Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/f2de8a5f7fed22213690aec1b3357768a8124d6a.roa
File:                     f2de8a5f7fed22213690aec1b3357768a8124d6a.roa (raw, json)
Hash identifier:          A1kn08oJ4A8xpyR5djTcK50qzB9ZnT8WjTfr9GhAY68=
Subject key identifier:   BF:32:30:D6:FB:58:93:9D:E0:09:05:90:0F:AD:55:58:64:2E:FC:10
Certificate issuer:       /CN=076e25208e9086c7775f52e507d559615ec76616
Certificate serial:       215BD6
Authority key identifier: 6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/f2de8a5f7fed22213690aec1b3357768a8124d6a.roa
Signing time:             Mon 10 Jul 2023 13:26:01 +0000
ROA not before:           Sun 09 Jul 2023 13:26:01 +0000
ROA not after:            Thu 10 Jul 2025 13:26:01 +0000
asID:                     64339
IP address blocks:        143.0.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186198 (0x215bd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076e25208e9086c7775f52e507d559615ec76616
        Validity
            Not Before: Jul  9 13:26:01 2023 GMT
            Not After : Jul 10 13:26:01 2025 GMT
        Subject: CN=f2de8a5f7fed22213690aec1b3357768a8124d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:36:2c:37:b1:7b:26:73:e4:14:3c:36:c7:59:
                    38:54:f1:1b:42:05:81:ba:da:9a:ba:9b:44:69:61:
                    c8:f3:88:96:38:56:26:5c:65:19:b3:7c:c7:70:92:
                    0b:d0:6e:94:3f:25:34:73:a4:f4:4f:9e:10:d3:f5:
                    0f:23:69:66:7f:4f:ad:59:11:be:6f:f6:7a:2f:bc:
                    e9:fd:41:ee:31:c7:aa:c2:dc:1f:b6:7d:f1:44:22:
                    b5:a6:e9:21:dd:82:b8:a6:0e:1b:91:f0:96:10:a3:
                    08:9c:5c:ef:84:df:45:5f:a7:9d:22:3f:82:84:c7:
                    73:35:4b:9e:e2:88:39:68:5b:41:b3:3e:41:74:06:
                    4d:cd:22:3a:ce:14:27:1a:85:cc:43:74:17:02:62:
                    f1:91:ce:d5:69:5d:1c:f0:93:b9:80:1f:ba:ae:97:
                    10:5c:6d:6d:44:62:e1:e5:2c:36:d6:a2:9f:76:1b:
                    47:b3:41:87:ca:ef:ad:e5:5b:c7:8e:1b:b0:fe:7d:
                    49:ef:d3:60:4c:75:f9:c9:bc:59:0f:9b:80:6d:a5:
                    f7:59:ba:c1:12:a3:a9:9c:09:c3:5d:c9:41:b5:98:
                    3b:2c:d7:d9:a4:df:90:fa:38:b2:84:8f:2e:73:03:
                    6f:d4:81:92:43:0e:e9:f7:37:de:58:48:ff:83:ad:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:32:30:D6:FB:58:93:9D:E0:09:05:90:0F:AD:55:58:64:2E:FC:10
            X509v3 Authority Key Identifier:
                keyid:6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/f2de8a5f7fed22213690aec1b3357768a8124d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/076e25208e9086c7775f52e507d559615ec76616.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:bf:e1:b5:f7:30:f3:63:bf:12:93:75:c1:2f:cd:c4:02:14:
         6b:3c:66:b3:20:33:05:85:04:e1:20:01:bf:0c:6c:db:45:6b:
         43:a0:a2:56:25:02:32:e4:ba:20:00:7a:43:26:50:41:21:9b:
         d4:a4:d2:19:44:0d:9e:5a:9d:4c:b2:c3:db:c5:ea:ca:10:5c:
         ae:e9:bf:61:5f:79:3f:87:98:c9:e0:2f:4f:4a:dc:06:01:c4:
         38:25:08:a6:98:9c:25:79:2c:2a:85:96:2e:b3:4d:1b:9a:f6:
         18:20:96:90:c4:a0:1b:1e:25:bc:de:48:4d:4d:90:a9:1d:f6:
         73:cd:34:b0:e1:27:03:2c:b0:84:75:5b:27:6b:ad:5a:52:d3:
         11:38:b6:4d:46:89:b4:61:47:08:46:47:f6:3c:f7:60:ad:11:
         fe:df:f6:c0:53:90:86:ee:25:b3:aa:b4:6f:74:b0:81:11:58:
         74:47:a7:04:14:0f:b2:c7:bd:fd:07:7c:7d:44:9b:17:06:0e:
         cc:21:24:38:25:af:75:13:1f:e5:4c:37:0b:14:8e:fe:0a:e7:
         1c:9e:9a:1b:f4:82:9a:13:56:c9:87:8a:8e:60:64:69:97:fb:
         8b:08:37:74:c8:56:fc:75:57:10:12:12:d1:43:b7:f9:82:a9:
         35:3a:e6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----