Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/89cbe26c140164931569a487e442a2561584ff66.roa
File:                     89cbe26c140164931569a487e442a2561584ff66.roa (raw, json)
Hash identifier:          N57hqWoX12sKFnG+3CQdv9lUvoxKr3G9/vAr5YhjDBY=
Subject key identifier:   64:7F:0E:AF:CC:25:BE:FA:CA:C4:94:D8:85:07:93:91:8D:AF:B0:73
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       22F3C7
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/89cbe26c140164931569a487e442a2561584ff66.roa
Signing time:             Wed 16 Aug 2023 16:39:58 +0000
ROA not before:           Tue 15 Aug 2023 16:39:58 +0000
ROA not after:            Sat 16 Aug 2025 16:39:58 +0000
asID:                     6306
IP address blocks:        179.44.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2290631 (0x22f3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Aug 15 16:39:58 2023 GMT
            Not After : Aug 16 16:39:58 2025 GMT
        Subject: CN=89cbe26c140164931569a487e442a2561584ff66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:ff:35:70:01:0c:3d:52:67:79:fa:66:46:
                    dc:53:4b:3d:3d:74:58:0a:66:c3:6e:52:d6:d0:4c:
                    01:b4:38:8d:64:12:a8:92:ab:82:4f:d0:ca:9e:4a:
                    95:1b:2e:14:86:3a:ea:3e:16:d4:76:13:41:6f:42:
                    a4:e9:a5:0b:dc:e8:5e:20:1f:e4:e0:df:f4:92:b9:
                    ce:5c:3d:88:cf:c2:7e:51:41:85:81:e0:a2:b9:00:
                    ea:b6:73:7f:34:69:33:e2:dd:22:42:d1:a6:b4:8d:
                    3d:7e:f3:1a:74:1a:29:43:51:42:f8:1a:f4:22:56:
                    80:cc:a8:ff:69:a0:89:d0:a1:63:92:b8:c6:6a:bf:
                    25:6d:45:a5:cb:15:c5:25:dd:6e:5d:c8:34:bc:25:
                    a2:97:8d:39:12:03:00:51:ff:a8:86:d6:c0:fb:27:
                    e8:28:f0:ef:98:8b:6f:de:8f:e3:3d:af:1c:98:76:
                    3f:dc:28:75:88:c0:ca:b5:a2:13:cc:f6:d4:8e:0c:
                    ac:6e:30:cc:79:4f:42:18:cc:84:f5:5e:eb:22:48:
                    50:11:1a:3d:f1:d9:1c:92:da:65:ed:f8:70:b7:8b:
                    32:08:74:4a:f7:28:83:f6:7b:85:15:0f:92:48:00:
                    32:c9:bd:6c:82:08:b7:17:ec:9b:f7:03:f8:15:39:
                    eb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7F:0E:AF:CC:25:BE:FA:CA:C4:94:D8:85:07:93:91:8D:AF:B0:73
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/89cbe26c140164931569a487e442a2561584ff66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.44.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         4e:69:56:54:6c:26:6f:37:bf:10:74:82:c8:49:17:e7:cf:fa:
         6e:c3:fc:28:5c:b0:87:7a:5b:bc:b9:fb:99:93:f2:1b:4b:1c:
         e8:2a:44:50:53:cf:8b:7d:a7:78:4c:6f:54:b3:04:51:f6:bc:
         3b:b5:b2:bd:0f:5a:e4:18:c6:a9:c7:cf:02:e6:66:e8:7d:1e:
         dd:a4:6f:0c:36:9c:4a:c9:27:35:f1:78:77:35:f4:0f:08:4f:
         0a:31:f9:e5:9c:64:7c:da:93:33:4e:0d:1d:a1:d5:94:80:99:
         59:be:f3:63:61:65:c0:f9:03:31:ff:6d:de:00:eb:75:87:0a:
         32:a8:65:c5:63:60:d7:6e:78:0a:83:21:9d:21:dd:a9:64:71:
         5b:cd:52:eb:7c:1e:fb:92:cd:82:ed:fd:6b:76:51:c7:74:84:
         7a:1d:a6:46:f9:c5:67:13:42:9b:5c:b5:e5:95:b2:40:e7:38:
         09:8b:d3:31:af:43:a6:d2:3a:04:dc:d7:51:d8:0e:33:75:b5:
         ea:fa:5a:8b:86:d0:fd:56:05:7b:7f:10:e4:72:80:2f:3b:ec:
         5c:79:40:30:f7:c6:02:d3:91:b7:40:f3:47:50:01:43:bc:25:
         67:67:d9:ba:ce:b8:fa:b4:a5:0b:f9:12:0e:d2:66:de:33:d1:
         e2:9f:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----