Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/66df5c84e872bcbc5c4f8e4eca3f4fbf932093d4.roa
File:                     66df5c84e872bcbc5c4f8e4eca3f4fbf932093d4.roa (raw, json)
Hash identifier:          YrpWTkenmf4gNrpLKglaYSHgNo4EDiAEU4lT23BiM1s=
Subject key identifier:   34:6A:96:E0:A0:CA:53:9A:59:C3:2B:97:15:F8:8D:8E:9E:D9:50:56
Certificate issuer:       /CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Certificate serial:       2133CC
Authority key identifier: 1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/66df5c84e872bcbc5c4f8e4eca3f4fbf932093d4.roa
Signing time:             Mon 29 May 2023 14:19:47 +0000
ROA not before:           Sun 28 May 2023 14:19:46 +0000
ROA not after:            Thu 29 May 2025 14:19:46 +0000
asID:                     264683
IP address blocks:        168.227.24.0/22 maxlen: 24
                          2801:0:141::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175948 (0x2133cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbdd559af6aac3348d7a10caf850960a448f10d
        Validity
            Not Before: May 28 14:19:46 2023 GMT
            Not After : May 29 14:19:46 2025 GMT
        Subject: CN=66df5c84e872bcbc5c4f8e4eca3f4fbf932093d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:7f:61:0c:87:92:68:be:e3:85:e1:4a:55:
                    fb:18:64:1f:5f:17:41:e4:ef:75:93:0d:2a:ef:bb:
                    53:b4:4b:5b:de:52:a5:fd:ff:f7:45:35:e9:f1:b6:
                    65:c8:06:d8:94:bd:df:6d:ed:db:d0:66:3d:c7:cf:
                    c5:57:ac:89:39:e1:c0:f4:57:02:ed:e3:23:5f:e7:
                    ee:45:f7:5e:ea:7a:90:31:ee:5e:34:23:4c:5a:05:
                    94:76:e4:ac:93:31:29:78:55:38:d7:f4:b5:00:72:
                    18:55:46:4a:ff:06:2a:ac:02:3d:75:d9:6e:e6:e9:
                    2d:28:e6:e5:d9:0e:eb:33:18:15:6c:10:8f:44:70:
                    5a:05:53:8e:6e:bc:f7:7f:b5:b0:1c:58:5b:a4:10:
                    07:9f:9d:e8:6b:5f:f1:6f:22:ab:72:19:97:40:8b:
                    c9:47:3f:21:0c:01:46:20:46:e6:71:98:07:6a:f6:
                    52:64:79:57:3f:f4:79:ae:78:ee:6c:a9:77:33:d6:
                    c5:28:00:42:be:92:72:ca:fa:e1:fd:11:c9:54:e0:
                    4b:0c:a8:ee:0c:ea:ef:63:45:78:4a:a0:53:30:20:
                    79:ab:41:9e:32:90:3c:8e:b0:cc:cf:62:72:d7:96:
                    a0:c1:6c:f8:55:bd:5a:17:7e:e5:c0:76:a5:1e:60:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6A:96:E0:A0:CA:53:9A:59:C3:2B:97:15:F8:8D:8E:9E:D9:50:56
            X509v3 Authority Key Identifier:
                keyid:1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/66df5c84e872bcbc5c4f8e4eca3f4fbf932093d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.24.0/22
                IPv6:
                  2801:0:141::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:7a:a6:af:7d:6f:d2:be:ba:bc:74:c4:e7:42:4a:22:d1:c4:
         1e:7c:08:4f:eb:e5:2c:0c:7d:04:42:d0:0b:6e:4e:5a:61:9b:
         27:3f:69:07:ab:fb:45:9b:6b:44:42:7b:08:ac:0f:26:63:1c:
         f4:58:f7:f9:c9:a7:e0:35:35:ef:f9:34:16:e4:82:60:a0:27:
         c0:37:02:1e:50:61:2a:a1:4b:42:ed:76:01:45:09:3a:ee:c4:
         fc:d7:21:fe:ec:fe:ca:78:a0:99:49:2b:7d:e9:d9:1e:ae:cb:
         36:b1:90:b9:6b:d3:bd:ea:c8:31:15:61:17:cc:df:45:24:de:
         47:0f:6c:b6:62:8a:e0:62:c8:ef:c8:db:71:e1:22:6e:c4:0a:
         8e:96:04:98:d1:d3:00:e5:90:0b:bf:d6:ff:e0:45:c1:dc:4c:
         98:b9:c2:8e:ff:f8:a7:07:31:f5:ab:a8:f1:e0:ac:2d:a8:58:
         b4:7a:29:7e:da:17:30:cc:c3:e1:da:cb:03:ca:cf:2e:7d:51:
         9a:25:c0:96:a3:65:55:24:c9:34:16:4c:e5:53:f8:05:1f:0a:
         20:7f:f5:04:a2:b1:51:a3:73:b4:ac:28:74:d3:4a:63:9e:92:
         b0:6e:e5:60:ee:59:16:6d:13:a2:95:87:0a:f7:35:b6:b8:57:
         fb:a5:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----