Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/dc26c356a9183f1f62b6af579179da60c307f677.roa
File:                     dc26c356a9183f1f62b6af579179da60c307f677.roa (raw, json)
Hash identifier:          /u12DRBgUYvcIfSiDY/5yT44NQAu0G4dC2Zduiwx2Eo=
Subject key identifier:   F8:43:52:4D:FA:99:58:4C:A9:F3:35:2E:1E:B0:5D:33:24:C4:ED:F5
Certificate issuer:       /CN=9155d1ceb3948af4b1d280927ef77d604a5582eb
Certificate serial:       1FD7ED
Authority key identifier: EB:F2:97:60:6F:53:C8:20:C1:F7:B9:0E:EE:98:A2:A8:EA:8F:87:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9155d1ceb3948af4b1d280927ef77d604a5582eb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/dc26c356a9183f1f62b6af579179da60c307f677.roa
Signing time:             Thu 20 Apr 2023 04:13:36 +0000
ROA not before:           Wed 19 Apr 2023 04:13:36 +0000
ROA not after:            Sun 20 Apr 2025 04:13:36 +0000
asID:                     264676
IP address blocks:        168.205.8.0/22 maxlen: 24
                          2803:ed40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2086893 (0x1fd7ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9155d1ceb3948af4b1d280927ef77d604a5582eb
        Validity
            Not Before: Apr 19 04:13:36 2023 GMT
            Not After : Apr 20 04:13:36 2025 GMT
        Subject: CN=dc26c356a9183f1f62b6af579179da60c307f677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:9d:01:fc:d7:ed:ec:74:54:b8:fe:40:cf:
                    99:9b:63:20:41:45:45:5e:56:dc:60:bd:58:b6:24:
                    bf:4c:5a:6f:a5:b7:e6:54:8b:6c:1b:39:51:9e:e1:
                    4a:5b:db:93:1f:a1:6f:ea:39:31:a6:47:79:66:f3:
                    77:ce:2f:8d:88:11:5a:dc:21:4f:47:4e:2a:8c:cc:
                    e1:a0:d4:84:1b:cc:d2:b0:a3:17:2e:52:fe:1c:9c:
                    67:33:97:d3:63:ec:4c:12:d4:55:c0:5d:79:49:d1:
                    00:33:cd:52:62:1b:fa:63:05:66:ed:66:66:07:d9:
                    56:ad:c2:64:b8:83:05:e5:76:8d:aa:48:4c:4a:bc:
                    9d:db:1f:98:3a:91:bc:c4:e8:d6:9e:26:e4:d2:94:
                    65:bf:49:93:e2:56:64:2e:82:be:9b:ab:7a:45:f8:
                    44:b2:11:48:40:a1:ac:68:ad:6e:1d:d4:80:54:7f:
                    5f:19:98:08:be:86:97:43:d5:71:cc:7f:bf:e0:7a:
                    77:4f:8a:9e:49:72:08:8b:2e:59:9f:80:d4:b2:4b:
                    e6:4c:49:75:8c:e2:e3:97:14:dd:f4:91:a7:a5:a3:
                    01:96:fb:25:2a:1a:5e:11:d6:2c:f8:28:10:20:f1:
                    6c:76:2e:e6:c3:ec:16:f4:7d:2e:0b:b3:f7:d4:2e:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:43:52:4D:FA:99:58:4C:A9:F3:35:2E:1E:B0:5D:33:24:C4:ED:F5
            X509v3 Authority Key Identifier:
                keyid:EB:F2:97:60:6F:53:C8:20:C1:F7:B9:0E:EE:98:A2:A8:EA:8F:87:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9155d1ceb3948af4b1d280927ef77d604a5582eb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/dc26c356a9183f1f62b6af579179da60c307f677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/9155d1ceb3948af4b1d280927ef77d604a5582eb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.8.0/22
                IPv6:
                  2803:ed40::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:41:b0:79:03:b4:9c:82:2a:98:57:6d:6a:05:fe:73:c4:78:
         d4:69:2d:c1:87:c3:19:3d:08:dc:c0:8a:f5:79:1d:f0:2c:99:
         ad:c4:4a:fc:cf:25:13:06:6f:68:94:9a:01:1e:5b:ee:ac:24:
         c7:7a:fe:63:36:5f:1b:f5:97:10:7c:a6:0a:bd:3d:42:4a:75:
         a0:46:1b:52:39:33:dd:80:7d:26:cd:14:1c:4c:03:e1:cd:4f:
         66:ad:4d:6a:8a:a5:f5:fe:7d:35:ca:b9:cf:02:ae:fe:ef:59:
         37:68:54:65:e2:67:18:e6:3f:bd:b0:3a:25:03:1d:1a:bc:23:
         ec:fc:de:ff:d3:85:e6:48:b7:bb:bf:40:b5:a2:5e:5d:f1:05:
         f3:47:52:f1:97:ad:53:2c:49:c8:a2:97:c8:40:be:82:b1:29:
         82:dd:76:04:93:7a:f6:b5:84:cd:7f:60:12:0b:c8:58:5d:e5:
         51:5e:ca:8a:ef:0a:0f:82:fe:62:5a:dc:f8:a7:3b:5f:55:9a:
         bf:5c:35:92:bb:ab:3a:de:1c:24:bd:df:76:74:8e:52:3d:f4:
         b2:63:3e:ce:bd:5a:c3:69:2f:eb:2e:32:d1:38:b8:9f:6f:50:
         10:28:07:f0:28:d4:35:8d:72:0b:1d:60:f0:20:4d:e3:9a:b5:
         25:0d:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----