Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/cd05a08a82a6566363108600f63e6892e4fad0e2.roa
File:                     cd05a08a82a6566363108600f63e6892e4fad0e2.roa (raw, json)
Hash identifier:          V/KmHWndM0SKsXWhyeL6z1dBhq5T7l2n2fmibSN2i6w=
Subject key identifier:   75:0E:52:43:EA:02:60:1E:EB:27:C7:A9:BB:45:48:F4:C1:94:A7:3C
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       05CD86
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/cd05a08a82a6566363108600f63e6892e4fad0e2.roa
Signing time:             Tue 11 Jul 2023 12:41:31 +0000
ROA not before:           Mon 10 Jul 2023 12:41:31 +0000
ROA not after:            Fri 11 Jul 2025 12:41:31 +0000
asID:                     16629
IP address blocks:        152.174.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380294 (0x5cd86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Jul 10 12:41:31 2023 GMT
            Not After : Jul 11 12:41:31 2025 GMT
        Subject: CN=cd05a08a82a6566363108600f63e6892e4fad0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b4:d9:58:e6:0f:c5:a6:d1:5d:11:2c:13:b4:
                    cd:ac:8a:11:01:e1:54:45:46:83:5e:4b:da:7c:21:
                    11:e9:e9:09:d7:b6:ba:1b:f6:f2:3f:c9:19:43:b3:
                    e8:b3:94:1a:0e:0e:06:be:cf:8a:a0:bf:7e:5c:77:
                    c9:78:1b:e4:49:73:d1:80:cd:76:e2:32:1d:21:6b:
                    94:2c:a1:28:7e:5c:67:6e:7f:ba:5f:94:69:1a:b3:
                    81:39:cc:21:c2:4b:0a:3d:2e:d1:60:34:88:12:68:
                    88:1c:16:39:16:9a:77:2a:d0:54:01:1f:7b:44:1a:
                    80:ad:94:0f:fa:5b:c7:f4:dc:93:92:ee:01:cc:f6:
                    06:4f:f5:05:54:47:1f:1c:3a:b8:bf:a5:8f:96:a8:
                    67:6b:f7:59:1e:a0:a8:da:24:5e:21:fd:e7:89:bf:
                    6c:a8:16:26:a9:df:fb:51:ba:09:eb:7a:b1:7f:ac:
                    e1:d8:8d:66:08:ba:ab:d1:e5:e7:68:b1:a9:5c:e1:
                    ee:bf:bc:1d:50:98:38:76:67:81:05:05:5c:b7:b0:
                    cc:9d:9c:09:d8:7b:e2:7f:7e:33:3d:dd:52:d7:38:
                    be:20:a1:11:9f:d2:b2:b4:22:26:d5:1c:68:c3:26:
                    31:93:8b:51:5b:4a:d6:48:72:0f:c4:ea:ac:77:b7:
                    f7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0E:52:43:EA:02:60:1E:EB:27:C7:A9:BB:45:48:F4:C1:94:A7:3C
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/cd05a08a82a6566363108600f63e6892e4fad0e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:27:ac:9f:ea:3c:d2:9d:24:94:ce:1d:fc:c8:37:de:c2:a3:
         a2:0f:ae:24:b8:f4:25:49:fb:f9:fe:b3:fc:d5:ab:ae:73:c0:
         fd:d3:e2:0a:08:62:14:43:6f:b7:e6:29:77:32:74:f6:e1:e4:
         bf:e7:a0:ca:6c:cb:70:e5:97:7f:ca:50:bf:6b:5d:c8:e7:64:
         e7:8f:5c:bf:42:24:1e:96:26:16:0d:f7:3a:95:f8:78:c5:3b:
         3c:b6:f5:a8:88:27:73:d8:ae:16:57:c6:69:4c:9b:e2:1c:16:
         78:c7:ee:86:d7:27:b7:b1:66:25:be:a4:85:19:7a:a2:a7:32:
         89:ce:b8:7d:38:7d:e8:76:f9:37:55:1a:96:c9:e4:84:17:d2:
         bc:9c:a2:f7:41:fe:98:78:07:3c:05:a4:a3:86:7e:59:b7:04:
         bf:ab:5a:68:53:24:b1:13:ad:35:b9:56:2a:51:86:9b:0d:93:
         4f:95:d2:7f:18:76:44:91:68:6c:0c:b8:05:83:44:3f:f1:c2:
         08:19:36:c6:80:02:23:91:05:2b:8b:31:a2:06:c1:df:62:1c:
         03:5d:b3:7b:9f:29:a0:ef:66:bb:da:7a:4e:ee:f5:f8:8f:70:
         f7:ce:af:90:6a:6f:d9:33:3a:6e:42:ff:73:a9:02:a3:68:7b:
         76:24:0c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----