Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/e86a4940768d3dada922af0f7062f4b86cb246d6.roa
File:                     e86a4940768d3dada922af0f7062f4b86cb246d6.roa (raw, json)
Hash identifier:          kpEeiAXvIEXwiWDFQ374JwIaePHJ1yWoy+W+YJ43x/U=
Subject key identifier:   51:EC:EA:3B:57:3D:FF:90:5D:A6:50:2E:77:75:3A:E2:19:17:87:C0
Certificate issuer:       /CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
Certificate serial:       23F9F2
Authority key identifier: C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/e86a4940768d3dada922af0f7062f4b86cb246d6.roa
Signing time:             Wed 20 Sep 2023 20:56:15 +0000
ROA not before:           Tue 19 Sep 2023 20:56:14 +0000
ROA not after:            Sat 20 Sep 2025 20:56:14 +0000
asID:                     264773
IP address blocks:        168.197.172.0/22 maxlen: 24
                          2803:f0c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2357746 (0x23f9f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
        Validity
            Not Before: Sep 19 20:56:14 2023 GMT
            Not After : Sep 20 20:56:14 2025 GMT
        Subject: CN=e86a4940768d3dada922af0f7062f4b86cb246d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b0:b2:be:48:90:86:50:e5:87:0f:6c:a2:01:
                    ab:7a:79:f4:ab:63:fd:41:b5:70:5d:c0:85:fc:e9:
                    c0:c1:fd:17:14:08:bf:bd:e9:13:59:6d:d3:a0:3b:
                    8f:f8:c6:57:19:b7:df:40:62:00:2f:6a:7f:aa:a6:
                    e0:47:5b:fb:fd:d8:e6:4c:d8:bb:89:17:d7:c8:4c:
                    81:f2:1b:98:10:12:00:77:e0:9f:92:e2:2d:e4:3c:
                    4c:56:42:ad:58:93:ee:b5:c2:cc:b8:fe:38:12:cd:
                    ba:d5:f6:4a:d1:26:68:55:41:6e:82:b3:3d:24:78:
                    a4:10:f5:54:0d:e8:96:54:0a:60:e9:5c:f4:db:16:
                    1a:1c:48:98:82:95:15:2c:6f:01:f2:0c:44:df:f4:
                    cf:7b:ac:89:c7:d6:42:06:88:ee:73:e9:6e:52:40:
                    15:17:ee:6d:82:b9:cb:61:8e:0e:2a:80:ed:7f:21:
                    3c:1c:b3:a6:49:a3:1c:4a:df:f8:c9:85:1d:80:58:
                    3a:fa:86:29:4d:a7:20:85:2c:92:84:76:92:4c:be:
                    dc:68:a5:fa:20:83:9f:15:35:2d:0c:e4:50:98:76:
                    c3:54:74:7c:13:46:29:bf:2e:3f:59:43:b3:92:3f:
                    a1:b1:a6:5b:cd:6b:5e:af:16:bf:cc:a1:02:f5:e6:
                    24:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EC:EA:3B:57:3D:FF:90:5D:A6:50:2E:77:75:3A:E2:19:17:87:C0
            X509v3 Authority Key Identifier:
                keyid:C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/e86a4940768d3dada922af0f7062f4b86cb246d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.172.0/22
                IPv6:
                  2803:f0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:a0:91:71:96:33:bb:d7:1a:32:b1:b7:13:6d:d2:a7:fe:
         8a:89:b2:b0:cf:92:39:89:0e:e3:12:d2:e7:c2:a5:be:d1:ff:
         0c:fd:b3:06:eb:0d:72:fd:87:6e:89:2d:6c:22:7c:8e:34:47:
         ff:e0:6a:b5:90:f3:ce:2c:8d:29:8f:16:4b:71:b8:21:6f:25:
         e5:0b:55:16:7b:ee:3f:f8:0b:66:e0:84:86:f5:f8:b0:aa:08:
         bc:6b:82:a6:05:84:fc:a8:e1:fa:1c:5e:a1:29:f8:eb:f4:a5:
         4b:9f:39:f7:d1:2f:81:02:8f:ed:1b:b4:02:76:ff:c3:ee:9b:
         80:b0:61:e9:3f:37:99:e6:ce:67:c2:cd:b0:da:7e:2a:c4:31:
         82:14:2c:77:01:51:ac:93:34:ed:36:77:44:68:bb:86:b6:2d:
         da:10:1a:7f:42:a8:cb:7d:c6:ad:da:80:75:64:28:23:06:b6:
         23:d1:88:b8:81:6c:71:94:43:9b:c4:3c:ac:c1:9f:cb:91:d4:
         67:66:49:9a:91:62:6a:b7:08:0e:91:65:1f:13:5d:b3:35:e1:
         ee:57:09:76:82:96:ac:25:6a:68:4d:59:ca:b9:58:c2:5a:ee:
         63:7e:a2:20:99:67:7a:58:12:d4:12:1e:57:c5:07:1e:ab:05:
         77:2a:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----