Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/84403d61f4d50bcb83097869a810beeecbbab746.roa
File:                     84403d61f4d50bcb83097869a810beeecbbab746.roa (raw, json)
Hash identifier:          hrxkmJTMIvzUjERnVup2g0HzbVsATrRo7uUG/jQH2uY=
Subject key identifier:   F1:13:79:45:89:9E:BC:CE:E6:64:8C:C3:02:40:9A:D0:F7:5D:E0:2B
Certificate issuer:       /CN=ba5859ff065527ea9359c240f3194fa4ef3813c4
Certificate serial:       207901
Authority key identifier: CF:D8:04:AE:22:D3:B0:07:20:FD:1B:00:5B:54:B2:3B:99:0B:4C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba5859ff065527ea9359c240f3194fa4ef3813c4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/84403d61f4d50bcb83097869a810beeecbbab746.roa
Signing time:             Mon 30 Oct 2023 20:58:05 +0000
ROA not before:           Mon 30 Oct 2023 20:58:05 +0000
ROA not after:            Thu 30 Oct 2025 20:58:05 +0000
asID:                     263235
IP address blocks:        192.100.186.0/23 maxlen: 24
                          2803:70e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128129 (0x207901)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba5859ff065527ea9359c240f3194fa4ef3813c4
        Validity
            Not Before: Oct 30 20:58:05 2023 GMT
            Not After : Oct 30 20:58:05 2025 GMT
        Subject: CN=84403d61f4d50bcb83097869a810beeecbbab746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:40:bb:76:69:c8:3b:56:bc:12:ab:aa:0b:
                    bb:91:55:64:4d:31:58:64:a5:94:10:98:7b:75:49:
                    31:18:01:7e:7c:b4:b1:ff:6d:7e:cb:63:90:60:37:
                    d3:dd:ec:37:4b:ae:1d:23:95:36:85:01:f1:44:20:
                    84:f8:46:bf:ae:03:84:42:91:ce:ef:de:0b:25:b6:
                    f9:2f:89:f1:55:06:f6:22:8f:e5:a4:a0:c5:8d:dd:
                    6d:10:9d:9e:11:99:a4:b8:77:46:8e:ef:02:46:7d:
                    96:21:40:b4:f3:74:aa:10:ed:ae:84:ac:50:9c:2b:
                    9a:7c:69:88:88:b4:92:88:5d:fd:e0:2e:12:fa:4e:
                    d4:51:44:25:68:6b:c4:fc:a4:0c:94:86:21:a4:ca:
                    41:bc:ba:35:2e:30:8f:a6:e1:f9:8a:4e:dc:76:c9:
                    4c:70:6b:01:7d:89:1b:69:3b:6c:d2:ed:3a:02:2d:
                    d9:3c:39:fc:ea:80:91:5e:ca:c6:d7:ab:02:01:4e:
                    8a:94:71:61:6e:fd:66:28:e4:b9:56:fc:89:0e:19:
                    09:1f:e2:b0:62:6c:10:20:54:56:21:c3:d1:08:3d:
                    39:93:a1:b2:64:c3:df:c2:89:db:c1:8f:1e:9b:2c:
                    6c:cf:8d:ae:15:b8:c3:0a:3b:db:a4:09:b6:e8:65:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:13:79:45:89:9E:BC:CE:E6:64:8C:C3:02:40:9A:D0:F7:5D:E0:2B
            X509v3 Authority Key Identifier:
                keyid:CF:D8:04:AE:22:D3:B0:07:20:FD:1B:00:5B:54:B2:3B:99:0B:4C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba5859ff065527ea9359c240f3194fa4ef3813c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/84403d61f4d50bcb83097869a810beeecbbab746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/ba5859ff065527ea9359c240f3194fa4ef3813c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.186.0/23
                IPv6:
                  2803:70e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:05:2f:e4:1c:1f:49:da:d4:14:43:ac:86:51:74:18:db:76:
         b8:ee:ca:0b:8c:87:87:8a:fd:4b:63:f0:68:47:75:5c:d2:4f:
         77:da:b2:c0:1e:ec:86:93:5f:22:4f:04:f0:a0:11:3d:c0:6e:
         4f:45:34:15:5c:37:60:69:4b:03:50:1f:59:cc:10:71:8d:f6:
         37:d2:25:ff:51:ed:f4:58:a7:b0:52:20:2c:63:08:f1:1e:fc:
         c8:1e:90:98:7f:1c:33:2d:62:86:51:55:0a:59:d0:33:b0:b1:
         1c:84:43:0a:fe:70:1a:fd:f4:d1:a7:95:96:4a:af:e6:6a:f4:
         b1:18:00:96:23:1a:29:fe:4f:cd:c8:dc:d1:aa:33:20:75:e3:
         d7:42:cf:23:40:db:c7:95:83:30:2e:f0:92:9c:0c:3d:75:a1:
         f4:b3:11:cf:68:55:45:92:f6:47:70:ae:76:5d:15:1a:d3:1a:
         a8:24:e0:5b:8c:90:aa:52:7d:ef:94:76:40:c3:be:a2:e1:db:
         d2:5b:c9:cf:ca:69:cb:0d:f4:b3:44:52:15:a6:aa:b3:15:bd:
         7f:58:2f:9a:2a:5f:94:5f:ae:92:76:16:28:e4:34:ae:33:cc:
         11:bd:33:81:44:cb:c3:10:36:37:51:03:8f:1b:75:94:cc:ca:
         fd:d6:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----