Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6a72971-a1f2-414e-abd8-34a86c9818a8/bea8ea475f808349c08f8b8ace4c3dfc248e732e.roa
File:                     bea8ea475f808349c08f8b8ace4c3dfc248e732e.roa (raw, json)
Hash identifier:          ZuNdaep12FgnbYR7h3ZiK0CN8z+fozkyA6tO4Jky7vU=
Subject key identifier:   EC:47:F7:8C:84:15:91:41:0A:32:62:45:41:EE:7F:2B:73:4B:F8:BD
Certificate issuer:       /CN=a634ea0f5eb8ee6f8f1c557cff059917f62d5237
Certificate serial:       03DF56
Authority key identifier: DB:0C:4B:14:28:49:1B:74:66:93:4B:A0:2A:A4:35:87:DB:8C:07:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a634ea0f5eb8ee6f8f1c557cff059917f62d5237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6a72971-a1f2-414e-abd8-34a86c9818a8/bea8ea475f808349c08f8b8ace4c3dfc248e732e.roa
Signing time:             Wed 11 Oct 2023 20:20:53 +0000
ROA not before:           Tue 10 Oct 2023 20:20:52 +0000
ROA not after:            Sat 11 Oct 2025 20:20:52 +0000
asID:                     263809
IP address blocks:        143.208.44.0/22 maxlen: 24
                          2803:5240::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253782 (0x3df56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a634ea0f5eb8ee6f8f1c557cff059917f62d5237
        Validity
            Not Before: Oct 10 20:20:52 2023 GMT
            Not After : Oct 11 20:20:52 2025 GMT
        Subject: CN=bea8ea475f808349c08f8b8ace4c3dfc248e732e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:ef:12:78:f7:0d:83:39:25:e8:f9:1e:47:
                    23:e0:ef:af:bd:77:45:54:c8:8d:2a:7f:c2:7a:06:
                    68:14:44:cc:62:67:18:ab:16:b1:9f:64:5c:c8:ed:
                    99:6b:57:23:df:18:fe:04:aa:1b:fb:5c:b1:cf:d5:
                    11:b2:0c:36:e6:e0:0f:84:5d:a6:b6:a9:f3:77:14:
                    24:b7:cd:11:eb:02:e7:93:be:e2:24:7f:ed:00:19:
                    b7:9d:3f:0c:aa:3f:bd:d4:58:3a:61:60:6e:a8:c8:
                    17:e9:68:38:3d:0f:95:e0:ca:a9:89:06:26:41:24:
                    7f:b5:6d:8e:5d:dd:60:10:f2:85:d0:15:48:05:f4:
                    9c:97:84:46:9d:33:43:a6:a9:51:0c:04:40:d1:87:
                    63:df:1e:85:09:9c:44:a1:b9:0c:79:42:c2:4f:6d:
                    b6:d8:db:f9:06:33:a2:03:da:24:40:18:37:d6:9f:
                    01:9b:54:29:c4:dc:46:ae:b8:f1:27:4b:1d:6c:f0:
                    1a:b7:2d:17:7e:d7:9c:ff:e7:71:7e:37:ff:28:da:
                    61:42:2f:03:c6:ec:50:ee:6d:bc:43:7a:a9:af:49:
                    40:57:56:72:16:72:f2:32:43:13:38:7a:53:6f:1d:
                    44:63:5b:94:e2:0b:b1:0b:ad:c4:eb:e3:ed:1e:2a:
                    21:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:47:F7:8C:84:15:91:41:0A:32:62:45:41:EE:7F:2B:73:4B:F8:BD
            X509v3 Authority Key Identifier:
                keyid:DB:0C:4B:14:28:49:1B:74:66:93:4B:A0:2A:A4:35:87:DB:8C:07:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a634ea0f5eb8ee6f8f1c557cff059917f62d5237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6a72971-a1f2-414e-abd8-34a86c9818a8/bea8ea475f808349c08f8b8ace4c3dfc248e732e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6a72971-a1f2-414e-abd8-34a86c9818a8/a634ea0f5eb8ee6f8f1c557cff059917f62d5237.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.44.0/22
                IPv6:
                  2803:5240::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:c7:1c:38:19:ab:cc:5d:bb:a3:a1:27:d4:60:eb:21:2a:01:
         00:23:2e:0c:4d:21:31:da:35:29:2f:90:2e:dd:f8:3a:aa:77:
         f9:ae:fc:e0:39:6a:c4:10:ff:37:5e:7d:7d:dc:2b:e1:be:5f:
         2e:bd:6b:4f:e7:63:90:c4:76:71:42:bf:70:df:e0:25:b1:1b:
         ed:97:fb:53:05:a2:2d:1c:af:1f:54:58:1e:7c:ed:28:08:80:
         f2:5c:aa:77:93:07:33:8a:9c:18:18:09:ee:c8:cb:00:06:3c:
         9c:27:58:aa:0a:c9:47:bc:12:43:31:a5:35:c6:05:3e:8f:28:
         b9:83:fa:1b:56:3b:20:77:81:52:1d:61:9e:b7:8e:78:37:39:
         17:92:04:3b:2b:da:b0:e8:b9:e9:3e:3d:d0:0d:6b:69:af:f7:
         d2:69:fa:65:05:f8:5d:f0:03:4e:8b:99:31:df:85:25:99:e0:
         65:21:58:dc:c2:ec:1c:cd:53:8e:e3:f3:18:5a:ca:1b:a0:eb:
         7e:09:66:78:96:05:da:9b:52:3b:05:f4:54:0d:24:2e:a4:51:
         aa:c3:e8:85:83:cc:92:c8:0d:05:5c:f4:6b:7c:2e:6d:b0:61:
         f8:68:a1:8d:5b:ba:b5:d0:87:32:c0:6f:e6:c5:71:44:eb:00:
         c8:11:a0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----