Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/ea6c6e39a584a867c450412fe846714ea62e5692.roa
File:                     ea6c6e39a584a867c450412fe846714ea62e5692.roa (raw, json)
Hash identifier:          F6+DpklbHhRQKfZlGpMXhx3PjKZEIQNwHU0ldctka3Y=
Subject key identifier:   0E:BC:02:95:89:8A:58:C9:6C:2E:1B:EE:EC:82:DF:04:C1:73:8B:3B
Certificate issuer:       /CN=fae694f146c7df2742ae4a3ba758294cd18c109c
Certificate serial:       0618
Authority key identifier: A6:98:7B:03:5A:AD:59:4A:D3:3E:18:66:2D:C3:8A:B3:93:C2:0D:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fae694f146c7df2742ae4a3ba758294cd18c109c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/ea6c6e39a584a867c450412fe846714ea62e5692.roa
Signing time:             Tue 10 Jan 2023 21:20:35 +0000
ROA not before:           Mon 09 Jan 2023 21:18:10 +0000
ROA not after:            Fri 10 Jan 2025 21:18:10 +0000
asID:                     270152
IP address blocks:        177.124.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae694f146c7df2742ae4a3ba758294cd18c109c
        Validity
            Not Before: Jan  9 21:18:10 2023 GMT
            Not After : Jan 10 21:18:10 2025 GMT
        Subject: CN=ea6c6e39a584a867c450412fe846714ea62e5692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:89:b6:38:0c:e5:16:a4:26:fc:f8:32:43:
                    6e:20:3f:06:27:f4:45:2e:17:e3:a7:2a:6c:e2:f9:
                    25:c6:7c:13:e8:8e:53:98:0f:91:f1:a6:da:d4:ec:
                    5a:72:e9:ab:21:5e:64:3b:ca:bc:14:15:f2:e6:20:
                    fb:7c:9a:4e:5b:ca:11:ad:c8:fd:0f:99:2e:10:93:
                    fd:d8:ea:55:6e:ed:ec:a4:b2:29:21:64:7f:db:2e:
                    85:61:fb:f6:57:3a:7e:50:b9:80:20:78:1e:3f:b9:
                    1d:9e:02:ef:4d:34:af:45:45:30:ce:30:e7:6e:d7:
                    b3:e9:aa:27:a4:53:ac:4b:43:8f:36:89:8f:20:30:
                    47:d8:33:0a:74:18:74:aa:33:38:58:ca:7b:19:6b:
                    3a:c3:b2:44:a8:56:d5:43:e0:b3:b2:aa:6d:aa:6d:
                    af:b9:8b:df:a5:46:35:48:c0:34:c8:19:cf:fc:bd:
                    64:d2:46:a6:a9:34:9e:af:6c:c6:d1:70:75:4e:e1:
                    a6:23:58:02:4f:bf:c9:11:02:68:f5:b9:c0:30:9d:
                    01:8b:5c:19:eb:3a:a4:6d:d2:a9:a2:2d:30:83:9c:
                    85:d1:78:3d:ba:6e:4a:c8:cd:5b:34:46:9a:37:9e:
                    c5:65:18:fa:7b:25:2b:cc:9c:33:3c:c9:60:9b:7d:
                    21:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BC:02:95:89:8A:58:C9:6C:2E:1B:EE:EC:82:DF:04:C1:73:8B:3B
            X509v3 Authority Key Identifier:
                keyid:A6:98:7B:03:5A:AD:59:4A:D3:3E:18:66:2D:C3:8A:B3:93:C2:0D:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fae694f146c7df2742ae4a3ba758294cd18c109c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/ea6c6e39a584a867c450412fe846714ea62e5692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/fae694f146c7df2742ae4a3ba758294cd18c109c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:fe:94:86:e9:fa:bc:c3:98:c9:05:3f:0d:3d:6d:cc:73:e4:
         cd:2a:a2:c0:a3:ed:74:e4:79:93:9f:49:2c:60:a2:c3:65:4c:
         3e:18:81:e8:f8:ff:68:13:e9:54:be:32:14:d7:a9:fc:26:87:
         95:2f:31:7e:95:4c:ba:e7:79:9d:e2:fd:76:0f:2f:2c:93:d2:
         8f:20:dd:36:21:38:a5:e3:07:48:46:e6:a3:50:e0:4c:fc:62:
         9f:08:df:30:61:29:21:56:ed:fb:8e:7f:d2:b4:3d:5d:4f:77:
         ed:48:f5:46:49:a1:0f:1f:ee:83:c9:27:2a:9b:65:0e:fc:c6:
         a7:56:2f:d8:16:99:8a:ef:69:86:bf:c4:b9:c4:0d:68:a7:a7:
         9e:e1:98:51:4a:ef:2d:1b:bd:89:22:b4:65:d8:f6:44:6b:e5:
         42:d4:49:da:46:e2:0f:89:95:91:8c:f1:67:3e:87:37:e6:3a:
         ba:af:1a:d1:d6:ad:42:21:1e:b4:1f:77:bd:06:04:c1:66:d3:
         43:ce:0a:d8:bb:80:8f:f7:80:62:6f:06:84:60:42:ad:28:83:
         c0:b3:5c:2c:8a:6f:e3:d4:b3:af:e4:85:88:12:4d:00:90:49:
         1b:12:9e:33:d0:c5:ac:d2:98:85:1d:20:e4:ba:a9:b7:e4:50:
         40:55:b6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----