Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/b3e332044d7a8913fea586070576f5628fed16a5.roa
File:                     b3e332044d7a8913fea586070576f5628fed16a5.roa (raw, json)
Hash identifier:          k1o5XUr6PxG0pNHRpZVo+11oCIkRXMfxOBcD/kFnle4=
Subject key identifier:   9F:98:35:B9:1B:D5:EB:A0:2F:C4:8A:A9:40:6E:2D:38:02:42:FB:71
Certificate issuer:       /CN=42479c80014a47a7803e1ff86f78d4c83197ce2d
Certificate serial:       235F5F
Authority key identifier: CF:86:4D:14:6B:B2:39:D0:E7:27:E6:F8:BF:91:3B:3F:7B:28:86:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42479c80014a47a7803e1ff86f78d4c83197ce2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/b3e332044d7a8913fea586070576f5628fed16a5.roa
Signing time:             Mon 21 Aug 2023 00:35:34 +0000
ROA not before:           Sun 20 Aug 2023 00:35:34 +0000
ROA not after:            Thu 21 Aug 2025 00:35:34 +0000
asID:                     265728
IP address blocks:        160.238.184.0/22 maxlen: 24
                          2803:3c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2318175 (0x235f5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42479c80014a47a7803e1ff86f78d4c83197ce2d
        Validity
            Not Before: Aug 20 00:35:34 2023 GMT
            Not After : Aug 21 00:35:34 2025 GMT
        Subject: CN=b3e332044d7a8913fea586070576f5628fed16a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d7:cb:96:ed:d9:e6:78:10:6c:60:74:b2:05:
                    df:4f:78:95:4a:6b:ca:f9:c4:08:0d:89:35:22:2c:
                    91:cc:1e:e7:2f:b5:2a:60:50:8a:41:8c:ad:a8:29:
                    f5:87:c4:0c:cb:94:d8:ac:ce:84:02:af:95:da:89:
                    ee:43:b1:05:b8:c2:7d:ef:c7:2a:6f:8f:f6:d1:56:
                    99:a7:e1:95:2d:1c:1e:1d:38:ad:cb:21:e1:ca:d8:
                    d5:01:26:1f:13:05:ac:47:d0:e1:fa:c2:59:b7:08:
                    91:2c:87:b1:be:ae:2a:36:83:1a:0f:f8:75:74:f2:
                    25:53:e5:49:e0:cc:6d:af:48:7b:26:73:a3:0f:4b:
                    46:1f:8c:b5:81:dd:02:f8:4f:11:81:2c:82:2d:29:
                    f1:bf:43:5f:3c:53:ac:68:73:13:f7:ec:62:97:a7:
                    be:10:1f:ee:f4:e2:02:ab:f3:f3:27:7b:1d:1e:23:
                    68:3f:ea:01:f1:cd:2a:e6:ab:ca:46:c0:12:e1:41:
                    74:83:a3:40:6e:bf:a5:36:a6:19:0b:dc:b1:e5:1a:
                    2f:ec:62:0a:1c:59:09:ac:61:0a:4d:03:8a:9f:31:
                    a7:cd:93:54:ce:9d:0e:52:2b:62:d1:9b:47:42:cf:
                    d2:fb:16:67:85:4c:02:26:e4:f3:28:73:2f:de:c2:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:98:35:B9:1B:D5:EB:A0:2F:C4:8A:A9:40:6E:2D:38:02:42:FB:71
            X509v3 Authority Key Identifier:
                keyid:CF:86:4D:14:6B:B2:39:D0:E7:27:E6:F8:BF:91:3B:3F:7B:28:86:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42479c80014a47a7803e1ff86f78d4c83197ce2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/b3e332044d7a8913fea586070576f5628fed16a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/42479c80014a47a7803e1ff86f78d4c83197ce2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.184.0/22
                IPv6:
                  2803:3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:f7:c7:b8:11:25:c8:6d:7c:be:c6:56:fb:22:5f:b8:29:c5:
         95:cb:e6:82:76:45:9e:55:74:e3:da:86:19:4e:ae:7d:5f:55:
         fe:44:8d:73:94:f6:2c:14:f0:5a:4d:0c:f9:ad:8d:7a:24:d5:
         26:68:9f:c2:a8:48:d6:cd:24:6f:0a:21:e4:9a:66:6c:9b:70:
         19:ae:1f:cf:70:38:49:b9:cd:46:d9:6e:a0:40:1b:22:f5:0c:
         d6:c4:9f:cd:7a:8d:99:a0:46:e7:48:bb:4b:22:51:6f:95:13:
         79:46:d0:2e:0e:68:11:54:68:cf:ef:fd:e9:97:83:13:2d:71:
         8b:85:2e:45:0b:ff:4f:ea:ef:71:14:f0:87:06:c9:15:63:10:
         85:5e:b4:32:c8:b8:d4:7e:18:8a:27:2d:5c:8f:8e:02:3d:57:
         de:a0:73:60:25:18:52:dd:fa:78:91:fa:40:5b:e9:9e:7a:c0:
         1c:7c:d1:c1:5a:a7:4c:6a:60:78:2b:fc:9c:84:2b:a3:6d:ce:
         23:ca:6a:bf:d9:ae:0b:28:e6:ba:21:62:47:9b:97:f4:11:09:
         97:41:0e:d1:a8:cf:e2:50:ea:3f:f1:22:22:19:58:49:6c:17:
         5a:d2:e0:7f:66:a0:0c:a4:bf:5b:bb:9e:8c:35:23:40:55:ff:
         71:a1:ab:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----