Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6d45d450-ba4f-4b12-a148-582dc2a96a4a/9d39f5ef56b8240961e006f0f639cab7eb6cd2be.roa
File:                     9d39f5ef56b8240961e006f0f639cab7eb6cd2be.roa (raw, json)
Hash identifier:          43BZMHjOrpCi5D1ZAHRged4QqJTOPo1DkD/vbTTqQY8=
Subject key identifier:   28:D3:00:82:96:00:7A:01:72:A1:A5:05:EE:A4:64:43:2F:1C:DD:23
Certificate issuer:       /CN=34dfefe96d7a1553a8ffa329c9e565c47bd0aa94
Certificate serial:       0EA227
Authority key identifier: 86:AB:1B:95:A9:91:3F:BB:C9:13:0B:83:86:CC:19:53:8C:44:3B:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34dfefe96d7a1553a8ffa329c9e565c47bd0aa94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6d45d450-ba4f-4b12-a148-582dc2a96a4a/9d39f5ef56b8240961e006f0f639cab7eb6cd2be.roa
Signing time:             Thu 27 Apr 2023 02:33:03 +0000
ROA not before:           Wed 26 Apr 2023 02:33:03 +0000
ROA not after:            Sun 27 Apr 2025 02:33:03 +0000
asID:                     264787
IP address blocks:        168.197.196.0/22 maxlen: 24
                          2803:d8c0::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959015 (0xea227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34dfefe96d7a1553a8ffa329c9e565c47bd0aa94
        Validity
            Not Before: Apr 26 02:33:03 2023 GMT
            Not After : Apr 27 02:33:03 2025 GMT
        Subject: CN=9d39f5ef56b8240961e006f0f639cab7eb6cd2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:59:ea:77:2b:18:11:ed:73:1f:cc:b1:c7:
                    74:6d:76:85:d1:26:0d:c5:a4:43:72:89:c7:13:eb:
                    90:5a:6c:54:8a:a9:2b:80:86:ff:ca:ef:ee:3f:11:
                    e2:88:17:cf:58:3b:90:56:d3:4f:22:f5:a0:fc:a4:
                    96:2e:fc:8b:18:a3:38:72:74:cb:55:89:45:ab:35:
                    85:57:cf:42:19:1b:80:c7:c5:11:50:41:0f:3b:c4:
                    92:b7:24:e3:ae:14:20:08:d6:ce:69:e5:8e:c1:c3:
                    18:03:85:66:ff:88:23:63:2e:08:da:38:f0:ca:ce:
                    bd:00:a2:45:a3:d3:27:e4:87:ff:a2:bf:48:26:3a:
                    d8:ac:f2:aa:80:c7:cc:32:84:74:2d:4d:c6:ed:01:
                    24:43:20:c4:e4:0b:91:f0:7a:9b:04:d7:57:78:3e:
                    29:f5:ce:c3:dc:63:08:63:4d:52:b2:25:bc:a1:9a:
                    dc:df:30:7c:a9:9c:1a:c7:92:ec:f6:fe:20:84:07:
                    7f:14:6f:c3:9a:17:a1:c1:c0:5c:c7:d1:fb:0f:f1:
                    50:97:57:fb:f9:04:a4:38:87:66:01:25:6a:eb:6a:
                    7d:f4:b1:c6:fd:bd:4e:99:b6:fb:70:46:72:d7:70:
                    32:fe:fc:24:bd:7e:a5:1f:7b:c0:3b:09:d7:9a:4e:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D3:00:82:96:00:7A:01:72:A1:A5:05:EE:A4:64:43:2F:1C:DD:23
            X509v3 Authority Key Identifier:
                keyid:86:AB:1B:95:A9:91:3F:BB:C9:13:0B:83:86:CC:19:53:8C:44:3B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34dfefe96d7a1553a8ffa329c9e565c47bd0aa94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6d45d450-ba4f-4b12-a148-582dc2a96a4a/9d39f5ef56b8240961e006f0f639cab7eb6cd2be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6d45d450-ba4f-4b12-a148-582dc2a96a4a/34dfefe96d7a1553a8ffa329c9e565c47bd0aa94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.196.0/22
                IPv6:
                  2803:d8c0::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:b0:97:cf:bc:c4:e5:7f:66:a0:35:b5:ca:36:85:cb:f9:72:
         11:ab:10:00:79:0a:f3:ed:86:b9:62:d5:0e:9d:8f:89:1f:82:
         b1:40:62:90:ec:dc:28:3e:4a:41:40:55:d4:b5:04:14:5a:17:
         f9:62:33:e7:bc:85:04:b8:f1:7d:67:44:cb:b6:c3:cc:d0:22:
         ce:b4:5f:ed:05:5e:0a:72:87:b6:fb:d6:ed:55:f9:d7:35:76:
         64:89:ab:d2:14:83:3f:e0:89:08:9e:9a:db:bb:41:8e:fa:0f:
         ef:7f:7f:54:f1:a2:07:50:de:15:45:90:11:21:d8:07:d8:16:
         40:3f:a5:f0:99:43:e1:62:10:5f:4b:8a:79:d1:e6:f0:1b:dd:
         d9:aa:43:c3:2c:be:07:09:9d:83:f6:da:99:74:aa:26:a6:91:
         96:0b:9a:c8:03:f5:5a:ab:7c:22:91:29:4b:f7:ed:54:27:33:
         fb:99:fc:cb:89:5d:37:cd:5e:7e:33:8b:de:d1:c9:cb:fc:8a:
         f5:ab:de:89:12:0a:95:82:20:d5:66:0c:79:f3:54:2a:db:60:
         56:77:b3:6c:b6:35:79:fb:30:9f:0c:69:35:7b:42:58:2a:88:
         28:fd:bb:7e:b5:3c:b9:12:0f:0c:9e:1b:5b:e5:56:cf:30:bc:
         0b:34:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----