Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97a9fb88-da4c-489e-bb17-d280b7dd4ce8/66f55bd3593b8e0f9b6b205a7ef3f480fcac4817.roa
File:                     66f55bd3593b8e0f9b6b205a7ef3f480fcac4817.roa (raw, json)
Hash identifier:          STM+57hIbt24kCxAaqa/ZH/1wCBTP7e13vZ7mREm+Ds=
Subject key identifier:   3C:68:F6:69:83:5B:E4:F3:25:F6:FE:3E:D9:02:09:44:E2:78:27:58
Certificate issuer:       /CN=160407480011a0e8990e77fd1c5a57f5e86df642
Certificate serial:       1036D5
Authority key identifier: 38:12:AD:86:57:5B:F7:1A:37:53:57:1A:8D:08:95:A9:E3:7A:5F:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/160407480011a0e8990e77fd1c5a57f5e86df642.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97a9fb88-da4c-489e-bb17-d280b7dd4ce8/66f55bd3593b8e0f9b6b205a7ef3f480fcac4817.roa
Signing time:             Thu 20 Jul 2023 00:18:44 +0000
ROA not before:           Wed 19 Jul 2023 00:18:44 +0000
ROA not after:            Sun 20 Jul 2025 00:18:44 +0000
asID:                     263720
IP address blocks:        132.255.200.0/22 maxlen: 24
                          2803:5780::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062613 (0x1036d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160407480011a0e8990e77fd1c5a57f5e86df642
        Validity
            Not Before: Jul 19 00:18:44 2023 GMT
            Not After : Jul 20 00:18:44 2025 GMT
        Subject: CN=66f55bd3593b8e0f9b6b205a7ef3f480fcac4817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:6d:54:8d:32:63:79:af:61:62:e0:24:01:
                    4f:54:6a:94:88:78:75:23:91:61:6b:03:fa:f6:25:
                    6d:51:6a:68:9c:08:c6:2b:98:2d:bb:89:aa:2d:41:
                    99:2c:aa:57:47:81:cc:1a:95:56:b0:4d:11:bb:5b:
                    55:a0:37:5a:85:04:c9:b6:62:09:d0:72:60:28:72:
                    40:05:b8:76:76:df:12:15:41:ff:7f:79:1d:d1:4c:
                    2d:53:e7:14:8e:5c:77:26:7e:3c:94:1a:96:e5:11:
                    bb:75:ad:ac:ec:9a:7a:80:76:c3:77:cb:af:6f:4f:
                    fa:c1:34:d9:df:12:c3:da:11:ff:01:86:cd:ba:12:
                    92:7c:17:44:f7:e6:d9:56:d3:6f:10:41:37:2e:45:
                    f3:49:10:de:ab:ef:fa:6a:1e:45:17:f0:38:d9:12:
                    11:a6:d0:c5:ff:d9:83:c5:ba:0b:fc:3d:b8:29:5f:
                    60:87:98:9d:bb:cf:be:8f:3a:74:99:71:81:72:b4:
                    bd:64:43:6b:c6:9f:08:1b:80:88:3d:8b:56:1f:68:
                    78:59:1e:73:f5:d6:d4:49:90:a9:01:f4:60:d1:b9:
                    92:6c:f9:f8:37:25:81:00:70:79:cb:e8:9f:95:9e:
                    14:ee:92:64:d4:01:32:88:b3:12:bf:01:c5:5b:fa:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:68:F6:69:83:5B:E4:F3:25:F6:FE:3E:D9:02:09:44:E2:78:27:58
            X509v3 Authority Key Identifier:
                keyid:38:12:AD:86:57:5B:F7:1A:37:53:57:1A:8D:08:95:A9:E3:7A:5F:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/160407480011a0e8990e77fd1c5a57f5e86df642.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97a9fb88-da4c-489e-bb17-d280b7dd4ce8/66f55bd3593b8e0f9b6b205a7ef3f480fcac4817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97a9fb88-da4c-489e-bb17-d280b7dd4ce8/160407480011a0e8990e77fd1c5a57f5e86df642.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.200.0/22
                IPv6:
                  2803:5780::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:79:1d:ee:bf:a8:d7:43:4b:1e:0d:f6:b9:8b:be:4a:74:4d:
         e6:9d:dc:dc:51:d0:60:a4:81:8b:7e:39:04:49:76:7b:ff:81:
         fb:b9:99:7a:4a:df:a4:86:e8:41:fa:0c:47:a7:47:77:ab:72:
         5f:bb:6d:1f:3f:c1:49:76:03:8b:62:4e:06:44:c9:b0:6b:49:
         11:a5:9c:1e:ac:99:ce:e5:58:25:f6:41:28:99:68:5c:e0:a0:
         b1:57:2a:98:20:50:80:56:31:0c:26:a2:9a:7a:bf:d1:8c:0b:
         0f:5b:5c:f6:52:d8:8c:93:7e:1e:77:59:2d:24:45:09:81:7c:
         00:05:f9:2d:a4:5d:68:cb:9b:2a:48:dc:dd:4a:09:c6:73:d6:
         13:ce:9d:00:11:a5:c8:67:c5:9a:e2:cb:68:26:3d:67:e0:9c:
         13:0b:e4:2c:8b:a9:1d:f6:a2:91:f2:b4:bb:84:02:90:90:26:
         3a:28:a7:41:84:60:8e:92:f3:33:5c:64:67:64:ee:c6:48:31:
         77:6f:7a:2d:25:a1:b3:fd:de:c2:ec:fe:a1:25:d9:40:16:a9:
         2b:4d:e4:91:2b:df:a3:83:22:c4:ba:c8:46:52:46:e8:4c:4e:
         99:8e:66:1e:92:9b:30:c0:8c:5c:9f:df:b9:ba:ad:ea:63:0c:
         1a:ae:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----