Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/e5f5cbda4a04199d21d0f2b61e0613b83fe5fce5.roa
File:                     e5f5cbda4a04199d21d0f2b61e0613b83fe5fce5.roa (raw, json)
Hash identifier:          ZVJygo/6ode3GotXWo5CbwXIJ5fLABWU4geUDxah28g=
Subject key identifier:   7E:48:EA:4E:90:0B:D4:94:DB:9D:D7:30:2F:42:83:E5:3B:D7:0A:53
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       05E2A8
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/e5f5cbda4a04199d21d0f2b61e0613b83fe5fce5.roa
Signing time:             Tue 11 Jul 2023 12:48:35 +0000
ROA not before:           Mon 10 Jul 2023 12:48:35 +0000
ROA not after:            Fri 11 Jul 2025 12:48:35 +0000
asID:                     7418
IP address blocks:        152.173.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385704 (0x5e2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Jul 10 12:48:35 2023 GMT
            Not After : Jul 11 12:48:35 2025 GMT
        Subject: CN=e5f5cbda4a04199d21d0f2b61e0613b83fe5fce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:d7:48:ea:37:ac:c9:8c:d4:02:7d:f6:fc:
                    04:e7:92:6c:65:92:52:ed:cf:b1:ec:0e:5b:60:66:
                    a2:16:f3:34:97:9e:9b:54:6a:8a:47:ff:46:1b:1a:
                    85:3a:0b:99:60:fb:63:25:20:e8:15:c7:b8:d4:cc:
                    51:70:09:61:68:06:82:ca:a4:ed:7f:fa:f8:96:4e:
                    1e:ed:03:fb:44:ab:9c:fe:3d:7a:ae:7b:fa:b3:89:
                    21:07:79:47:c8:4b:51:f9:21:98:b7:b2:f4:f5:85:
                    50:b8:b8:dd:3f:ae:b9:ea:d3:31:1c:98:75:e7:3f:
                    90:dc:5b:4a:02:6f:96:34:e3:8c:1e:0f:94:bf:33:
                    5e:6e:45:f0:e4:06:c1:6c:aa:70:af:c6:2f:71:7d:
                    ba:de:13:46:5b:86:1f:4c:d3:86:3a:c7:f1:0b:2c:
                    cf:9f:07:f3:15:ac:8d:83:8a:0c:b7:60:46:f6:39:
                    d4:f1:1e:1d:26:3e:23:55:a3:60:76:51:8c:1d:24:
                    d7:b9:7e:12:dc:82:0c:ed:c6:e1:3c:63:ef:5b:f6:
                    96:0e:86:98:00:ef:4e:93:07:67:dd:09:c5:56:82:
                    b5:6c:22:c6:21:02:4f:15:05:97:f0:80:60:ef:4c:
                    83:04:5c:6a:4d:0e:46:1d:b1:49:4b:10:38:c2:66:
                    4d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:48:EA:4E:90:0B:D4:94:DB:9D:D7:30:2F:42:83:E5:3B:D7:0A:53
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/e5f5cbda4a04199d21d0f2b61e0613b83fe5fce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.173.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:95:51:ad:a3:52:c8:f1:7a:1b:36:0a:13:e1:1b:cc:ef:06:
         c7:99:c3:21:39:e2:25:8c:36:0e:43:6a:82:23:09:d6:ca:d2:
         6c:f8:0d:bf:82:ef:f9:1a:d3:25:20:de:f9:a8:c3:bc:1a:db:
         e2:14:13:c0:be:6a:e8:36:f6:41:65:9f:7f:8f:35:a6:71:ac:
         3e:a6:07:fe:50:b0:3a:48:f5:33:b4:c4:70:e9:73:91:23:c3:
         57:12:72:98:74:b6:e0:c8:64:00:6e:41:f1:bd:87:0f:92:14:
         cc:01:52:17:c6:d6:43:f0:ff:f3:33:56:0d:69:af:16:7e:cc:
         8a:5f:df:4c:30:b0:d3:3c:28:94:b2:97:d7:e4:ef:80:58:3c:
         c8:77:ae:54:91:1a:0a:66:e4:0d:60:30:57:f4:92:4a:d1:35:
         20:41:d3:dc:6b:02:a6:cf:d9:2c:3f:e6:16:6f:ca:41:1f:d3:
         d2:41:c2:37:9a:7a:f3:80:e6:b0:f5:09:31:94:6f:22:d6:74:
         91:b4:9b:ea:da:4a:0c:af:7a:c6:07:75:d2:7d:7c:fb:a8:ee:
         15:f7:80:a8:d7:8b:39:66:db:26:f4:2a:c8:b0:a1:ce:8e:16:
         8b:43:ad:4d:96:75:d7:e6:37:1c:98:35:25:41:cf:a3:2f:85:
         07:ca:e5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----