Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/c7399f35b5ce507efcb5967f1abebc02ceab7de2.roa
File:                     c7399f35b5ce507efcb5967f1abebc02ceab7de2.roa (raw, json)
Hash identifier:          yta05YJQThqLHEO+dVN0ugGHsWmM3tg2isD49n4vUpo=
Subject key identifier:   E9:B5:1C:8B:51:7F:DA:75:E6:B1:DB:DC:89:43:97:94:23:7B:3C:14
Certificate issuer:       /CN=b33596c5bda819ba4815e88789b6d43c8973f503
Certificate serial:       23347D
Authority key identifier: B4:89:5F:6D:4A:AD:A0:9D:9D:75:19:F0:E4:F3:15:A1:72:06:02:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b33596c5bda819ba4815e88789b6d43c8973f503.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/c7399f35b5ce507efcb5967f1abebc02ceab7de2.roa
Signing time:             Wed 06 Sep 2023 23:41:01 +0000
ROA not before:           Tue 05 Sep 2023 23:41:01 +0000
ROA not after:            Sat 06 Sep 2025 23:41:01 +0000
asID:                     263698
IP address blocks:        191.102.36.0/22 maxlen: 24
                          2803:aa80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2307197 (0x23347d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b33596c5bda819ba4815e88789b6d43c8973f503
        Validity
            Not Before: Sep  5 23:41:01 2023 GMT
            Not After : Sep  6 23:41:01 2025 GMT
        Subject: CN=c7399f35b5ce507efcb5967f1abebc02ceab7de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0e:02:8a:e4:6f:f9:cf:f2:01:d0:34:1c:6b:
                    07:4f:c8:cb:c9:33:a6:a1:0c:e7:60:9d:86:57:8e:
                    b1:7f:5f:7f:aa:e1:f9:2e:a5:e5:76:54:61:06:30:
                    5c:ce:80:68:b5:58:e8:86:9e:66:95:c4:92:00:0f:
                    80:99:1a:84:24:58:fa:b8:92:50:2f:31:3c:2a:74:
                    a7:fd:03:19:29:8c:15:87:b2:dc:d2:c8:a4:66:8f:
                    75:a0:ae:6c:d1:7e:a7:22:45:52:2f:22:2e:c1:f7:
                    61:63:91:d4:a7:f5:c1:20:72:b7:dd:bc:f2:0a:00:
                    37:6c:d7:24:e1:69:6e:41:03:92:88:88:77:7b:8e:
                    5d:f7:17:1c:d2:52:db:a1:2c:31:7e:7d:59:ae:b2:
                    42:18:0d:57:d7:89:33:4a:c0:1d:29:95:e7:0d:e2:
                    25:71:43:bd:27:2c:7c:ce:e7:ee:30:af:76:9f:fd:
                    08:34:ff:7a:c5:26:64:79:ac:4a:74:c1:e5:84:63:
                    22:51:3d:6c:8e:3c:5f:f2:c3:7a:0c:f7:d5:3b:24:
                    55:6f:b4:25:e8:69:d6:bd:b8:b7:a7:2d:ac:67:15:
                    80:22:3e:7e:cb:89:a8:8f:ce:ad:80:eb:d7:28:54:
                    5d:48:01:69:5a:f5:55:d0:a0:58:c0:80:c7:2d:46:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B5:1C:8B:51:7F:DA:75:E6:B1:DB:DC:89:43:97:94:23:7B:3C:14
            X509v3 Authority Key Identifier:
                keyid:B4:89:5F:6D:4A:AD:A0:9D:9D:75:19:F0:E4:F3:15:A1:72:06:02:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b33596c5bda819ba4815e88789b6d43c8973f503.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/c7399f35b5ce507efcb5967f1abebc02ceab7de2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/b33596c5bda819ba4815e88789b6d43c8973f503.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.36.0/22
                IPv6:
                  2803:aa80::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:28:2d:73:5d:56:a2:02:58:c9:f9:99:4b:57:ec:5d:63:ff:
         4c:d3:a6:25:21:c7:e4:0a:21:78:f1:b4:5a:d2:d8:46:2a:f2:
         0b:04:26:1c:08:f5:b0:c8:b5:88:55:c2:76:d9:1d:f8:70:06:
         ac:0a:b7:25:31:e1:16:5b:cd:20:a4:7a:cc:69:db:8f:f9:cf:
         46:d2:88:b7:19:54:54:ac:83:b5:85:cb:d8:b7:1c:20:1a:ad:
         af:be:05:20:62:d6:f7:6e:ef:da:10:4a:41:b9:a2:b1:8e:cb:
         b7:f2:d9:86:c8:bd:28:ab:02:12:07:90:0e:d9:5a:73:41:81:
         88:ae:8b:04:0a:b6:8d:06:f1:7d:2c:f7:fa:cd:f5:24:94:57:
         f1:09:a7:a1:ca:4d:d4:d2:eb:aa:0e:f0:74:7e:c0:fb:0a:1b:
         d8:81:4c:67:e3:90:9d:82:5a:e7:34:13:28:9f:76:20:18:8b:
         2f:f8:a9:4a:41:46:e6:ac:ed:81:9e:f9:94:01:5b:cf:b2:03:
         b1:55:c4:a4:70:ca:eb:ae:52:f9:ed:fc:15:56:6c:82:90:09:
         ea:92:a6:2d:31:c6:d5:c1:98:75:66:ff:03:5d:e9:8d:77:a2:
         44:fa:a5:bc:eb:5f:09:ec:24:9e:09:4e:a1:5e:c0:bf:c0:f8:
         43:75:e3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----