Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/b71a4c82144d372ae9e19b95b91a2ac3a959157d.roa
File:                     b71a4c82144d372ae9e19b95b91a2ac3a959157d.roa (raw, json)
Hash identifier:          puCdGgNpIvs5ElK+pg5ovEu8wkbVP+LPcDdBGVGmybg=
Subject key identifier:   1C:0E:95:C9:14:50:3F:76:40:8C:11:CC:DA:AF:1F:15:35:7B:05:78
Certificate issuer:       /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial:       21D5F0
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/b71a4c82144d372ae9e19b95b91a2ac3a959157d.roa
Signing time:             Thu 13 Jul 2023 14:10:29 +0000
ROA not before:           Wed 12 Jul 2023 14:10:29 +0000
ROA not after:            Sun 13 Jul 2025 14:10:29 +0000
asID:                     21575
IP address blocks:        148.102.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217456 (0x21d5f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
        Validity
            Not Before: Jul 12 14:10:29 2023 GMT
            Not After : Jul 13 14:10:29 2025 GMT
        Subject: CN=b71a4c82144d372ae9e19b95b91a2ac3a959157d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:34:a8:6a:dd:56:33:e4:f3:2c:1f:de:6c:
                    d0:cb:2e:1e:97:14:db:94:46:5a:7b:42:c0:a2:72:
                    f2:29:9b:f9:2d:ad:fd:e3:1b:81:5c:1a:0e:5e:4d:
                    01:6d:ca:b8:9e:21:35:62:c2:fb:5d:6c:de:8c:fe:
                    bd:cb:f8:8d:db:17:cd:39:f4:22:75:04:e0:e2:4f:
                    bb:24:27:5b:37:51:2b:fe:ba:4a:89:cb:3a:67:21:
                    dc:8b:4a:cc:f1:4a:b1:b9:03:3a:2d:d3:f5:a1:14:
                    ea:d0:cd:90:37:14:05:24:a3:d3:65:78:d9:58:60:
                    44:11:d4:3c:0b:99:be:5d:7a:af:83:93:80:3f:4b:
                    c9:c1:4b:70:8f:49:d3:1b:f4:d7:3f:f4:b7:29:65:
                    42:36:bc:eb:7b:af:93:0a:86:69:38:c9:09:75:52:
                    ac:3f:09:10:63:33:c3:30:29:23:b8:7f:00:3e:0b:
                    40:c3:cf:25:e0:78:b1:be:b4:d9:3a:57:bc:1c:21:
                    6e:5d:65:03:29:f3:1f:a0:6a:d4:a2:a7:ed:21:b8:
                    83:50:c5:8c:c4:83:6e:c7:e1:cb:9a:1f:8d:e8:3c:
                    a1:3a:9f:7e:c8:62:e8:23:f1:ae:3a:84:68:b3:71:
                    37:0a:34:a5:17:68:64:0c:57:9a:81:f5:f8:45:25:
                    8a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0E:95:C9:14:50:3F:76:40:8C:11:CC:DA:AF:1F:15:35:7B:05:78
            X509v3 Authority Key Identifier:
                keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/b71a4c82144d372ae9e19b95b91a2ac3a959157d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:7d:c2:24:1c:3e:84:cc:b5:1a:fb:d7:48:2c:6b:53:31:a9:
         72:a8:6d:fe:00:fc:4d:dd:53:c4:db:4c:90:61:95:43:3b:69:
         46:c3:d0:1c:69:c1:54:65:4f:b3:30:d0:ff:8f:83:9d:1f:28:
         79:7a:f8:a2:64:c7:cd:3f:d2:a4:25:0d:0a:ca:81:11:0e:36:
         48:04:70:4e:3c:94:90:64:22:d0:fd:3d:e9:e9:3d:eb:cb:6f:
         cb:5a:d9:66:84:cd:94:93:19:12:67:34:bd:db:ff:10:00:36:
         91:2d:ce:4e:58:7e:8c:aa:90:86:92:26:ab:f7:67:a0:fb:88:
         30:55:70:20:4b:40:00:29:d3:1a:4b:a8:f6:19:b3:49:73:c8:
         77:2f:18:ac:35:84:8f:c8:20:a5:ce:39:b1:fb:c5:52:88:42:
         5d:11:f1:cc:cc:64:46:db:7d:cd:7e:e1:be:6e:62:85:16:d4:
         d7:f1:d0:47:3e:36:3b:da:de:a3:f8:76:d8:c4:2a:d5:e8:61:
         c4:53:82:06:9b:de:38:1e:74:22:45:ec:42:67:75:03:6c:3d:
         08:66:1a:49:a1:be:a4:90:b4:3c:c4:a4:42:1c:ad:4c:b7:dd:
         3a:ec:ac:2b:df:fd:81:10:96:54:ad:34:ef:b6:0c:1b:fb:4e:
         aa:27:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----