Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/733762e7-6c26-4327-bdfb-d505e6543210/010c5f23d9c6712a098a66af299d0e6974d5b78f.roa
File:                     010c5f23d9c6712a098a66af299d0e6974d5b78f.roa (raw, json)
Hash identifier:          6mImpBbw2vgANtw41/n7SdnW/PMeYl0RpINbwjdAJdA=
Subject key identifier:   CF:64:3C:81:17:3F:3A:78:93:E1:BC:FE:B8:95:48:2A:34:A4:1F:BD
Certificate issuer:       /CN=5de7951af17313ff75f3239cc744c63f2ab25b0b
Certificate serial:       23C224
Authority key identifier: 56:D3:D4:34:73:6F:00:94:5B:C2:3E:F0:F2:0A:57:85:EB:27:1E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5de7951af17313ff75f3239cc744c63f2ab25b0b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/733762e7-6c26-4327-bdfb-d505e6543210/010c5f23d9c6712a098a66af299d0e6974d5b78f.roa
Signing time:             Mon 11 Sep 2023 21:37:19 +0000
ROA not before:           Sun 10 Sep 2023 21:37:19 +0000
ROA not after:            Thu 11 Sep 2025 21:37:19 +0000
asID:                     28007
IP address blocks:        168.232.28.0/22 maxlen: 24
                          2803:6340::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2343460 (0x23c224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5de7951af17313ff75f3239cc744c63f2ab25b0b
        Validity
            Not Before: Sep 10 21:37:19 2023 GMT
            Not After : Sep 11 21:37:19 2025 GMT
        Subject: CN=010c5f23d9c6712a098a66af299d0e6974d5b78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:6c:2e:04:88:1a:bc:88:10:ac:95:8f:fb:
                    c5:a4:f2:ef:14:03:c3:2c:46:df:c1:b4:c5:cf:e8:
                    d4:bb:5d:99:7b:59:e9:ef:bf:29:79:3e:4b:a1:0f:
                    21:09:d1:2d:2f:ff:c8:5f:64:6e:26:fe:80:43:ef:
                    40:90:d6:5d:92:96:a8:e2:8d:33:92:bf:21:1e:b7:
                    4a:14:bc:9f:bc:46:44:bf:91:01:e0:fc:5f:a4:3b:
                    34:18:e9:bc:0d:e1:a7:91:5c:80:bb:09:47:13:38:
                    c8:db:33:25:03:0c:f7:e7:e8:45:0d:7d:e5:06:e8:
                    4a:85:70:c1:9e:72:c2:19:d9:6a:c8:fd:cc:7a:88:
                    9c:f6:cc:e2:a8:f7:41:cf:12:aa:90:5a:f1:f6:7e:
                    86:03:a4:19:18:6b:84:5c:3b:d4:fd:ee:20:ce:55:
                    31:ee:82:c6:6f:2d:5e:7c:39:5c:e1:0e:48:6b:f3:
                    de:d3:03:35:28:59:cd:65:e7:f9:81:c0:7d:3e:02:
                    f4:7d:16:af:5a:ed:76:e7:cf:f2:8b:c1:a9:81:94:
                    a4:25:73:62:2f:d7:ea:27:2b:e5:11:6e:32:03:f3:
                    94:93:fe:52:3e:1a:f7:e7:fe:29:c5:c9:db:38:a2:
                    76:87:94:4f:a8:b7:d5:f4:5b:13:f2:fb:53:91:af:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:64:3C:81:17:3F:3A:78:93:E1:BC:FE:B8:95:48:2A:34:A4:1F:BD
            X509v3 Authority Key Identifier:
                keyid:56:D3:D4:34:73:6F:00:94:5B:C2:3E:F0:F2:0A:57:85:EB:27:1E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5de7951af17313ff75f3239cc744c63f2ab25b0b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/733762e7-6c26-4327-bdfb-d505e6543210/010c5f23d9c6712a098a66af299d0e6974d5b78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/733762e7-6c26-4327-bdfb-d505e6543210/5de7951af17313ff75f3239cc744c63f2ab25b0b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.28.0/22
                IPv6:
                  2803:6340::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:04:f2:15:3a:c8:7a:e3:00:c5:fd:8e:38:38:2a:76:b3:e0:
         3b:44:50:3b:f0:3f:66:d9:14:0c:b7:11:57:7b:da:ac:73:cc:
         ac:64:af:2b:b5:81:9b:47:0a:6f:f6:16:5c:06:67:80:c9:dd:
         a9:5f:bc:b0:9d:cf:00:83:b6:ec:54:35:00:6f:b2:cc:74:4b:
         43:21:b9:5b:43:d9:13:72:07:9b:95:94:bc:71:f0:84:9d:ad:
         ac:85:07:26:59:0f:e6:3e:af:4c:15:08:5a:72:2b:b2:11:49:
         cf:8b:54:01:af:72:31:f2:3f:0f:1c:a3:3c:32:63:e0:4c:46:
         31:9e:9e:cc:0d:5c:96:75:6b:9e:95:c5:16:5b:a9:b6:d3:82:
         10:28:3d:95:5f:ba:85:61:31:57:1a:91:df:8b:53:1e:41:bc:
         d5:a9:77:9c:63:ee:41:3d:1c:a5:55:71:cb:4e:2d:26:3b:e7:
         d5:31:48:22:ea:25:52:45:02:a9:60:61:8d:80:82:ab:3d:2f:
         b4:76:d7:14:d2:fb:92:54:4f:cb:8f:9f:cb:ec:97:e3:5f:48:
         3e:7f:21:64:cc:80:18:41:68:a7:c2:e0:1d:ea:92:80:4b:ee:
         6e:f4:24:bd:1c:c9:87:e1:f2:93:45:15:c2:2a:23:4d:e8:b0:
         55:51:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----