Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/a30c08783b3fd68040f267d5d85bc921d76eb5aa.roa
File:                     a30c08783b3fd68040f267d5d85bc921d76eb5aa.roa (raw, json)
Hash identifier:          8uNiw1DS7XaZGeWiaNDnKNRgX/ASxIR9Y8abi7XXYQw=
Subject key identifier:   32:0D:AF:C7:4B:4D:9E:AA:54:28:7A:1F:E5:FB:D9:CB:ED:10:7C:22
Certificate issuer:       /CN=c00a39f3545eb5fa299c3bd8174e9fc35444dfc0
Certificate serial:       11CBA6
Authority key identifier: 6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/a30c08783b3fd68040f267d5d85bc921d76eb5aa.roa
Signing time:             Wed 10 May 2023 23:02:59 +0000
ROA not before:           Tue 09 May 2023 23:02:58 +0000
ROA not after:            Sat 10 May 2025 23:02:58 +0000
asID:                     28409
IP address blocks:        168.121.60.0/22 maxlen: 22
                          2806:21e::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166246 (0x11cba6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00a39f3545eb5fa299c3bd8174e9fc35444dfc0
        Validity
            Not Before: May  9 23:02:58 2023 GMT
            Not After : May 10 23:02:58 2025 GMT
        Subject: CN=a30c08783b3fd68040f267d5d85bc921d76eb5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:15:fa:1d:e5:c9:21:52:8c:66:b2:0c:c3:
                    4c:a9:39:e6:c0:d7:08:43:62:3b:6d:44:c3:2d:0d:
                    b3:a6:b9:6d:ec:b7:94:26:43:7e:b4:46:ca:15:69:
                    80:b7:95:85:69:b8:e6:71:7b:d3:e9:88:24:94:0f:
                    eb:44:c3:6b:00:3c:e2:3c:63:51:41:99:83:67:6b:
                    8e:eb:89:d7:fd:8d:d9:62:d8:73:15:26:f2:4b:c5:
                    26:a4:4c:1d:e8:75:c7:82:b8:98:2d:3c:53:20:24:
                    2e:c3:88:15:fd:90:0d:9d:17:91:1c:0c:2d:70:41:
                    25:29:4d:af:b0:fe:16:fe:fc:90:c3:6b:ff:04:e2:
                    32:ec:81:58:f1:aa:c0:cf:7d:39:dd:76:69:9c:30:
                    8b:74:16:10:48:2a:6d:8c:59:94:b8:76:80:dd:26:
                    0b:46:98:f5:d0:05:10:ef:b6:cc:af:c0:d5:8a:14:
                    e5:ae:0b:88:67:db:7c:83:e4:b1:67:7f:d6:1f:87:
                    fe:07:bd:38:43:6a:89:87:b2:54:9d:4d:85:34:ad:
                    21:90:9e:27:81:27:77:43:da:b8:bf:0e:56:27:c1:
                    a4:89:5f:ae:12:7b:e4:85:5e:37:a6:0f:02:3a:a6:
                    c9:9c:39:72:02:40:26:02:50:c3:a8:f2:9f:69:b4:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0D:AF:C7:4B:4D:9E:AA:54:28:7A:1F:E5:FB:D9:CB:ED:10:7C:22
            X509v3 Authority Key Identifier:
                keyid:6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/a30c08783b3fd68040f267d5d85bc921d76eb5aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.60.0/22
                IPv6:
                  2806:21e::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:7f:b0:29:53:4a:2d:e2:73:c9:a2:15:f1:10:d6:e8:82:ca:
         aa:4d:51:b7:10:0c:a0:24:35:cb:b8:19:75:5c:17:ae:ee:f2:
         7f:e1:31:a0:26:a1:9d:3f:8d:bd:95:31:b3:8f:20:64:39:d5:
         bd:cc:1c:c8:f9:86:bc:37:61:71:f5:8d:36:15:d6:69:06:38:
         23:25:6e:57:cf:6d:1b:16:5c:82:4d:74:da:e3:da:ae:f8:c4:
         2e:69:ea:d5:9f:ca:ab:26:c6:3a:f1:33:9f:50:85:8f:5d:ad:
         d1:a2:49:08:1c:58:a0:87:39:0b:03:e1:75:c1:8b:d3:be:a4:
         49:4a:9e:31:48:12:11:27:10:c5:43:34:5e:6b:c5:20:8f:6b:
         b5:e4:ea:55:36:49:10:43:84:36:10:28:42:51:50:6a:07:f3:
         32:a2:c2:d7:04:f4:45:41:fc:8a:89:75:a1:72:73:e9:a3:58:
         a0:7e:3d:f3:ff:58:cd:6c:7d:14:b7:59:f4:61:96:7a:21:93:
         65:16:20:f6:8b:80:df:0d:9e:32:ad:1a:c5:6d:ce:8f:0a:46:
         22:f8:3c:d2:e5:4e:99:73:f6:36:8a:2e:2e:84:2b:e2:68:e0:
         28:4d:71:61:3e:ac:5f:15:12:26:44:b8:a9:bc:bd:61:a9:df:
         be:32:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----