bea37dbcbfebbcffe4d9a5b88d93002d11745d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0c:b8:3e:19:a0:15:bf:1f:ab:15:a4:ae:8d:
                    d7:20:e4:00:c0:d0:f1:d2:02:2f:0e:57:65:9c:4e:
                    ff:fa:85:69:28:e0:a7:8e:e6:cc:41:71:d5:b6:e5:
                    b3:9c:46:bf:82:2b:96:f6:eb:1a:f3:69:f8:8a:79:
                    fa:f5:85:69:08:51:a5:fa:ff:9f:d5:16:06:dd:0c:
                    ee:0b:fb:27:5e:fd:90:b5:00:05:de:11:0f:bc:15:
                    6f:9c:b9:19:ab:05:72:fa:5c:b7:67:41:28:99:a0:
                    1e:55:a8:58:61:55:32:60:8c:6a:b8:0a:8e:d8:6c:
                    a9:64:ec:b4:3d:05:60:4e:de:71:a6:be:eb:6c:83:
                    18:03:32:bc:da:fc:78:54:53:fa:c8:4a:bb:4d:cb:
                    23:08:e5:25:91:7b:50:43:93:40:30:70:ca:1b:83:
                    60:eb:31:73:9c:7a:e2:40:8b:8c:1c:b7:e6:ad:05:
                    48:46:86:c6:6e:a6:22:8e:99:42:fa:dd:e0:cb:49:
                    8c:8e:6f:c2:f7:37:28:be:37:c9:4d:33:a7:10:b9:
                    21:ec:99:8d:1e:f1:d6:dc:6b:62:22:a9:36:bb:05:
                    23:76:fb:39:a3:83:c6:f2:c8:b5:b1:68:0c:92:9c:
                    70:1a:b6:fc:e2:68:a6:ea:5a:d7:3c:ce:01:b9:3f:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:93:C2:E8:6E:48:FC:C4:CE:7B:2D:00:1E:3E:55:41:E7:94:29:96
            X509v3 Authority Key Identifier:
                keyid:FA:AB:BF:64:B3:33:40:93:81:AC:9E:11:A5:E2:28:97:4C:3B:48:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/046c6c87e55bb7fb72fee72270aa89d00135211d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/520d46d8-18d0-43a1-9d10-3b2c6547c07f/bea37dbcbfebbcffe4d9a5b88d93002d11745d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/520d46d8-18d0-43a1-9d10-3b2c6547c07f/046c6c87e55bb7fb72fee72270aa89d00135211d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.32.0/22
                IPv6:
                  2803:6140::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:63:bd:67:c6:eb:2b:fb:40:19:a7:14:1e:52:e3:a8:6f:ac:
         43:ad:39:53:fd:48:a7:0c:31:28:51:3a:6d:84:51:fd:04:6c:
         bc:d9:95:05:77:21:37:f8:f2:87:38:34:98:eb:2f:b8:46:76:
         8f:09:da:b6:13:eb:13:5a:4f:c0:da:ab:64:ad:25:22:10:c2:
         4d:34:ed:55:9c:dd:8e:6a:97:51:64:d8:43:b2:2d:c9:0f:bb:
         7d:73:a2:64:d5:2b:f8:94:35:c9:03:f9:0e:26:33:3a:2c:3a:
         8a:c3:c1:0e:87:f6:45:44:e8:a0:d4:7e:2d:f8:b4:9f:1d:4e:
         01:90:67:c0:26:2c:53:60:26:ef:cf:74:7f:a1:1c:12:26:0f:
         73:27:d0:b5:26:8b:a0:40:89:d5:c6:f0:32:82:56:36:2a:20:
         88:21:ff:f7:f5:ac:61:d9:9a:45:36:32:b0:3f:42:cd:51:02:
         9f:84:b7:07:64:65:79:86:90:9c:67:29:f5:f1:3b:47:ed:3c:
         c9:56:14:d3:2c:d7:e0:ac:ac:37:09:e4:7b:84:24:55:3f:52:
         71:fb:6d:94:05:38:dd:eb:5a:b2:57:09:70:27:5f:5c:f6:12:
         3d:e6:34:b6:9e:2d:35:74:6e:46:d1:8f:12:b5:b2:d6:7b:df:
         26:b8:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----