Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91eba383-45b8-4b18-bf8f-cda525da5bb6/87600d10d41104c4c9a7b144b29b72c27ade5b0a.roa
File:                     87600d10d41104c4c9a7b144b29b72c27ade5b0a.roa (raw, json)
Hash identifier:          aWlmpOsyeuyHuqjNncW6hJK0sz53sjoJhnhFnvI7rOc=
Subject key identifier:   5C:BE:4E:4B:7A:69:96:A0:84:56:12:6C:CC:60:82:A3:2F:0D:BE:DA
Certificate issuer:       /CN=df5a245f6f52f09479811abcbd433b19790b0f3b
Certificate serial:       02F1
Authority key identifier: DC:E3:6C:25:2F:05:90:00:51:48:F3:02:CA:8B:CA:CF:EC:9E:F9:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df5a245f6f52f09479811abcbd433b19790b0f3b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91eba383-45b8-4b18-bf8f-cda525da5bb6/87600d10d41104c4c9a7b144b29b72c27ade5b0a.roa
Signing time:             Mon 23 Jan 2023 19:59:03 +0000
ROA not before:           Sun 22 Jan 2023 19:56:59 +0000
ROA not after:            Thu 23 Jan 2025 19:56:59 +0000
asID:                     272901
IP address blocks:        177.71.96.0/22 maxlen: 24
                          2803:5690::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5a245f6f52f09479811abcbd433b19790b0f3b
        Validity
            Not Before: Jan 22 19:56:59 2023 GMT
            Not After : Jan 23 19:56:59 2025 GMT
        Subject: CN=87600d10d41104c4c9a7b144b29b72c27ade5b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:97:ea:5f:d9:50:f5:76:67:49:05:a1:6d:
                    18:18:ac:d4:ca:7a:ed:2c:8a:14:b8:f6:91:3a:5d:
                    86:af:16:86:e5:b0:b3:a3:31:52:92:ef:23:b3:af:
                    78:c6:af:e7:b4:59:99:51:8f:ab:21:a6:b5:b2:05:
                    c3:6f:b5:a0:ad:c6:c1:b8:e6:13:ae:4f:5a:84:b8:
                    41:f0:31:8e:3b:81:5d:d0:a6:ef:27:b1:c8:37:1b:
                    c5:78:49:6f:c2:b5:f4:33:7b:5c:be:05:f7:5a:6e:
                    57:8f:9c:21:d0:b6:75:79:24:a9:a4:76:a2:45:39:
                    96:e5:19:ca:84:b6:6f:f8:27:40:c5:3d:99:01:36:
                    2a:c8:ba:53:73:8d:33:44:2f:d0:92:94:9e:54:89:
                    66:c1:34:c7:d5:cc:87:3b:a4:e7:08:17:4c:db:63:
                    8a:8d:7f:19:43:9a:45:5a:a7:66:21:77:a2:e6:10:
                    dd:6d:1a:11:ee:fe:27:b4:35:cd:9c:f1:af:11:31:
                    1b:b6:3d:ef:a4:88:9e:d0:91:aa:79:29:4a:72:17:
                    87:eb:52:94:2a:86:5c:48:6c:03:35:4d:85:00:2d:
                    96:90:d1:dc:14:3d:30:b3:ff:39:99:f9:12:a0:18:
                    ad:e7:55:f4:d2:ca:62:29:3b:26:56:a0:fe:22:24:
                    aa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BE:4E:4B:7A:69:96:A0:84:56:12:6C:CC:60:82:A3:2F:0D:BE:DA
            X509v3 Authority Key Identifier:
                keyid:DC:E3:6C:25:2F:05:90:00:51:48:F3:02:CA:8B:CA:CF:EC:9E:F9:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df5a245f6f52f09479811abcbd433b19790b0f3b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91eba383-45b8-4b18-bf8f-cda525da5bb6/87600d10d41104c4c9a7b144b29b72c27ade5b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91eba383-45b8-4b18-bf8f-cda525da5bb6/df5a245f6f52f09479811abcbd433b19790b0f3b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.96.0/22
                IPv6:
                  2803:5690::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:40:b3:e5:3e:e1:00:a5:b4:65:72:11:48:b1:b1:e1:a1:
         ae:07:87:f0:0f:f2:b4:2d:eb:d4:16:c5:fb:50:dd:fd:7d:5b:
         dd:7c:5e:cb:54:56:95:aa:04:79:f2:38:0c:15:6a:db:ef:ee:
         64:6b:5d:8e:d8:f2:c6:8d:6c:25:21:45:5f:c0:b1:af:9f:fb:
         62:96:9c:13:7e:4e:6c:15:04:7f:b4:5a:da:9c:86:c6:1b:fc:
         2f:b6:fc:92:52:a8:94:84:a8:ab:4f:7f:96:fc:83:49:09:d5:
         a5:fa:60:31:c2:75:07:4d:b6:40:0d:d2:76:2f:ca:1a:ea:ef:
         46:e9:84:75:73:09:72:c8:d3:8c:69:a9:88:32:4e:ba:29:ac:
         9f:ce:8f:9e:5e:3f:a3:14:98:23:c4:ba:6d:db:15:09:23:6d:
         e8:a9:f2:9e:86:00:6b:b8:16:10:bd:bd:7c:13:f1:cc:63:78:
         4a:0a:3f:04:c8:e2:6a:e8:03:b5:0f:b2:d4:8f:74:ef:40:13:
         4f:20:cb:08:f4:b3:b0:68:bc:41:20:4d:f5:f0:99:b5:87:09:
         1c:65:ac:17:b2:0e:a2:69:97:9c:be:bb:66:79:0d:21:29:c0:
         15:2c:78:a0:f6:ea:69:80:14:9f:cb:de:27:e4:fb:f7:a2:88:
         1d:2e:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----