Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9965ca79-a2bb-4ddd-afdd-aaa5acd9e16e/c96fa4b301715fee7e4621854e21a4b08aaa3270.roa
File:                     c96fa4b301715fee7e4621854e21a4b08aaa3270.roa (raw, json)
Hash identifier:          h1KzK3lPJcZSxznvb3/pFJxB1clDhwevS1+v+ICSpAw=
Subject key identifier:   83:6B:60:CE:48:1D:EE:79:AA:3A:08:2F:34:74:25:E7:5D:55:3B:80
Certificate issuer:       /CN=5039f4b2aa162007908260599b8ed17383f15425
Certificate serial:       2291CB
Authority key identifier: 29:88:83:E6:79:5B:46:6C:AF:EA:68:00:63:1C:2E:55:54:2A:7B:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5039f4b2aa162007908260599b8ed17383f15425.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9965ca79-a2bb-4ddd-afdd-aaa5acd9e16e/c96fa4b301715fee7e4621854e21a4b08aaa3270.roa
Signing time:             Wed 06 Sep 2023 16:17:18 +0000
ROA not before:           Tue 05 Sep 2023 16:17:17 +0000
ROA not after:            Sat 06 Sep 2025 16:17:17 +0000
asID:                     52507
IP address blocks:        170.84.204.0/22 maxlen: 22
                          2803:bb40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265547 (0x2291cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5039f4b2aa162007908260599b8ed17383f15425
        Validity
            Not Before: Sep  5 16:17:17 2023 GMT
            Not After : Sep  6 16:17:17 2025 GMT
        Subject: CN=c96fa4b301715fee7e4621854e21a4b08aaa3270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:eb:e4:e5:53:e5:aa:d8:66:89:ad:a2:d1:
                    04:2e:77:ed:8f:08:9e:36:9b:69:7e:f5:7a:15:d8:
                    a0:54:8b:9d:3a:36:92:ef:60:d6:b4:c9:4e:68:19:
                    2a:98:64:6f:87:f0:92:e1:39:e2:4d:b6:48:5a:ae:
                    d6:63:28:dc:46:89:0d:ee:b3:d9:cb:12:ff:e3:54:
                    0d:33:c9:b6:f9:5d:b8:7b:f4:bb:05:d8:b7:b8:7c:
                    b7:66:15:55:5d:54:b6:e4:e3:b1:ee:26:ac:3d:0c:
                    59:6a:72:f6:56:91:fc:df:2d:fd:5f:b9:ea:56:16:
                    64:da:43:1d:c4:49:e6:c8:12:00:f2:2a:2b:b7:a9:
                    4a:ff:0b:01:3c:d1:d2:da:30:86:c5:4e:3c:58:69:
                    af:25:ed:8c:70:a1:ec:6c:5b:c5:27:07:59:2b:4b:
                    eb:ea:e9:a6:15:aa:84:83:6e:e4:28:85:e2:90:a6:
                    08:e7:9d:70:de:16:33:be:ac:17:eb:0e:de:7c:b1:
                    87:78:26:1c:25:9d:ee:c5:76:c0:fb:4b:68:a6:50:
                    f8:e2:ac:b9:33:27:45:96:7b:11:c1:8e:12:a2:13:
                    77:68:e8:33:1b:1c:08:eb:56:0c:15:fc:73:09:1e:
                    be:09:b5:13:e8:84:79:58:d9:82:4c:56:71:78:65:
                    86:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6B:60:CE:48:1D:EE:79:AA:3A:08:2F:34:74:25:E7:5D:55:3B:80
            X509v3 Authority Key Identifier:
                keyid:29:88:83:E6:79:5B:46:6C:AF:EA:68:00:63:1C:2E:55:54:2A:7B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5039f4b2aa162007908260599b8ed17383f15425.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9965ca79-a2bb-4ddd-afdd-aaa5acd9e16e/c96fa4b301715fee7e4621854e21a4b08aaa3270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9965ca79-a2bb-4ddd-afdd-aaa5acd9e16e/5039f4b2aa162007908260599b8ed17383f15425.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.204.0/22
                IPv6:
                  2803:bb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:f4:f3:8d:69:21:1f:70:e9:c4:a3:10:b1:89:80:66:95:9d:
         78:bd:fe:2a:04:73:27:99:cd:98:76:69:cb:88:3e:c0:11:16:
         06:5d:d3:1c:77:d4:f1:6c:80:dd:6e:0d:41:da:7c:82:54:c1:
         1a:b4:29:a5:68:5f:8c:07:63:2a:ce:d8:75:e5:e7:ae:41:ba:
         a6:5b:6e:f6:b4:d6:95:ae:cb:33:bf:9e:6f:6b:06:4a:0c:5e:
         48:7d:11:07:f5:5d:fe:61:6c:5f:ae:32:10:fa:93:a0:25:72:
         c8:e3:87:67:52:2e:58:21:a2:cf:61:8c:83:f3:e8:5b:4b:c7:
         d8:b5:2f:56:a9:74:d6:b6:79:25:4f:e4:ab:ec:37:3b:85:fb:
         0a:df:8b:a4:49:a4:48:90:ab:fe:b5:d6:8d:b7:aa:07:18:53:
         43:e2:8b:3a:b5:14:60:20:fc:fd:e9:46:8a:b6:63:ad:9a:be:
         27:fd:f1:5b:f9:41:0a:dc:b8:4e:96:76:8f:24:25:64:f6:c7:
         53:78:08:8c:cc:76:d1:11:e8:f2:a1:45:99:c3:02:59:f4:89:
         2e:13:f9:c1:d6:44:b1:69:a8:66:09:2c:d3:d9:d6:e1:5b:cb:
         3b:d4:0f:ba:36:aa:27:63:d9:7e:83:ca:43:ec:58:23:6e:c0:
         26:cd:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----