Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/369a0b65d8a0825e6b5e102a77a8aed13c258ec9.roa
File:                     369a0b65d8a0825e6b5e102a77a8aed13c258ec9.roa (raw, json)
Hash identifier:          v35In5LoO2Z6xDrDM1lmwv3QXPSkQptr+x4w6EdhmJE=
Subject key identifier:   67:BD:17:01:A5:87:07:29:DA:44:80:CD:B4:B2:65:9E:31:A7:DC:62
Certificate issuer:       /CN=9fe1b4ced70a812ae4cb948c754ed69ba0affff5
Certificate serial:       02B57A
Authority key identifier: D8:90:64:ED:82:CC:6C:14:3C:BA:DB:B9:54:3D:CD:41:D9:0C:8B:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/369a0b65d8a0825e6b5e102a77a8aed13c258ec9.roa
Signing time:             Fri 28 Jul 2023 00:28:11 +0000
ROA not before:           Thu 27 Jul 2023 00:28:10 +0000
ROA not after:            Mon 28 Jul 2025 00:28:10 +0000
asID:                     270096
IP address blocks:        170.245.132.0/23 maxlen: 23
                          170.245.132.0/24 maxlen: 24
                          170.245.133.0/24 maxlen: 24
                          2803:47e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177530 (0x2b57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe1b4ced70a812ae4cb948c754ed69ba0affff5
        Validity
            Not Before: Jul 27 00:28:10 2023 GMT
            Not After : Jul 28 00:28:10 2025 GMT
        Subject: CN=369a0b65d8a0825e6b5e102a77a8aed13c258ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:84:a1:aa:71:60:07:e4:65:09:c2:c7:aa:ee:
                    5e:40:fa:5f:6d:ca:1e:fc:90:e6:58:c8:82:de:5c:
                    e9:f3:a8:5a:c7:4c:d3:5b:ef:54:b1:ca:d1:c9:9e:
                    81:1b:72:7b:56:77:d9:8a:67:f2:2e:6f:f3:f2:4c:
                    f8:91:f2:6e:3a:3d:c7:a2:e1:60:6b:25:ca:c7:01:
                    02:44:49:61:43:b6:08:a4:1b:d9:0b:69:06:db:b8:
                    b3:91:2c:01:9a:f4:f4:11:77:b5:e4:06:c0:e5:5b:
                    65:fe:82:50:59:78:c0:01:1f:24:a6:90:42:95:e6:
                    ca:dd:c5:25:81:06:4d:4e:27:f9:13:95:bd:61:10:
                    85:c7:a8:d0:2c:c7:c4:b2:87:79:8c:a7:5c:ae:55:
                    de:fc:01:a1:f4:09:8a:7e:e3:5b:1f:13:0c:c5:07:
                    ce:06:13:ca:44:97:d1:bb:bd:18:15:36:54:1b:f6:
                    95:25:17:22:f9:b2:ef:a3:2f:ca:f9:d2:0a:84:c6:
                    a9:d3:02:bb:be:8b:d0:de:8c:53:25:3f:11:89:63:
                    10:85:c1:cb:8f:56:f1:c0:87:21:58:ad:fd:91:2f:
                    c6:af:ff:1b:fa:35:b0:fc:04:08:12:d4:6b:5a:19:
                    24:89:05:6b:91:aa:0b:86:47:95:6c:93:51:c5:51:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BD:17:01:A5:87:07:29:DA:44:80:CD:B4:B2:65:9E:31:A7:DC:62
            X509v3 Authority Key Identifier:
                keyid:D8:90:64:ED:82:CC:6C:14:3C:BA:DB:B9:54:3D:CD:41:D9:0C:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/369a0b65d8a0825e6b5e102a77a8aed13c258ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.132.0/23
                IPv6:
                  2803:47e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:b7:8e:65:1f:14:0b:3d:59:aa:b9:e7:63:cb:7f:68:88:
         89:ce:05:91:48:35:ca:08:b7:29:d4:e1:6e:ee:ee:6a:83:3b:
         ee:6f:23:1e:66:21:69:ea:04:77:bb:ea:e8:c9:37:1c:ba:6c:
         b6:f5:98:42:55:0f:7b:66:0d:22:f9:5e:95:a0:3f:b5:a0:38:
         4e:d9:e5:9f:15:31:9a:5a:a8:6a:24:a8:10:bf:dd:0f:5c:54:
         a2:7f:56:5b:b5:bb:95:4c:ce:53:8b:bd:60:88:e0:79:70:5f:
         30:68:f2:8a:f4:53:3d:bc:0c:46:6d:f9:93:f2:e1:35:0d:85:
         d0:76:99:08:b4:a8:20:13:80:81:8a:f1:3e:44:e1:c2:87:fd:
         9b:e1:04:f1:b0:a8:ee:17:cb:d3:d8:94:00:31:44:0d:31:01:
         85:19:d0:b2:ad:bc:0f:56:3b:96:0b:9c:ce:c5:f0:ab:81:ba:
         a9:b3:20:9b:17:b4:45:03:6a:09:52:81:ae:24:4b:ed:18:91:
         51:83:8c:cf:5c:47:b9:b4:93:79:8f:d5:2b:cc:9f:26:2f:19:
         77:ff:84:02:1e:fa:9a:29:40:e4:5e:8d:50:27:1d:0d:6f:a2:
         8d:ee:8e:86:97:14:93:bf:b5:3e:f3:98:ee:49:55:e4:ad:bf:
         90:fd:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----