Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c58524a6-d497-4034-b7e0-b0875ced2f4e/74d0374771c569ae123656cfc1497f2c65630bf6.roa
File:                     74d0374771c569ae123656cfc1497f2c65630bf6.roa (raw, json)
Hash identifier:          2JB+gbvXvXWLDWu/Kuj71dgoJ7WVFC+AY2+fuTW5CyQ=
Subject key identifier:   9F:E0:5C:58:9D:23:61:78:E7:C5:D0:28:E4:B8:44:B3:E9:A0:94:2B
Certificate issuer:       /CN=fa120909414973eeadc2b7772a99dfb00250a1e6
Certificate serial:       02DA69
Authority key identifier: 9D:C4:53:A7:8C:FF:93:F7:5C:B0:B7:52:35:D4:F8:68:91:3B:8A:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa120909414973eeadc2b7772a99dfb00250a1e6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c58524a6-d497-4034-b7e0-b0875ced2f4e/74d0374771c569ae123656cfc1497f2c65630bf6.roa
Signing time:             Wed 23 Aug 2023 13:49:50 +0000
ROA not before:           Tue 22 Aug 2023 13:49:50 +0000
ROA not after:            Sat 23 Aug 2025 13:49:50 +0000
asID:                     262229
IP address blocks:        170.239.88.0/22 maxlen: 24
                          186.5.240.0/20 maxlen: 24
                          2803:7400::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186985 (0x2da69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa120909414973eeadc2b7772a99dfb00250a1e6
        Validity
            Not Before: Aug 22 13:49:50 2023 GMT
            Not After : Aug 23 13:49:50 2025 GMT
        Subject: CN=74d0374771c569ae123656cfc1497f2c65630bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:7b:99:e6:ee:f2:74:a8:d7:13:6a:ff:dc:
                    22:51:41:3d:a6:ef:ef:57:11:4d:9c:1b:66:b3:64:
                    6b:9a:97:67:c6:fd:5b:ec:c8:76:f6:2f:e3:21:10:
                    09:34:db:d7:66:c7:a8:52:d4:05:b2:a1:6d:ca:25:
                    2b:4e:41:13:b0:fa:66:21:13:d8:c5:22:30:59:0c:
                    41:5b:47:2f:ee:f6:9f:d3:5d:47:1e:ac:1e:5b:13:
                    9a:56:a7:04:e1:65:04:79:ba:99:d7:b3:9a:ab:08:
                    43:49:3f:a5:b0:ff:da:30:a1:ec:c3:37:fe:e9:91:
                    6b:d4:ba:82:15:bf:4f:95:0d:d0:be:30:44:89:c6:
                    19:78:f2:6d:5f:4b:18:b3:45:a1:6f:81:6b:1b:28:
                    d7:98:e4:86:bc:b7:34:f8:5c:57:f5:7e:3a:86:0f:
                    07:d1:59:cd:f2:13:36:ee:b5:d7:19:b2:53:40:17:
                    36:37:b8:07:2d:13:d1:81:a9:fa:34:2d:41:54:f8:
                    50:67:85:a0:e6:de:62:0e:25:16:f8:b7:28:78:ff:
                    21:7a:80:18:96:6c:1d:bd:09:cc:98:f4:05:0b:4b:
                    fa:41:67:ab:e7:fd:80:84:b6:30:20:ec:57:cf:0b:
                    8e:37:d6:cd:49:de:ee:d8:1d:6f:dc:da:95:0e:7b:
                    68:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E0:5C:58:9D:23:61:78:E7:C5:D0:28:E4:B8:44:B3:E9:A0:94:2B
            X509v3 Authority Key Identifier:
                keyid:9D:C4:53:A7:8C:FF:93:F7:5C:B0:B7:52:35:D4:F8:68:91:3B:8A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa120909414973eeadc2b7772a99dfb00250a1e6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c58524a6-d497-4034-b7e0-b0875ced2f4e/74d0374771c569ae123656cfc1497f2c65630bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c58524a6-d497-4034-b7e0-b0875ced2f4e/fa120909414973eeadc2b7772a99dfb00250a1e6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.88.0/22
                  186.5.240.0/20
                IPv6:
                  2803:7400::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:15:ba:64:ff:b5:01:89:4b:86:b8:30:da:b3:3c:89:b6:66:
         3b:16:cf:0f:12:91:95:8c:e8:d9:68:72:55:66:3d:d3:fa:33:
         4c:24:9c:42:d4:24:85:c2:cb:04:14:a2:e4:9a:cd:52:0b:d2:
         35:05:c4:e6:a5:a3:59:2d:b8:e7:01:8c:c9:4a:2d:38:63:0f:
         35:d2:3d:00:0b:70:ff:9d:08:1e:65:b7:fb:57:18:1f:22:5c:
         50:c2:8e:d6:e5:75:09:e0:66:38:0b:17:76:c0:05:ea:94:00:
         41:89:8d:40:46:7c:35:34:93:47:e7:87:f3:7d:7f:b5:a9:8b:
         c8:f3:31:93:48:b5:72:aa:ce:50:51:e6:1c:fe:0c:85:18:b3:
         19:99:64:6a:18:cb:3a:d9:7b:e6:b5:aa:5a:98:0d:bb:69:36:
         c3:66:73:93:f9:2e:39:22:66:54:37:bf:39:a1:50:a9:10:61:
         1d:1e:41:78:1b:b2:2d:8f:60:75:52:1c:df:0f:a9:90:d2:61:
         c5:50:50:ac:f0:a2:bd:27:a7:86:2d:bd:9b:4e:67:ee:50:d5:
         22:61:18:e9:b8:bf:ae:ee:3d:ae:5a:b1:19:2a:b8:d4:e0:1f:
         7a:c3:cd:13:62:ea:6c:f8:4d:9f:5e:1f:eb:16:61:3f:23:c5:
         01:a0:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----