Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f5eca1c-1761-4358-9006-522498d5f858/ec9e0c429cf09cc48adcb2cd2deba920bc54d8e0.roa
File:                     ec9e0c429cf09cc48adcb2cd2deba920bc54d8e0.roa (raw, json)
Hash identifier:          VhNS6hhYYO3Wmb8sissMyl4F91dwhoymraM/gpVyV4c=
Subject key identifier:   4B:0D:3F:D8:BC:11:FC:30:F1:9A:97:DD:EB:34:02:3D:66:C0:B3:B3
Certificate issuer:       /CN=ad7d6f790bf6867516dffd067b3a4d238010cdaf
Certificate serial:       105178
Authority key identifier: 8A:0A:09:D1:77:1D:60:CF:DB:54:B9:83:4F:8C:BC:77:CE:2A:24:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad7d6f790bf6867516dffd067b3a4d238010cdaf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8f5eca1c-1761-4358-9006-522498d5f858/ec9e0c429cf09cc48adcb2cd2deba920bc54d8e0.roa
Signing time:             Mon 18 Sep 2023 18:46:59 +0000
ROA not before:           Sun 17 Sep 2023 18:46:59 +0000
ROA not after:            Thu 18 Sep 2025 18:46:59 +0000
asID:                     264723
IP address blocks:        170.231.124.0/22 maxlen: 24
                          170.244.184.0/22 maxlen: 24
                          2803:2740::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1069432 (0x105178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad7d6f790bf6867516dffd067b3a4d238010cdaf
        Validity
            Not Before: Sep 17 18:46:59 2023 GMT
            Not After : Sep 18 18:46:59 2025 GMT
        Subject: CN=ec9e0c429cf09cc48adcb2cd2deba920bc54d8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:92:dd:af:31:c5:72:aa:ce:25:48:6d:db:20:
                    25:cb:74:1b:ec:53:42:f2:6c:b7:8f:f8:9a:ae:10:
                    65:c1:dd:c1:7e:eb:ed:7c:fe:12:33:a8:db:c7:f7:
                    c6:c2:12:e1:b4:59:8b:c7:0a:90:ba:a0:66:70:39:
                    42:b3:a9:87:f2:88:59:d1:3f:94:2d:04:b5:6f:03:
                    a4:f8:90:28:ac:55:1f:9b:c0:05:7f:62:2c:e8:92:
                    dc:ca:e8:a4:96:05:27:37:cb:09:fa:90:c9:b1:92:
                    96:c7:06:1b:ed:96:41:7a:57:16:1b:e8:1c:7e:b3:
                    89:b1:44:1d:7f:91:0e:b0:88:86:c4:fd:b5:fe:62:
                    36:3e:7e:85:c2:de:e9:34:0a:b9:fe:4a:6a:c3:ed:
                    cc:8e:24:a6:21:b7:ab:c9:40:7b:3a:76:47:28:eb:
                    2f:e6:b7:44:c8:27:93:bc:ff:85:12:28:99:1b:65:
                    20:28:17:46:48:de:aa:e9:67:99:dd:0a:40:8a:51:
                    92:2e:01:52:1d:7b:1f:95:01:2e:a4:da:fd:a2:c4:
                    db:5c:87:70:60:8a:87:f2:00:48:4f:fa:b6:08:eb:
                    d9:8c:42:0e:33:0c:07:46:f6:76:ac:07:a4:08:be:
                    60:82:8b:9f:7b:97:53:99:87:b3:35:24:d2:60:e9:
                    74:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0D:3F:D8:BC:11:FC:30:F1:9A:97:DD:EB:34:02:3D:66:C0:B3:B3
            X509v3 Authority Key Identifier:
                keyid:8A:0A:09:D1:77:1D:60:CF:DB:54:B9:83:4F:8C:BC:77:CE:2A:24:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad7d6f790bf6867516dffd067b3a4d238010cdaf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f5eca1c-1761-4358-9006-522498d5f858/ec9e0c429cf09cc48adcb2cd2deba920bc54d8e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8f5eca1c-1761-4358-9006-522498d5f858/ad7d6f790bf6867516dffd067b3a4d238010cdaf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.124.0/22
                  170.244.184.0/22
                IPv6:
                  2803:2740::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:ff:19:f8:c7:5b:47:58:15:b7:be:f8:f8:f1:d7:97:d0:
         d0:62:d1:71:0a:4f:18:24:7d:3a:1e:d7:4b:af:24:bb:39:b0:
         46:35:b9:10:6f:39:5b:c2:e9:10:b2:08:69:e2:cd:43:f4:7a:
         4f:5a:6c:e1:ab:5b:06:4a:69:06:a2:d7:fa:0d:52:95:75:20:
         ca:aa:7a:00:39:47:03:a4:2b:1b:4a:23:e3:4c:14:15:63:df:
         ff:07:38:db:fb:a8:e5:d7:88:bb:db:93:31:68:53:78:2a:c6:
         79:ce:ed:c2:75:06:66:9f:97:b2:39:cb:c1:cb:48:d9:73:e0:
         ac:93:a5:b1:01:4b:c6:68:6c:11:cd:9e:0a:11:38:f1:4f:28:
         6a:ca:f4:63:c7:40:75:b4:b6:36:22:6e:ef:e5:2a:e8:39:fa:
         ad:6e:f7:72:00:04:ff:d7:0c:7d:54:84:8c:68:94:fc:0f:f2:
         d4:de:78:1b:a6:9f:25:73:48:1c:be:a2:89:5f:55:6c:f1:5c:
         dd:6f:df:e9:87:fb:ba:aa:6e:ad:17:59:b1:0f:56:40:f2:e0:
         84:c1:27:9d:54:e9:8a:0c:c6:21:34:b4:f8:44:8c:22:07:fa:
         24:f6:f2:10:54:4b:67:44:77:b2:73:83:85:6d:ef:6b:ac:b1:
         bc:e0:fe:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----