Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/ff23e47b7ddd06dc64079ade4d857cd10f17e929.roa
File:                     ff23e47b7ddd06dc64079ade4d857cd10f17e929.roa (raw, json)
Hash identifier:          UMXDtfbomDrNGxr7+mXnmbJLqPZMRwkGGu1x/EaLP5Y=
Subject key identifier:   13:3D:8A:48:FE:1B:F5:09:05:EB:84:CC:2C:69:3C:07:47:45:7B:2E
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       2434DF
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/ff23e47b7ddd06dc64079ade4d857cd10f17e929.roa
Signing time:             Fri 22 Sep 2023 17:08:57 +0000
ROA not before:           Sun 17 Sep 2023 03:00:00 +0000
ROA not after:            Fri 19 Sep 2025 03:00:00 +0000
asID:                     269918
IP address blocks:        131.72.168.0/22 maxlen: 24
                          2803:dd80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2372831 (0x2434df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Sep 17 03:00:00 2023 GMT
            Not After : Sep 19 03:00:00 2025 GMT
        Subject: CN=ff23e47b7ddd06dc64079ade4d857cd10f17e929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:d0:e6:e4:40:c1:5e:56:3c:a4:6b:20:a2:
                    8c:3e:fa:61:ce:2d:38:a5:93:18:ff:0c:8d:0c:62:
                    07:65:a0:23:d8:37:3d:44:a9:cc:70:42:2a:00:0d:
                    47:4b:94:8a:de:c5:dd:0d:af:54:be:46:f4:5b:6b:
                    1b:ad:f0:53:be:35:15:84:a7:4e:ee:c2:b6:44:d3:
                    ac:f0:36:b0:47:b5:bc:a0:02:ca:a8:59:c0:7a:8d:
                    99:ef:04:02:a5:4a:ca:79:b0:2f:3a:14:28:5a:e2:
                    e5:ff:45:0d:b1:28:c3:37:44:5b:50:8a:cd:c9:28:
                    7b:ec:ed:b5:98:eb:e3:46:23:97:59:5b:9e:01:17:
                    2c:40:bf:37:e8:e5:b4:61:f0:99:b2:b2:fb:e7:fe:
                    21:38:c3:69:38:6a:4f:b2:e8:59:fa:3d:9f:0d:bb:
                    dd:58:a6:08:af:ec:86:c7:a3:ed:ca:c2:78:44:e1:
                    e2:68:3c:7e:fa:0b:c3:fb:f4:97:85:c6:75:ef:4a:
                    2b:aa:f2:99:c1:2c:a4:4b:9b:b7:b1:88:08:77:9f:
                    c7:70:4f:dc:bb:54:13:e4:25:f7:2e:84:7d:5c:c9:
                    d1:25:71:66:38:25:50:39:f1:93:59:07:aa:19:f2:
                    9d:87:e6:21:5f:5c:e7:58:13:b8:d5:7b:55:77:2b:
                    b8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3D:8A:48:FE:1B:F5:09:05:EB:84:CC:2C:69:3C:07:47:45:7B:2E
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/ff23e47b7ddd06dc64079ade4d857cd10f17e929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:bf:51:f3:a8:00:27:2c:77:66:6d:7e:af:60:74:96:6e:4b:
         df:60:d1:9b:23:09:24:3b:14:6e:a2:43:7e:2f:59:36:d1:9f:
         ca:10:8b:9a:a9:05:d5:bf:c1:d3:a8:11:1f:35:1b:29:b5:c9:
         2d:4a:86:b7:6c:a6:4e:05:a7:95:61:19:9e:d6:b6:fa:41:69:
         3a:72:d5:c7:17:a1:ff:55:e8:a3:a0:af:88:93:3a:e6:0c:87:
         5b:b7:35:df:48:5e:ed:3a:4f:d2:aa:d2:6d:f3:84:f3:b9:91:
         c0:9e:d4:4a:4e:d7:93:1d:ea:55:67:f2:e0:cf:79:df:ed:9d:
         d6:53:de:2a:61:67:86:5d:15:b5:50:d9:b7:4d:f1:57:59:2a:
         e0:7a:36:87:e7:ba:5f:2b:a0:b1:62:ab:dd:4e:79:33:47:4a:
         71:54:3e:5f:7d:c3:d8:8c:ca:2c:28:2b:73:c4:7e:cc:93:12:
         d2:c6:1b:d9:18:49:47:08:88:cc:b7:80:80:62:29:42:37:07:
         b4:20:e5:a4:05:78:7a:62:7a:23:bd:99:9b:5b:3b:25:2f:88:
         9b:e2:05:24:99:ec:ab:21:ad:02:cd:93:3a:4b:8d:3a:c4:c9:
         d3:35:76:47:af:a0:8f:11:ad:87:e4:e3:21:41:af:a2:d9:62:
         ba:0f:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----