Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/f85b39dce1eb9dc0ad688c6386ca571866f51c67.roa
File:                     f85b39dce1eb9dc0ad688c6386ca571866f51c67.roa (raw, json)
Hash identifier:          bhmcIK2JNXbr/ZPUiQsQdGWdhlPM3kV641wrdwB30X0=
Subject key identifier:   9E:BF:53:25:8C:7E:18:E3:AD:EB:18:C5:64:13:20:97:4B:D1:67:0C
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       038266
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/f85b39dce1eb9dc0ad688c6386ca571866f51c67.roa
Signing time:             Tue 11 Jul 2023 12:56:56 +0000
ROA not before:           Mon 10 Jul 2023 12:56:56 +0000
ROA not after:            Fri 11 Jul 2025 12:56:56 +0000
asID:                     16629
IP address blocks:        186.78.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229990 (0x38266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 12:56:56 2023 GMT
            Not After : Jul 11 12:56:56 2025 GMT
        Subject: CN=f85b39dce1eb9dc0ad688c6386ca571866f51c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6f:8c:a9:72:09:b7:d2:1d:3a:dd:fc:a8:18:
                    a2:2f:3d:61:53:13:8d:a6:f9:2d:21:bb:57:bb:b6:
                    de:77:1a:c4:8c:08:c3:76:30:53:40:fa:b9:51:7d:
                    ad:ff:4b:63:70:9c:a8:e3:49:82:7d:19:7e:51:5a:
                    38:03:77:bc:5a:46:9d:f1:e6:c9:8f:37:17:3e:e1:
                    ec:d8:fb:51:89:d0:25:9f:a5:e8:d0:fa:fb:ff:b3:
                    34:2e:af:4d:ad:26:8c:f6:a7:56:25:81:98:75:2e:
                    8a:84:15:dd:e0:5e:d8:69:fa:12:50:e5:43:cf:7e:
                    27:f0:00:55:dc:8c:d7:24:2c:99:f9:3b:85:2b:aa:
                    b8:0b:ed:e6:07:4f:30:a8:ec:43:35:9a:6c:89:f4:
                    6d:19:24:af:d6:6e:35:0e:9a:14:ba:8d:d8:d7:22:
                    e3:3d:89:a5:6b:99:09:e5:42:cd:27:aa:e2:39:78:
                    c0:ea:53:34:c8:83:97:52:a2:c9:43:de:94:e0:61:
                    3f:45:58:91:70:d4:21:88:91:e3:ae:58:f3:47:e8:
                    5c:a7:fa:46:b0:87:fa:03:13:29:f3:9f:60:5d:20:
                    7d:40:01:13:55:7e:bb:6f:2d:a3:18:be:f5:da:98:
                    ec:b3:ce:67:cd:87:a3:0d:cb:a7:4e:f8:8d:69:f0:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BF:53:25:8C:7E:18:E3:AD:EB:18:C5:64:13:20:97:4B:D1:67:0C
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/f85b39dce1eb9dc0ad688c6386ca571866f51c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.78.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2d:17:d3:70:b6:ab:27:45:38:1d:1c:a7:93:1d:27:fd:40:43:
         f2:a6:2e:0a:fb:ab:88:55:7c:9f:28:c5:16:8b:6d:bb:84:55:
         77:23:32:fc:4c:c6:41:d0:8a:c3:d9:b9:b2:20:ab:9e:02:3f:
         64:8b:9d:32:b9:d9:30:54:8f:61:38:35:1d:ff:49:e6:01:7f:
         12:f2:70:8a:b2:3c:75:19:e8:be:86:ef:17:2b:40:96:4e:75:
         99:dc:56:8c:06:84:58:a2:fb:96:74:c7:24:c1:f0:96:81:e3:
         f7:39:ef:31:b2:fb:74:9b:65:78:c9:a2:1b:29:04:bd:5e:5d:
         16:3b:40:af:c6:c8:95:7d:ed:6c:fa:97:9c:c7:8d:d9:24:4c:
         92:55:35:88:87:7d:55:cb:5c:ea:44:3e:47:0a:69:eb:75:f4:
         39:5c:48:6f:cd:92:25:aa:3a:9f:0f:83:47:4b:b7:5a:95:ac:
         8a:57:67:42:07:00:ed:68:81:f5:9b:87:b2:be:14:a5:41:f9:
         7f:e1:1f:1b:b2:ce:75:e2:66:8f:23:17:dd:e2:92:da:47:11:
         83:de:69:de:ca:c6:70:44:fd:e5:05:d7:16:3c:7c:c5:5f:ad:
         12:5e:37:08:bf:fe:48:7c:37:94:80:48:a3:42:9d:e7:6f:94:
         f5:07:3e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----