Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6dcc9eb9-4162-4fdc-a9db-eb44959572ef/05b71feb7c0f287db52037128909735baa2102a0.roa
File:                     05b71feb7c0f287db52037128909735baa2102a0.roa (raw, json)
Hash identifier:          Tr+BYM2F+uGIIlQFf3PcHSSwlKwC/9vAj+yKUxGu6vU=
Subject key identifier:   A1:1C:67:7F:CB:7E:5C:3B:8A:A5:82:40:C1:80:06:6B:8D:0D:BD:E2
Certificate issuer:       /CN=821e1ab92f08ac7402fec3c5b685dc43f4c2f28f
Certificate serial:       214F5E
Authority key identifier: 45:20:96:A6:4C:F8:3A:BF:7A:BC:92:44:FE:61:23:92:1A:4D:67:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/821e1ab92f08ac7402fec3c5b685dc43f4c2f28f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6dcc9eb9-4162-4fdc-a9db-eb44959572ef/05b71feb7c0f287db52037128909735baa2102a0.roa
Signing time:             Sat 29 Jul 2023 18:18:27 +0000
ROA not before:           Fri 28 Jul 2023 18:18:27 +0000
ROA not after:            Tue 29 Jul 2025 18:18:27 +0000
asID:                     264796
IP address blocks:        170.78.40.0/22 maxlen: 24
                          2803:24c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183006 (0x214f5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821e1ab92f08ac7402fec3c5b685dc43f4c2f28f
        Validity
            Not Before: Jul 28 18:18:27 2023 GMT
            Not After : Jul 29 18:18:27 2025 GMT
        Subject: CN=05b71feb7c0f287db52037128909735baa2102a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:47:7a:5d:ef:a9:0c:c7:80:90:ca:54:2b:
                    15:1a:06:22:bb:58:c6:73:de:f4:48:87:cf:c4:3c:
                    c9:ed:ea:e4:85:50:fb:de:73:9d:3a:8a:95:0c:35:
                    cb:cb:8c:0d:a8:98:b5:e2:a5:96:0e:30:a8:22:09:
                    83:53:d3:c1:0f:18:7e:00:59:2c:1a:b7:a5:94:93:
                    62:ef:dc:26:85:08:38:50:f8:79:16:29:ad:df:77:
                    b9:eb:f6:6c:48:32:6f:af:4d:2c:3b:5b:8c:50:2f:
                    33:36:a2:8f:df:09:91:49:a5:00:0d:79:1e:5e:c9:
                    fe:fe:95:78:3e:c0:6f:9f:88:5b:2a:65:d9:c5:8e:
                    7b:2b:3c:0c:37:04:50:cb:16:f2:fe:cb:9f:26:c0:
                    f0:a5:94:4e:6e:fd:93:1f:71:b2:8b:d2:b5:5c:ca:
                    f2:94:1f:e7:a4:e5:13:b9:1c:d0:f9:72:cb:1e:9e:
                    1f:c3:b1:0f:5a:c5:0c:54:fd:0f:43:33:48:11:31:
                    ee:6c:33:a8:75:ce:9b:6d:ea:ed:fb:db:b4:ab:21:
                    17:04:28:0c:a4:f4:0d:22:aa:f8:f2:0d:62:c8:e1:
                    09:25:95:14:c3:4e:43:68:ee:f6:65:50:4f:5c:00:
                    ab:11:e2:3e:28:94:2d:92:f8:4e:0a:a3:90:7f:00:
                    01:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1C:67:7F:CB:7E:5C:3B:8A:A5:82:40:C1:80:06:6B:8D:0D:BD:E2
            X509v3 Authority Key Identifier:
                keyid:45:20:96:A6:4C:F8:3A:BF:7A:BC:92:44:FE:61:23:92:1A:4D:67:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/821e1ab92f08ac7402fec3c5b685dc43f4c2f28f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6dcc9eb9-4162-4fdc-a9db-eb44959572ef/05b71feb7c0f287db52037128909735baa2102a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6dcc9eb9-4162-4fdc-a9db-eb44959572ef/821e1ab92f08ac7402fec3c5b685dc43f4c2f28f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.40.0/22
                IPv6:
                  2803:24c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:33:ba:50:20:74:a4:e3:24:89:09:e6:5a:4c:ae:75:e3:d1:
         36:c3:89:4b:f0:e4:89:93:b5:b5:56:6a:6f:b7:4a:4a:3d:ce:
         11:eb:61:b0:7f:48:ef:ab:59:a9:bc:33:d8:39:a2:00:c7:28:
         48:b0:0b:f7:db:b4:b7:9b:f4:cb:51:db:7c:54:c8:50:0c:2b:
         90:47:f8:ef:c7:4b:ac:27:a4:b6:8b:73:98:9d:a8:28:2b:3f:
         d4:e3:6b:65:9d:28:f9:8a:cc:2f:18:ca:4e:35:ed:70:b6:b1:
         3e:de:89:b0:ba:1b:b1:6b:c8:ec:4e:9b:74:32:17:aa:63:ba:
         3e:2e:ec:b6:3d:fc:d2:4b:4b:5f:3d:c3:fa:83:e5:2b:a2:81:
         a8:91:c9:9c:68:d2:7f:66:fe:77:8f:6d:c0:7c:00:b7:34:17:
         1a:8c:ee:78:1b:e1:3b:c9:db:7f:ab:9d:9b:7b:69:a5:0f:10:
         fb:73:d6:f3:d2:b6:8e:9e:45:62:e7:31:64:68:62:87:1b:35:
         6f:10:c7:7f:19:59:f6:94:4a:b8:4e:f9:24:02:aa:5a:f4:50:
         e9:cb:c2:09:90:ca:63:bb:0f:84:0e:30:5c:cc:d7:1a:0b:7b:
         99:bf:46:15:61:04:58:d4:37:1b:95:0a:e2:32:5a:96:3c:14:
         06:07:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----