Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c7ec3c29-da1a-4b70-8e3f-3964f8c694be/b0367715c1daf9946e6ba8f26f636fe09c4ab11f.roa
File:                     b0367715c1daf9946e6ba8f26f636fe09c4ab11f.roa (raw, json)
Hash identifier:          a9KG5WNVptuO1RLFxp/gEEth0lbvlwaWm/y/ZoNurjI=
Subject key identifier:   85:E7:4E:E4:25:68:03:D8:84:D9:0F:18:1B:10:2D:54:23:59:84:61
Certificate issuer:       /CN=6b2f5eba57c5add740dbc944c579edc838ed374e
Certificate serial:       0132AA
Authority key identifier: DB:34:9F:F5:56:D6:9F:53:95:F6:AF:16:7B:43:EC:5E:EE:37:09:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2f5eba57c5add740dbc944c579edc838ed374e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c7ec3c29-da1a-4b70-8e3f-3964f8c694be/b0367715c1daf9946e6ba8f26f636fe09c4ab11f.roa
Signing time:             Tue 26 Sep 2023 01:29:45 +0000
ROA not before:           Mon 25 Sep 2023 01:29:45 +0000
ROA not after:            Fri 26 Sep 2025 01:29:45 +0000
asID:                     273054
IP address blocks:        185.114.52.0/22 maxlen: 24
                          2803:8790::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78506 (0x132aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2f5eba57c5add740dbc944c579edc838ed374e
        Validity
            Not Before: Sep 25 01:29:45 2023 GMT
            Not After : Sep 26 01:29:45 2025 GMT
        Subject: CN=b0367715c1daf9946e6ba8f26f636fe09c4ab11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:e9:9c:9a:41:8f:d6:36:e5:01:ed:24:9f:
                    c9:6a:24:88:02:ca:8b:84:71:1f:79:3c:c8:1e:59:
                    6c:d7:02:ab:59:4e:4d:ae:0c:bb:3f:b5:c9:6b:dc:
                    25:35:41:50:a0:4e:57:63:88:dd:18:af:f9:67:0a:
                    f6:9b:9f:cb:9c:e8:e4:08:10:c0:ee:c0:69:9a:c4:
                    4c:41:4d:02:3b:65:2e:fb:21:29:33:17:b8:0d:87:
                    df:cf:f4:80:a8:d5:18:29:ee:25:e7:fe:b2:4d:3b:
                    e2:db:6c:ad:3e:2e:3e:52:8d:ff:9f:ba:08:6d:81:
                    6e:d6:4c:74:03:d4:f5:47:af:80:2f:5e:3d:af:4d:
                    33:61:04:3e:09:7b:26:fb:a9:11:fe:72:a2:1c:ac:
                    ec:9c:fa:6c:86:3f:09:9a:06:7e:66:80:8d:65:37:
                    e1:b2:63:fe:f5:58:b6:c4:a1:24:bd:ed:b6:88:53:
                    b5:25:8a:5e:c9:58:82:bd:1f:95:2d:b3:7a:98:a9:
                    3a:c9:76:25:e9:c9:66:c1:dd:ed:97:1b:73:9f:5e:
                    f7:8f:81:f0:4f:a3:4e:9f:6d:12:a6:5e:5e:ab:b7:
                    3b:04:b9:ab:91:5d:be:9b:ba:6a:7f:67:8b:e9:25:
                    e6:8a:66:d2:2d:d9:07:aa:81:2c:44:90:97:83:1b:
                    c4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E7:4E:E4:25:68:03:D8:84:D9:0F:18:1B:10:2D:54:23:59:84:61
            X509v3 Authority Key Identifier:
                keyid:DB:34:9F:F5:56:D6:9F:53:95:F6:AF:16:7B:43:EC:5E:EE:37:09:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2f5eba57c5add740dbc944c579edc838ed374e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c7ec3c29-da1a-4b70-8e3f-3964f8c694be/b0367715c1daf9946e6ba8f26f636fe09c4ab11f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c7ec3c29-da1a-4b70-8e3f-3964f8c694be/6b2f5eba57c5add740dbc944c579edc838ed374e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.114.52.0/22
                IPv6:
                  2803:8790::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:d2:79:ba:ad:ec:34:79:b7:17:6f:6c:6c:35:11:52:b1:04:
         76:59:10:61:47:0c:5f:4c:18:65:6c:f2:a7:0d:4d:c7:c9:32:
         53:c0:b6:3b:97:58:24:41:99:4d:d3:06:94:fe:cc:a2:bd:09:
         74:3f:88:33:c3:ec:2f:02:14:a4:46:a4:f4:9e:46:94:14:f8:
         1d:4b:e0:33:9c:ea:ff:16:57:96:11:09:95:4c:a3:52:16:ef:
         59:67:44:ed:66:cc:90:7d:97:02:f1:f6:7a:0e:d3:9d:85:be:
         c6:4f:d8:2d:8c:48:99:7a:da:64:bc:19:0e:66:6e:8d:34:05:
         62:f9:5c:7f:e4:2b:f9:dc:c7:6d:50:c8:9b:8b:f6:50:19:d4:
         35:90:25:ff:53:a7:b9:3e:d2:6e:ab:cf:f8:b4:1f:b8:db:b1:
         fb:7b:fd:1e:bb:00:26:9a:19:88:d8:9c:08:46:89:50:29:c0:
         60:08:72:56:ab:d3:ce:4f:6a:e1:21:56:5f:a8:4e:93:07:b3:
         a9:e6:60:da:9d:24:48:42:93:b3:bd:28:62:94:cb:5d:09:ee:
         99:b5:11:5f:70:3a:33:37:b4:bd:ba:ba:36:04:88:ca:8e:59:
         b1:42:7c:64:8c:65:37:57:40:e9:69:c5:bd:5c:c0:8c:20:cf:
         29:7c:c0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----