Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/02cae67de0e411b726814a410ee514514d6e4839.roa
File:                     02cae67de0e411b726814a410ee514514d6e4839.roa (raw, json)
Hash identifier:          3zVCx85HTYwL1xRVw+jf/kxl7fkjhqh0eCod8/DCt+8=
Subject key identifier:   AA:CA:9A:DD:6C:43:A6:55:33:52:36:40:AD:B2:8C:6C:BD:0D:71:AB
Certificate issuer:       /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial:       23F6D6
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/02cae67de0e411b726814a410ee514514d6e4839.roa
Signing time:             Tue 17 Oct 2023 19:52:58 +0000
ROA not before:           Mon 16 Oct 2023 19:52:58 +0000
ROA not after:            Fri 17 Oct 2025 19:52:58 +0000
asID:                     52468
IP address blocks:        157.100.52.0/22 maxlen: 24
                          157.100.52.0/22 maxlen: 24
                          157.100.56.0/21 maxlen: 24
                          157.100.68.0/23 maxlen: 24
                          157.100.71.0/24 maxlen: 24
                          157.100.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2356950 (0x23f6d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
        Validity
            Not Before: Oct 16 19:52:58 2023 GMT
            Not After : Oct 17 19:52:58 2025 GMT
        Subject: CN=02cae67de0e411b726814a410ee514514d6e4839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:e8:6d:7e:3b:01:83:57:7b:42:cc:40:6c:
                    dc:c4:38:fb:70:83:38:28:ca:88:1c:78:66:13:cd:
                    99:ad:eb:3c:c0:69:76:7f:83:86:21:be:e6:42:97:
                    1c:31:90:ba:d0:da:7c:a2:4f:be:17:0d:55:41:eb:
                    ac:87:3b:bb:51:99:f5:7b:c1:3a:b6:c5:85:3e:54:
                    1b:36:ce:f3:17:68:d5:4f:06:cc:ff:84:8c:6e:0d:
                    dc:d0:e2:05:c9:ff:51:54:c7:7e:ea:19:39:ad:29:
                    3a:53:a9:e5:b9:16:a1:9c:05:1e:eb:4f:ee:5a:92:
                    0c:4c:65:13:8d:54:18:2e:61:a1:59:86:8e:3c:1b:
                    2a:65:87:f9:e6:62:cf:a6:07:ab:08:d3:d5:64:f5:
                    94:96:c6:8a:7b:e5:e0:4d:01:0f:62:ca:2f:77:35:
                    63:5c:74:aa:94:8f:8b:0f:db:d4:c3:9e:c7:f0:72:
                    bf:68:78:f1:88:fe:2a:09:f1:3e:b9:df:fd:03:b3:
                    4e:61:ec:a4:a8:c7:f8:4a:4c:e9:1e:94:53:3a:a7:
                    34:1b:6e:47:d2:4d:95:29:83:ee:3f:e8:ff:89:f2:
                    d1:66:97:38:46:d6:c8:e1:d5:2f:53:8b:3a:20:ee:
                    97:5c:5b:ae:8c:22:f3:45:3c:8d:5e:c0:11:4c:54:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CA:9A:DD:6C:43:A6:55:33:52:36:40:AD:B2:8C:6C:BD:0D:71:AB
            X509v3 Authority Key Identifier:
                keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/02cae67de0e411b726814a410ee514514d6e4839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.52.0-157.100.63.255
                  157.100.68.0/23
                  157.100.71.0-157.100.72.255

    Signature Algorithm: sha256WithRSAEncryption
         59:fa:73:0f:d3:8d:8f:37:86:c8:a7:66:1c:b0:dc:dd:2a:99:
         12:e2:17:8b:3c:3e:51:7c:50:c4:0a:9a:56:aa:17:c7:ae:32:
         33:a0:3b:79:13:88:fb:f5:33:f1:8f:e3:d0:e3:98:c9:ee:46:
         71:ab:ae:6e:ec:58:50:d8:60:60:6b:ec:44:7a:7e:60:02:4e:
         11:b3:32:fb:32:93:0e:b8:2f:4d:f3:ed:62:80:f9:90:eb:df:
         3b:9c:7d:2f:28:2c:2e:1f:e2:93:52:32:25:1b:20:da:b3:e8:
         d5:b2:56:1f:1b:9f:27:11:ae:4d:29:a7:ea:5e:b4:d4:a2:d6:
         78:51:8b:9f:e6:eb:8e:60:50:17:65:ca:4d:2e:44:7a:88:0f:
         26:14:b2:b5:12:de:50:cb:5f:13:2a:29:3d:17:cc:39:f6:78:
         a6:f2:ac:53:6a:33:48:15:3c:af:cd:05:24:1b:ed:cc:8a:5d:
         06:e6:5c:f7:75:ba:2c:d4:b8:28:1e:4f:53:bc:ed:56:c8:a9:
         6d:09:92:81:79:19:d7:0c:b7:8e:8d:78:20:0d:4d:cb:01:67:
         3f:93:9f:27:a4:8b:ad:fb:db:a6:b7:a7:be:ba:26:5d:89:4d:
         9c:8c:a4:30:c6:2b:52:47:4c:29:b7:42:06:47:29:38:cd:31:
         44:04:61:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----