Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/be97f3d85374375f5f5ffb020fac65ab7d7e8474.roa
File:                     be97f3d85374375f5f5ffb020fac65ab7d7e8474.roa (raw, json)
Hash identifier:          BlA3m/h66cG8b4XGvLVMQ6ROg/Yi8ZuJISs+bx2GYNE=
Subject key identifier:   44:A7:0D:F2:6B:7F:9E:AE:26:F8:47:A3:50:1E:0F:3D:BE:A7:55:CD
Certificate issuer:       /CN=47ff109e1e2041257e445750def18c70c17d1e60
Certificate serial:       223BDB
Authority key identifier: 75:8D:8E:4D:EB:36:D6:6A:C8:EA:EC:36:78:7E:18:CF:FD:B4:45:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47ff109e1e2041257e445750def18c70c17d1e60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/be97f3d85374375f5f5ffb020fac65ab7d7e8474.roa
Signing time:             Wed 19 Jul 2023 19:25:26 +0000
ROA not before:           Tue 18 Jul 2023 19:25:26 +0000
ROA not after:            Sat 19 Jul 2025 19:25:26 +0000
asID:                     27865
IP address blocks:        170.239.28.0/22 maxlen: 24
                          190.103.80.0/22 maxlen: 24
                          2803:4a80::/32 maxlen: 35
                          2803:4a80:4000::/34 maxlen: 35
                          2803:4a80:8000::/33 maxlen: 35
                          2803:4a80::/34 maxlen: 35
                          2803:4a80:8000::/34 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2243547 (0x223bdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ff109e1e2041257e445750def18c70c17d1e60
        Validity
            Not Before: Jul 18 19:25:26 2023 GMT
            Not After : Jul 19 19:25:26 2025 GMT
        Subject: CN=be97f3d85374375f5f5ffb020fac65ab7d7e8474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:92:ca:ee:f7:c7:52:1e:a3:9f:d3:af:24:8d:
                    04:84:cd:e3:0a:94:13:f0:53:70:dd:ff:5e:7b:fd:
                    5c:b5:38:8f:ed:9d:3c:86:e7:77:95:6e:9e:57:8a:
                    92:9b:3e:3d:f4:e7:5c:3d:c5:ca:9b:58:e4:7a:99:
                    f4:02:ee:a5:e8:81:71:48:eb:74:68:f4:57:71:e2:
                    29:70:eb:cb:2a:7f:31:38:31:52:a1:75:04:23:66:
                    a5:ca:af:61:d0:6a:b2:e6:44:7d:c0:2f:b9:cb:38:
                    33:f9:81:ca:65:f9:9d:ba:7f:e9:38:54:58:38:5e:
                    a6:32:4d:42:ce:26:df:ba:45:1b:db:c7:a0:a4:ab:
                    40:d8:94:48:ae:be:58:3d:b2:72:a6:b1:58:5a:e0:
                    01:5a:3b:a1:a1:6d:9b:df:16:97:eb:06:8f:16:f9:
                    97:46:5e:92:9c:44:3c:8d:c2:4a:cf:18:41:3a:ad:
                    c6:4e:50:fa:06:14:7b:cc:2d:de:55:1d:4e:39:85:
                    cc:81:a9:39:27:63:29:06:53:68:75:8e:08:ea:6c:
                    6f:f3:a2:5e:56:b0:39:85:61:f7:4d:96:05:6b:49:
                    da:15:95:2e:1c:5e:27:50:e0:ef:7a:6a:0c:60:83:
                    16:13:ee:e9:3b:f5:8e:ec:4a:b2:17:a7:62:53:65:
                    d7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A7:0D:F2:6B:7F:9E:AE:26:F8:47:A3:50:1E:0F:3D:BE:A7:55:CD
            X509v3 Authority Key Identifier:
                keyid:75:8D:8E:4D:EB:36:D6:6A:C8:EA:EC:36:78:7E:18:CF:FD:B4:45:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47ff109e1e2041257e445750def18c70c17d1e60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/be97f3d85374375f5f5ffb020fac65ab7d7e8474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/47ff109e1e2041257e445750def18c70c17d1e60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.28.0/22
                  190.103.80.0/22
                IPv6:
                  2803:4a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:27:c3:62:8f:bc:6e:00:87:76:5d:1f:3d:8e:08:d2:b0:80:
         53:e7:85:a8:e8:dc:26:bd:96:aa:ee:69:22:47:d6:e6:2b:96:
         74:d7:3f:4f:37:e2:3e:e4:cc:a5:32:0c:6d:9e:2e:45:3e:e5:
         d5:ae:d6:08:ac:72:34:c4:99:65:4a:f5:66:03:5d:4a:0e:69:
         36:c1:1c:89:e2:bf:c0:b4:84:bc:4c:a1:0a:2b:df:3c:9e:2e:
         16:6b:b0:ad:c4:db:16:a1:b4:70:a9:11:2f:11:57:52:06:12:
         7f:89:d5:79:26:02:12:fe:7f:23:35:19:04:c3:ca:40:a0:2d:
         b6:cd:f2:9d:df:98:83:d1:2c:2d:2e:79:92:fd:bc:a2:4c:e9:
         40:95:8b:b2:9b:53:2a:ab:ec:67:68:58:a6:6a:f3:4f:fd:5e:
         94:9e:32:bf:6c:28:27:8c:33:b5:61:5b:21:3e:01:76:c7:a4:
         b2:92:54:8d:e7:e0:a6:37:be:de:f5:0f:4b:85:6d:fc:17:d7:
         7c:c2:9b:25:2c:f7:0d:5f:96:77:63:1c:c0:d2:b5:84:d1:86:
         76:f0:16:1b:9d:d5:c5:24:6b:24:6f:bf:6e:11:d9:37:af:9e:
         af:f8:03:dd:80:42:19:aa:e6:a0:b7:8e:b9:ad:0c:f1:2b:e8:
         eb:c1:ec:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----