Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/7233d70b33bf1e99e09b0a6b435cd547aefaa93b.roa
File:                     7233d70b33bf1e99e09b0a6b435cd547aefaa93b.roa (raw, json)
Hash identifier:          Ui5P/rTjfGFY4DKdezCXR0Rp8Bx6O5rjKKTzixVTfeQ=
Subject key identifier:   C9:7B:43:F7:25:CB:E8:E9:16:CB:C4:1E:0D:4A:43:1E:2A:BA:C6:5A
Certificate issuer:       /CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
Certificate serial:       23F4A2
Authority key identifier: C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/7233d70b33bf1e99e09b0a6b435cd547aefaa93b.roa
Signing time:             Wed 20 Sep 2023 20:55:56 +0000
ROA not before:           Tue 19 Sep 2023 20:55:56 +0000
ROA not after:            Sat 20 Sep 2025 20:55:56 +0000
asID:                     264773
IP address blocks:        168.197.172.0/22 maxlen: 24
                          2803:f0c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2356386 (0x23f4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
        Validity
            Not Before: Sep 19 20:55:56 2023 GMT
            Not After : Sep 20 20:55:56 2025 GMT
        Subject: CN=7233d70b33bf1e99e09b0a6b435cd547aefaa93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:11:2d:ef:52:ba:92:bf:50:13:0f:54:d1:dd:
                    69:40:81:3e:be:34:47:41:b8:dc:33:99:63:27:28:
                    6f:9d:96:d2:28:7e:da:aa:18:32:cf:eb:04:dd:e2:
                    3a:eb:f5:f3:5d:c0:d0:89:52:b5:d2:62:69:5e:11:
                    42:7f:32:53:51:ac:3f:b9:97:78:0d:4d:08:86:84:
                    57:fe:dc:1c:2b:18:77:82:4e:02:18:60:94:33:48:
                    dd:59:ed:5c:9d:00:5d:9b:f4:53:38:2d:e3:37:9b:
                    8d:78:3f:70:49:49:ee:79:59:03:3d:c2:81:17:e2:
                    b2:fd:02:e2:2d:e1:b2:88:c3:dd:55:96:37:22:d0:
                    2b:3e:39:ce:ca:aa:5e:ab:5d:d0:6c:e5:52:f3:ca:
                    40:07:3a:f1:ad:4a:c1:30:8d:7e:c9:1d:d3:7f:ff:
                    92:c5:54:e1:3e:d7:d3:28:9a:fc:39:3c:9c:b1:4e:
                    bd:65:07:df:54:e5:e3:f1:bf:2c:63:82:aa:af:f9:
                    09:58:9b:e8:ba:2f:8a:fc:d9:fc:96:53:ef:5a:06:
                    29:cd:f0:43:18:78:e3:95:ca:f6:08:85:0a:55:c4:
                    11:7b:d9:59:a5:cd:91:6a:7a:1c:f9:42:94:9a:ed:
                    ca:9c:5a:fd:d3:0a:22:3c:5e:93:8f:fc:6a:18:4f:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7B:43:F7:25:CB:E8:E9:16:CB:C4:1E:0D:4A:43:1E:2A:BA:C6:5A
            X509v3 Authority Key Identifier:
                keyid:C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/7233d70b33bf1e99e09b0a6b435cd547aefaa93b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.172.0/22
                IPv6:
                  2803:f0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:0c:09:7f:9e:4b:f2:ea:30:2b:ec:fa:22:38:90:9f:d8:4a:
         5b:0e:ac:ec:00:88:62:dd:58:96:01:e9:2c:a8:3f:66:96:c5:
         67:f0:04:39:50:fa:1b:99:7a:5d:81:4f:e6:7b:e4:a6:84:f7:
         a0:ce:30:eb:d5:16:3b:e1:6f:70:74:38:e1:0a:0a:73:9d:76:
         ad:9d:d6:85:f9:63:dd:64:93:5f:0e:34:82:92:f9:4a:81:d1:
         6d:82:ac:df:6e:ab:d3:71:a4:1e:e7:e9:3f:26:64:a2:68:84:
         9e:0d:73:dd:07:94:ea:65:9c:43:91:7d:c5:64:28:62:78:67:
         84:45:38:a6:63:6d:d6:07:2a:bd:1f:b3:84:b0:03:db:52:f2:
         68:0b:98:83:10:0a:39:71:6d:43:49:b7:76:d4:f0:77:73:18:
         98:2a:e8:c0:a7:a5:b8:88:2b:06:f1:5d:d4:12:b9:c2:c9:40:
         df:52:7d:4c:c5:8c:fa:42:a6:c3:3c:9c:93:8a:38:96:b4:5f:
         42:0f:d5:2b:8d:13:db:cb:01:25:a9:11:fd:23:6d:3f:87:4f:
         37:c6:5d:65:a2:91:fc:23:e8:dc:37:08:86:24:43:5d:77:8f:
         d4:5d:6c:e4:fd:ee:c6:c4:e3:df:3f:c5:85:e1:5c:cb:07:ae:
         da:e1:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----