Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/ef406445a14cb7f52bed35e8f0e0791f7b1c3994.roa
File:                     ef406445a14cb7f52bed35e8f0e0791f7b1c3994.roa (raw, json)
Hash identifier:          tBOBptOd5ci7d3Kx2q+C62lyzaz6MPfe8InwZm2Px/E=
Subject key identifier:   FB:A4:A5:90:AA:AB:E9:3D:2B:75:C2:75:9C:3B:BE:3D:CB:73:EF:0B
Certificate issuer:       /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial:       23CD28
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/ef406445a14cb7f52bed35e8f0e0791f7b1c3994.roa
Signing time:             Mon 25 Sep 2023 15:49:11 +0000
ROA not before:           Sun 24 Sep 2023 15:49:11 +0000
ROA not after:            Thu 25 Sep 2025 15:49:11 +0000
asID:                     20312
IP address blocks:        150.186.0.0/15 maxlen: 19
                          150.185.0.0/16 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2346280 (0x23cd28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
        Validity
            Not Before: Sep 24 15:49:11 2023 GMT
            Not After : Sep 25 15:49:11 2025 GMT
        Subject: CN=ef406445a14cb7f52bed35e8f0e0791f7b1c3994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:b0:74:6d:71:4e:74:c7:c2:8c:69:73:63:
                    e8:86:2e:be:d3:95:03:14:21:bc:14:17:ab:e5:55:
                    82:2c:b8:e3:e6:a0:cc:ec:1c:b8:f0:e5:14:c0:aa:
                    ad:7c:de:98:05:d7:1d:30:c4:c7:89:7a:8c:df:db:
                    92:43:6f:37:65:34:2d:0a:22:6b:aa:f6:f2:6f:ba:
                    ba:14:53:3e:5d:2c:ea:39:c3:36:cd:19:6f:f7:db:
                    1f:04:37:06:a2:33:50:4b:98:8b:1a:30:43:0d:45:
                    c3:64:0c:c8:4a:31:cd:61:fa:e3:f7:5e:0c:d4:a2:
                    a0:79:07:8c:75:ad:3a:a7:85:a9:b5:a8:51:7d:fc:
                    84:b7:5b:3f:13:40:2e:a2:72:6a:c3:04:8c:fd:26:
                    69:af:72:8e:46:d2:96:c1:33:83:5d:91:15:19:84:
                    e0:c9:30:c6:92:72:62:73:6f:5f:f5:79:5e:8c:60:
                    d6:f7:fb:a6:c3:2e:5d:4e:3f:0e:d6:23:62:22:21:
                    fb:40:c2:66:a5:df:e3:bf:8d:ab:00:3c:a0:60:cf:
                    32:55:1b:f9:00:d4:d8:05:89:57:c1:56:01:2d:be:
                    5c:fb:5c:2d:f5:41:24:23:81:1d:9a:61:52:61:cb:
                    15:e0:47:9c:9e:09:9b:df:0f:cb:ba:de:a4:48:6f:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A4:A5:90:AA:AB:E9:3D:2B:75:C2:75:9C:3B:BE:3D:CB:73:EF:0B
            X509v3 Authority Key Identifier:
                keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/ef406445a14cb7f52bed35e8f0e0791f7b1c3994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.185.0.0-150.187.255.255

    Signature Algorithm: sha256WithRSAEncryption
         37:04:ce:5f:c1:dd:25:dc:5a:f7:df:3d:32:89:11:18:cb:46:
         52:17:2f:3f:22:52:ed:43:a9:c7:1b:d7:ed:af:59:be:da:f8:
         1d:bf:ea:41:c7:46:c3:b6:58:d7:bd:1b:65:0f:86:df:de:cb:
         96:61:c0:b2:fd:be:58:cb:23:1d:4b:26:15:00:32:0e:84:44:
         d5:cd:bd:fb:18:01:28:94:8b:48:5c:52:7b:c0:1c:97:6c:9a:
         5f:17:ff:63:18:88:75:76:48:84:07:03:13:15:ba:22:9b:29:
         a9:35:a1:f2:b1:a6:77:bd:80:99:4c:8b:18:15:1f:18:1c:5a:
         b8:8c:01:78:2d:50:9b:5c:b7:72:e7:c8:f5:bf:df:f7:bf:eb:
         5d:79:f0:1c:f3:f4:cf:68:67:41:3e:70:5d:c5:89:bf:93:a8:
         08:d1:c7:36:ee:de:ca:29:38:e5:25:fc:ef:96:ab:6b:1d:02:
         c1:63:f0:75:4e:55:a8:0f:c9:cf:01:67:ed:1e:36:bd:bd:aa:
         f0:38:4f:07:d6:87:f7:f6:e5:41:10:00:af:a0:4d:a4:16:83:
         6e:72:67:95:65:d9:e9:33:54:a6:4b:86:21:fa:30:a6:ce:40:
         37:ce:5c:7e:9d:9c:b7:52:20:bd:02:2b:63:d0:e4:49:8c:45:
         3b:a9:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----