Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c58524a6-d497-4034-b7e0-b0875ced2f4e/b93054344b9ea67062542c4a07fbd577f4dc9762.roa
File:                     b93054344b9ea67062542c4a07fbd577f4dc9762.roa (raw, json)
Hash identifier:          cVp3OumabvmgCx4k3acF+UK2f8bibHtozXwIemHVGmI=
Subject key identifier:   1A:9E:F0:BC:E1:3F:FF:91:CE:2A:06:E6:38:FB:4C:0C:BD:07:78:D9
Certificate issuer:       /CN=fa120909414973eeadc2b7772a99dfb00250a1e6
Certificate serial:       020ECE
Authority key identifier: 9D:C4:53:A7:8C:FF:93:F7:5C:B0:B7:52:35:D4:F8:68:91:3B:8A:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa120909414973eeadc2b7772a99dfb00250a1e6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c58524a6-d497-4034-b7e0-b0875ced2f4e/b93054344b9ea67062542c4a07fbd577f4dc9762.roa
Signing time:             Wed 26 Jul 2023 12:44:49 +0000
ROA not before:           Tue 25 Jul 2023 12:44:49 +0000
ROA not after:            Sat 26 Jul 2025 12:44:49 +0000
asID:                     262229
IP address blocks:        170.239.88.0/22 maxlen: 22
                          186.5.240.0/20 maxlen: 20
                          2803:7400::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134862 (0x20ece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa120909414973eeadc2b7772a99dfb00250a1e6
        Validity
            Not Before: Jul 25 12:44:49 2023 GMT
            Not After : Jul 26 12:44:49 2025 GMT
        Subject: CN=b93054344b9ea67062542c4a07fbd577f4dc9762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:a7:99:86:b2:d2:a8:91:02:13:7e:32:7e:
                    b9:90:6f:52:2f:8d:ac:86:1b:74:08:ac:fe:3c:22:
                    ac:d7:aa:e5:e9:de:de:8f:34:18:0c:af:2d:c0:49:
                    e1:26:6c:ed:0b:dd:8b:a5:5e:5e:d8:af:52:ec:1a:
                    bf:3f:d0:53:a1:1f:34:8e:be:99:60:99:97:01:09:
                    9a:32:13:3a:70:29:5f:53:3f:b8:5b:21:93:04:0a:
                    cf:c9:99:c5:ca:c5:3b:79:ae:9f:51:4e:c8:40:40:
                    85:c3:66:6d:bf:44:df:9f:0f:d2:68:ea:32:01:7e:
                    7b:d2:ee:08:92:9a:96:61:9b:b6:a7:b9:a2:11:3d:
                    3b:f8:8a:44:48:69:2e:b8:58:7c:f8:60:04:dc:30:
                    84:35:10:ea:50:75:40:02:73:20:52:53:7c:2c:f8:
                    23:22:5b:74:85:83:19:2b:b0:e7:25:27:c0:c6:d4:
                    77:27:81:ac:f2:71:4e:7d:39:ab:7c:fb:72:0f:7b:
                    8a:66:c5:7c:e0:e8:cd:12:b7:ce:81:b5:9e:6b:8f:
                    8c:7b:0c:3d:f6:9d:04:a6:0f:f4:ae:15:5f:0e:4f:
                    a3:9c:69:ce:88:bd:76:fa:9b:61:ec:32:c6:aa:79:
                    ad:3d:08:a3:eb:7f:ec:ae:4a:80:e0:ec:11:7b:a6:
                    3e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9E:F0:BC:E1:3F:FF:91:CE:2A:06:E6:38:FB:4C:0C:BD:07:78:D9
            X509v3 Authority Key Identifier:
                keyid:9D:C4:53:A7:8C:FF:93:F7:5C:B0:B7:52:35:D4:F8:68:91:3B:8A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa120909414973eeadc2b7772a99dfb00250a1e6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c58524a6-d497-4034-b7e0-b0875ced2f4e/b93054344b9ea67062542c4a07fbd577f4dc9762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c58524a6-d497-4034-b7e0-b0875ced2f4e/fa120909414973eeadc2b7772a99dfb00250a1e6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.88.0/22
                  186.5.240.0/20
                IPv6:
                  2803:7400::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:47:da:80:e8:2d:7e:49:72:1f:e1:52:50:71:f1:80:3d:c5:
         f9:65:ed:9e:30:4b:8a:26:56:7f:c5:70:90:dc:6c:ea:6b:81:
         77:c7:b8:ba:87:2b:02:a7:91:49:1f:ac:44:07:07:09:79:09:
         4f:8f:ea:9a:c4:d9:4a:34:8b:80:a2:0d:37:f6:f9:ec:17:83:
         f3:5d:1d:b4:cf:c3:50:5c:e2:d8:1b:0a:7c:82:73:2f:3a:5b:
         2f:79:e4:ee:84:05:a4:8c:cd:96:04:15:57:c8:1b:67:fc:43:
         92:91:67:14:4c:b3:6a:be:79:c7:28:50:cc:16:48:9d:7a:20:
         4c:54:d2:7b:61:0f:59:0f:ed:3f:88:c6:b7:71:2c:2b:63:7c:
         dc:a1:85:7d:42:f0:29:df:c1:4a:83:40:d9:4f:a6:5a:bb:bf:
         f0:4e:e2:0a:71:0c:a5:77:31:f4:7d:39:f0:a9:32:2a:c9:2b:
         4c:a5:5f:a8:f9:aa:61:80:f4:b9:cf:3b:85:42:21:9e:5c:eb:
         e4:a6:a2:dc:c7:9d:4f:36:d4:46:4d:42:9b:f4:e8:dd:6e:ac:
         53:6b:a4:b0:13:2d:ec:35:b3:3a:39:e3:d3:2f:a1:ee:32:9f:
         d9:00:b5:b8:7c:ec:38:7d:79:62:11:55:41:a6:02:5d:5d:f0:
         db:93:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----