Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/0f6610ba86bdd4b1a3c66cc5117bcecc3c3316f8.roa
File:                     0f6610ba86bdd4b1a3c66cc5117bcecc3c3316f8.roa (raw, json)
Hash identifier:          3HQv7kay5VKcdrCGdlW4fTevO8Bqh1rhfolPMTgRSxE=
Subject key identifier:   7A:E7:A8:47:F6:C5:EC:42:09:5C:0E:A8:B9:27:8E:84:D7:46:C7:0D
Certificate issuer:       /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial:       23C762
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/0f6610ba86bdd4b1a3c66cc5117bcecc3c3316f8.roa
Signing time:             Mon 25 Sep 2023 15:28:19 +0000
ROA not before:           Sun 24 Sep 2023 15:28:11 +0000
ROA not after:            Thu 25 Sep 2025 15:28:11 +0000
asID:                     27807
IP address blocks:        150.185.0.0/16 maxlen: 16
                          150.186.0.0/15 maxlen: 16
                          150.188.0.0/15 maxlen: 16
                          2800:30::/32 maxlen: 32
                          2001:1338::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2344802 (0x23c762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
        Validity
            Not Before: Sep 24 15:28:11 2023 GMT
            Not After : Sep 25 15:28:11 2025 GMT
        Subject: CN=0f6610ba86bdd4b1a3c66cc5117bcecc3c3316f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d8:af:3e:a6:48:8c:6a:03:a4:dc:36:8e:22:
                    8a:61:af:29:d8:b2:b1:8f:68:d6:3f:10:30:7c:fa:
                    64:a5:b9:d0:b0:4d:22:d2:fc:42:11:4c:af:20:d4:
                    1d:9a:70:1a:66:40:f1:22:88:6d:56:ec:70:87:55:
                    02:0b:64:97:10:79:5a:7c:e2:26:56:3a:c5:a9:82:
                    b0:54:76:98:a6:08:bc:7d:5f:e5:44:5f:08:90:38:
                    31:62:e5:17:38:ff:93:ff:dc:55:bd:9c:d5:41:da:
                    df:93:a1:f0:a3:2f:f8:4f:23:a3:0c:e4:49:b1:06:
                    de:8c:aa:02:63:f4:d1:a9:f9:22:1a:92:63:13:f1:
                    de:76:0e:2d:40:80:79:d4:c4:b6:41:9d:15:0e:44:
                    ff:7c:c8:7c:cc:6e:1d:68:b0:c8:f2:9c:fd:f4:1b:
                    27:5c:26:89:ed:c3:54:e9:50:9d:50:63:d9:1d:1c:
                    40:21:4f:94:e5:d8:b9:1a:94:cc:8d:9d:b8:41:d1:
                    c6:f2:ae:42:a6:7d:7a:10:f3:20:8d:d8:2d:0e:6f:
                    fc:95:ac:43:1c:62:cd:41:f6:e3:03:57:3c:da:b3:
                    e5:67:79:86:36:80:23:f9:3c:b3:bc:44:d4:c1:ad:
                    c8:e8:3d:73:20:30:cc:70:43:ff:ac:55:ea:2b:46:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E7:A8:47:F6:C5:EC:42:09:5C:0E:A8:B9:27:8E:84:D7:46:C7:0D
            X509v3 Authority Key Identifier:
                keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/0f6610ba86bdd4b1a3c66cc5117bcecc3c3316f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.185.0.0-150.189.255.255
                IPv6:
                  2001:1338::/32
                  2800:30::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:78:b1:46:0b:88:e5:52:15:ed:03:94:14:6f:ae:15:cf:
         0e:c2:8a:7d:f1:fc:b0:3f:a7:42:21:91:e6:4a:74:26:95:41:
         9f:e9:50:d9:1e:aa:90:7c:5d:90:a7:52:e6:26:8e:75:1e:7f:
         52:4b:31:f6:4d:90:2f:03:f0:cb:bb:55:ab:5e:e9:a4:c4:7e:
         66:64:77:00:79:1b:cb:46:eb:1f:f1:de:8b:ce:87:d7:ca:60:
         49:b7:e8:8f:26:f4:65:86:1e:09:ca:c1:1b:fd:f0:a0:e5:f2:
         57:15:4a:db:db:54:48:9a:c9:ff:5a:c8:b3:a6:9c:c7:08:81:
         6a:de:84:05:05:25:0f:fc:16:1f:84:70:59:2d:00:b3:1b:0c:
         9a:bb:94:a9:53:cd:f8:4a:47:85:86:23:85:9e:4b:59:de:fe:
         7e:95:7e:e5:e3:af:bb:41:3c:53:99:14:df:d2:dc:dd:71:70:
         ac:b5:db:d1:82:0a:13:23:67:10:90:1d:4b:e8:6a:ef:c5:1e:
         82:d8:67:42:f2:1d:17:86:75:fc:70:0d:b7:80:6f:e9:60:90:
         f7:c1:20:41:b0:63:25:bc:b3:70:23:ce:a3:4a:4a:4e:85:55:
         9d:3c:da:ff:ea:ee:cf:bc:69:02:80:86:a7:2a:32:7a:e7:19:
         a4:f7:f8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----