Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a76d17bf-da92-489c-bdd7-a9d2c8f16ffc/955905ed92ef6abe46143f7903620e44a9f9c39d.roa
File:                     955905ed92ef6abe46143f7903620e44a9f9c39d.roa (raw, json)
Hash identifier:          oNiiPyQoVuZQBMFztsBHKvtL+D7g1gYCyDyxpT1u4Y4=
Subject key identifier:   00:37:9B:FF:15:B7:9A:56:85:AC:2F:FF:65:25:DD:22:08:BD:20:D5
Certificate issuer:       /CN=23805813b8db816d15bdbeeb6cf82b37f383e99a
Certificate serial:       23CF55
Authority key identifier: 9C:9C:38:E1:70:C0:8D:C8:0F:0D:99:DA:D6:A1:95:19:8E:21:76:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23805813b8db816d15bdbeeb6cf82b37f383e99a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a76d17bf-da92-489c-bdd7-a9d2c8f16ffc/955905ed92ef6abe46143f7903620e44a9f9c39d.roa
Signing time:             Wed 20 Sep 2023 18:49:31 +0000
ROA not before:           Tue 19 Sep 2023 18:49:31 +0000
ROA not after:            Sat 20 Sep 2025 18:49:31 +0000
asID:                     265719
IP address blocks:        192.140.16.0/22 maxlen: 22
                          2803:dc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2346837 (0x23cf55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23805813b8db816d15bdbeeb6cf82b37f383e99a
        Validity
            Not Before: Sep 19 18:49:31 2023 GMT
            Not After : Sep 20 18:49:31 2025 GMT
        Subject: CN=955905ed92ef6abe46143f7903620e44a9f9c39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:97:0a:1e:5e:50:b4:66:fd:cc:43:b5:12:4a:
                    ee:17:ba:54:64:c6:46:ee:94:91:93:bb:6b:65:f7:
                    93:35:76:09:97:35:24:18:02:a8:f7:f1:7f:7f:76:
                    79:63:da:cc:86:00:88:2e:d8:57:ec:ce:2a:0e:54:
                    8f:00:9a:32:a0:79:f1:24:ff:64:91:5d:cd:e7:08:
                    8c:b4:67:e4:6c:30:80:37:72:db:bd:91:fe:ac:d5:
                    cd:bf:46:5b:0e:1e:fd:57:f7:00:85:16:09:a5:83:
                    77:ea:e2:a9:e0:6d:66:e6:c8:99:12:d9:dd:9d:9a:
                    26:8b:ff:68:23:49:12:e3:0f:7f:38:64:32:bc:d3:
                    ca:1b:33:36:e8:93:92:4a:22:0d:bd:3a:7a:3d:b4:
                    4e:85:42:93:36:54:86:01:58:07:62:d3:d9:7a:09:
                    93:10:9e:a6:70:dd:0b:85:8d:bf:36:09:ed:65:75:
                    ab:57:3d:d0:78:10:b6:b9:89:69:6d:8f:df:99:6e:
                    63:cb:05:82:77:7f:57:25:6f:38:b4:e2:49:b8:06:
                    ed:b0:27:4b:e1:7d:96:68:63:36:ae:d3:e8:36:21:
                    eb:fd:48:f9:15:0a:f9:43:67:da:37:ef:34:41:ce:
                    83:ec:ea:2f:38:ff:0b:5e:06:cb:79:75:f1:71:25:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:37:9B:FF:15:B7:9A:56:85:AC:2F:FF:65:25:DD:22:08:BD:20:D5
            X509v3 Authority Key Identifier:
                keyid:9C:9C:38:E1:70:C0:8D:C8:0F:0D:99:DA:D6:A1:95:19:8E:21:76:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23805813b8db816d15bdbeeb6cf82b37f383e99a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a76d17bf-da92-489c-bdd7-a9d2c8f16ffc/955905ed92ef6abe46143f7903620e44a9f9c39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a76d17bf-da92-489c-bdd7-a9d2c8f16ffc/23805813b8db816d15bdbeeb6cf82b37f383e99a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.16.0/22
                IPv6:
                  2803:dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:cc:14:43:c2:54:73:05:29:f5:c9:e7:c5:aa:61:72:84:f0:
         e3:a0:43:bf:4f:96:b9:85:9f:f6:03:9c:4b:87:ec:6f:e6:a0:
         40:14:e5:b0:06:2a:9e:c8:c8:a9:82:7c:6c:d9:c2:fd:ba:5f:
         d7:ce:56:e2:ff:25:d1:2d:8b:71:13:c7:32:52:e0:ca:d8:00:
         1f:6a:4f:e7:47:be:71:60:7d:2a:bc:67:61:06:e7:66:8d:cc:
         c9:fe:6f:d3:88:87:16:4a:02:b0:57:21:94:df:79:dd:5a:d9:
         80:20:4a:44:6b:d1:bf:d5:2c:a3:00:55:30:28:1d:ae:ca:a8:
         a1:57:ec:54:75:c8:80:7c:54:c7:b3:a9:e9:c2:40:99:36:c7:
         69:6f:58:4c:61:49:9f:a5:19:01:3c:c0:b2:bf:1c:d3:98:a0:
         a1:f2:48:a2:c5:32:0a:39:4e:c3:3d:bc:26:09:73:77:83:5e:
         bc:ec:f5:30:15:38:d8:cf:98:d3:2b:c1:03:7d:bb:26:ca:b1:
         96:de:6b:c1:d1:c5:8b:c6:b6:c3:97:ca:5f:90:24:77:93:46:
         42:fc:04:4a:9b:ef:31:8c:3c:3b:fd:ca:77:0e:d9:0e:09:b1:
         6b:9a:8a:d2:0d:13:f5:7d:b5:88:86:d9:82:30:a6:00:7f:dd:
         59:3d:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----