Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/71a18e717835c3e1eb91770c5c53466e71a6686d.roa
File:                     71a18e717835c3e1eb91770c5c53466e71a6686d.roa (raw, json)
Hash identifier:          4h45GexhfAdnPZNH0w73+02ePVLEXxektvEYF4n5SAk=
Subject key identifier:   AA:14:32:08:B5:39:B9:D6:6C:17:59:C4:F6:75:61:95:EF:84:BB:27
Certificate issuer:       /CN=6b2d6c543f96c6e360e6bb67a94434bb666f2d80
Certificate serial:       22F820
Authority key identifier: 82:E6:1D:62:7A:72:C4:AE:B9:7B:6E:8B:13:50:2D:BE:71:E6:7E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2d6c543f96c6e360e6bb67a94434bb666f2d80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/71a18e717835c3e1eb91770c5c53466e71a6686d.roa
Signing time:             Mon 30 Oct 2023 14:37:46 +0000
ROA not before:           Mon 30 Oct 2023 14:37:46 +0000
ROA not after:            Thu 30 Oct 2025 14:37:46 +0000
asID:                     264716
IP address blocks:        170.150.44.0/22 maxlen: 24
                          2803:5b40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291744 (0x22f820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2d6c543f96c6e360e6bb67a94434bb666f2d80
        Validity
            Not Before: Oct 30 14:37:46 2023 GMT
            Not After : Oct 30 14:37:46 2025 GMT
        Subject: CN=71a18e717835c3e1eb91770c5c53466e71a6686d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:df:a3:81:03:b1:ec:4a:34:a1:e7:39:c6:
                    2c:31:fa:22:e8:32:88:55:af:55:6b:97:1a:d5:67:
                    ee:9f:69:b8:ef:bd:b6:96:aa:cf:5d:f1:12:d5:b8:
                    c2:53:83:09:01:eb:cc:e0:cf:4e:16:38:8f:dd:57:
                    17:17:78:66:73:cb:0c:4e:e3:0c:2c:1d:91:0c:8a:
                    f6:c6:ff:8c:0e:94:97:d9:ab:d1:7b:5a:6b:1a:85:
                    a4:49:f7:8d:e3:dc:7e:88:1e:6e:bc:cb:6a:fe:3c:
                    c4:96:5c:22:f6:21:6b:41:5d:be:35:a6:13:88:08:
                    b1:44:06:9d:7a:0f:30:63:5c:0c:ee:1a:df:ab:59:
                    e0:0b:52:e2:19:e0:85:f9:98:df:71:68:32:ec:08:
                    82:91:2e:48:f9:d0:ae:4d:5e:2b:53:c2:59:26:6d:
                    96:93:57:e5:eb:cd:04:65:1b:46:64:f9:cf:10:30:
                    9e:97:e3:d7:98:5c:10:2e:51:03:f6:45:6b:27:a6:
                    9c:f2:36:42:fa:25:78:dc:da:c9:fc:b3:7d:da:01:
                    fb:fc:5d:75:3d:96:92:e0:7d:8a:3b:41:6f:8e:ce:
                    1f:8d:36:cb:9d:77:8f:9a:9c:33:85:e6:4b:bf:14:
                    6f:fb:b0:81:f1:f5:99:65:c6:3e:3b:f0:d6:7f:5c:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:14:32:08:B5:39:B9:D6:6C:17:59:C4:F6:75:61:95:EF:84:BB:27
            X509v3 Authority Key Identifier:
                keyid:82:E6:1D:62:7A:72:C4:AE:B9:7B:6E:8B:13:50:2D:BE:71:E6:7E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2d6c543f96c6e360e6bb67a94434bb666f2d80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/71a18e717835c3e1eb91770c5c53466e71a6686d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/6b2d6c543f96c6e360e6bb67a94434bb666f2d80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.44.0/22
                IPv6:
                  2803:5b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:50:0e:12:2f:bf:99:8d:1b:1a:bd:5c:ec:71:8b:6f:f4:25:
         08:36:06:3c:44:52:51:d4:ff:b1:de:c6:ea:45:ff:bd:ba:d0:
         0a:10:b0:4d:38:3d:d5:51:30:16:62:b2:b9:b1:6d:a5:a4:98:
         ae:24:42:00:68:1b:75:ae:9e:b9:94:f6:0a:37:5b:bf:07:e0:
         d7:49:e1:54:91:91:3e:d9:3d:78:0b:6a:b8:eb:3c:32:c1:cd:
         3e:7f:00:b3:c3:e4:7f:a6:42:36:7c:a7:92:d8:b0:15:71:86:
         0f:3b:57:51:a8:60:4f:fa:a6:a3:a0:4c:ae:34:60:d7:3f:99:
         04:1a:94:9e:59:42:f6:54:77:eb:66:f1:1b:51:45:37:90:6a:
         56:3c:62:ff:c3:32:6a:64:9f:74:dc:81:ac:d7:0d:bd:28:9a:
         b5:69:77:94:f6:35:49:41:65:e7:25:bc:62:cb:8b:4b:78:c4:
         0d:3c:13:bf:53:c7:49:5c:93:94:04:2a:7f:cc:85:7c:11:00:
         5c:9a:51:07:12:32:4b:4d:88:e8:e1:2a:71:7b:5d:b4:9b:aa:
         3d:04:9e:ef:75:17:94:70:73:9a:4a:ea:78:c7:5e:37:d1:6f:
         e0:4f:40:22:5c:be:77:38:28:81:5c:f9:99:ab:0d:e0:bb:d3:
         ae:04:82:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----