Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/dff033148025996b03c620d1ae115f565609ecf7.roa
File:                     dff033148025996b03c620d1ae115f565609ecf7.roa (raw, json)
Hash identifier:          HOB4+pWWBUWNGsAmJV4FUe9BX83H6Jd1npHQ/70vyj4=
Subject key identifier:   F9:FF:15:2C:6E:D4:AA:F7:5A:8C:76:52:33:AF:41:55:02:F1:B0:6D
Certificate issuer:       /CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Certificate serial:       2B2A6D
Authority key identifier: 2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/dff033148025996b03c620d1ae115f565609ecf7.roa
Signing time:             Thu 15 Feb 2024 21:18:38 +0000
ROA not before:           Thu 15 Feb 2024 21:18:29 +0000
ROA not after:            Thu 15 Feb 2029 21:18:29 +0000
asID:                     394353
IP address blocks:        170.247.170.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2828909 (0x2b2a6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
        Validity
            Not Before: Feb 15 21:18:29 2024 GMT
            Not After : Feb 15 21:18:29 2029 GMT
        Subject: CN=dff033148025996b03c620d1ae115f565609ecf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:d8:8b:a0:e7:f9:08:eb:95:2d:b1:1f:d7:
                    48:8e:93:50:8b:f5:5e:f9:73:64:e3:05:5c:98:52:
                    13:5d:fe:f3:f4:e7:3f:04:29:a7:7c:d7:a3:98:23:
                    99:52:f8:6a:f7:bf:c2:de:6c:f9:57:ba:e3:a6:87:
                    88:4e:c2:34:32:8f:81:b5:81:16:6b:fa:58:9d:e9:
                    d0:ed:ae:fc:3c:8c:11:16:51:48:dd:d4:56:c9:8d:
                    91:05:81:85:68:dc:37:5c:c7:f6:c8:15:bc:c8:be:
                    b5:53:69:28:ec:d4:c2:20:38:ef:72:d4:d5:90:04:
                    67:cf:ec:34:e8:e5:e2:0b:22:46:9c:b6:9d:0f:84:
                    23:99:a9:52:c2:ec:3f:13:1c:55:dc:4c:f5:cd:c0:
                    3b:f5:ad:e2:07:55:bd:29:41:65:ae:ef:60:bc:1e:
                    b4:09:f3:8c:47:b9:80:96:b9:32:61:93:4c:a3:58:
                    01:d0:2d:66:50:89:dd:f2:af:de:48:b1:3d:b9:57:
                    e7:53:73:7f:6c:90:8f:60:1a:64:64:53:59:91:1b:
                    d6:d8:5c:53:df:2d:96:47:c3:aa:7e:ae:0e:0f:4e:
                    16:f3:66:ab:81:99:bd:9e:7b:e5:ed:6a:92:71:b3:
                    5b:9c:66:07:46:10:4b:e4:5e:d4:89:a9:1e:f8:bf:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FF:15:2C:6E:D4:AA:F7:5A:8C:76:52:33:AF:41:55:02:F1:B0:6D
            X509v3 Authority Key Identifier:
                keyid:2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/dff033148025996b03c620d1ae115f565609ecf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:b9:7b:0a:97:33:eb:fe:40:81:e1:4e:c7:df:b5:79:49:90:
         88:58:48:d4:f6:94:bd:16:1a:fb:1d:35:2b:ec:ac:0e:d4:27:
         72:22:4c:c9:52:6b:b3:7f:5e:e0:3d:fe:a2:49:e9:a6:c7:6d:
         12:6a:56:13:71:5b:00:0c:51:22:ea:f7:a6:b0:2e:b7:d1:39:
         9a:0c:8b:b8:0e:11:5f:4b:76:e5:47:b7:3f:bc:d3:bf:7b:71:
         bc:ba:b2:f5:7d:e3:cd:4b:08:66:5e:b6:6a:25:02:96:49:0f:
         c7:5e:46:bc:6a:fb:44:ea:7c:4c:6c:a2:14:20:07:dd:a9:de:
         35:7c:18:7e:77:f2:ec:64:92:c3:ab:24:b9:d8:4e:d0:67:9a:
         9f:16:75:c6:c4:0b:af:8c:7a:ac:0b:b0:bd:65:7b:d8:b9:32:
         54:7a:47:a9:e8:fe:ea:9e:ae:46:fc:13:ff:f6:4b:3e:c6:b6:
         8a:c2:1e:2a:31:ef:56:55:2a:ca:d7:dc:b2:d7:59:8c:2b:3c:
         66:f7:4b:cf:0a:aa:02:b1:fc:1f:f5:55:cc:65:0b:55:90:02:
         cc:86:2a:a4:dd:76:1c:4e:5d:22:a6:71:9a:f3:9f:39:18:db:
         22:76:17:bc:0c:24:bb:1d:91:39:f5:6b:c2:89:33:10:95:d9:
         6b:79:b9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----