Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/96e9b8dbd343e96326e7b3d20b788df5ee127051.roa
File:                     96e9b8dbd343e96326e7b3d20b788df5ee127051.roa (raw, json)
Hash identifier:          is3bStKgds5WMjYZJq+Jmyh2GY2iL0rs569LiRSowN4=
Subject key identifier:   CD:5C:50:CE:C8:65:4C:5D:82:88:82:99:1A:2C:98:39:B3:0F:29:63
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       22EADB
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/96e9b8dbd343e96326e7b3d20b788df5ee127051.roa
Signing time:             Tue 15 Aug 2023 21:53:52 +0000
ROA not before:           Mon 14 Aug 2023 21:53:52 +0000
ROA not after:            Fri 15 Aug 2025 21:53:52 +0000
asID:                     6306
IP address blocks:        161.140.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288347 (0x22eadb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Aug 14 21:53:52 2023 GMT
            Not After : Aug 15 21:53:52 2025 GMT
        Subject: CN=96e9b8dbd343e96326e7b3d20b788df5ee127051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b2:68:da:07:1c:1d:9b:46:e3:bc:e2:59:be:
                    d4:34:c5:45:c5:73:0b:af:86:92:ba:9b:8e:86:50:
                    72:74:dc:ab:9b:1c:93:8f:8c:82:4b:0f:da:b9:c1:
                    32:b6:a1:ff:e1:fe:46:3c:8d:28:64:99:ee:a1:c8:
                    73:50:00:bd:99:4b:1c:0e:38:ac:d9:a5:1e:73:e9:
                    1c:ca:dc:74:dd:eb:6e:39:2c:32:55:28:2d:75:8d:
                    8e:b4:6c:94:d8:01:90:f1:e4:ca:8f:4a:69:03:22:
                    80:dc:b1:17:ea:8a:bb:90:88:2d:60:e8:82:f6:9d:
                    2a:55:83:9c:15:3c:5b:85:6b:12:10:bf:36:70:2d:
                    48:23:19:a8:f8:2d:6c:ed:26:d6:db:63:94:5e:f4:
                    1b:76:51:4e:80:6a:20:28:e7:92:67:df:e3:a2:9d:
                    fb:45:f0:39:76:87:05:ac:98:b4:c7:77:0c:77:94:
                    d6:89:c9:e5:b2:41:d9:ad:06:0f:d2:46:f5:b4:ce:
                    f6:bf:82:b7:13:09:fd:2b:09:3e:66:02:96:c5:94:
                    3c:50:93:13:a8:2e:6c:f9:36:62:e1:cd:51:1f:9c:
                    94:fb:01:44:42:4d:dc:13:8d:f9:4e:a9:b6:32:5b:
                    21:36:b1:07:a7:3e:7b:29:c4:1e:d6:36:f1:72:29:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5C:50:CE:C8:65:4C:5D:82:88:82:99:1A:2C:98:39:B3:0F:29:63
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/96e9b8dbd343e96326e7b3d20b788df5ee127051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.140.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         04:39:21:3d:22:0f:8a:0b:62:2d:b2:37:df:a1:df:04:9c:69:
         10:99:3f:16:e6:af:f8:55:66:7a:f3:d9:d7:3e:0e:f3:a1:ac:
         95:4c:c9:ab:da:a6:ab:49:bc:9c:31:a2:b0:5f:d7:af:d1:68:
         16:81:4d:de:ed:7c:fa:f8:6a:46:3b:ab:43:ab:e0:45:51:c5:
         2f:f1:f6:5f:1a:d1:f1:b4:f9:46:d3:f7:ae:27:2c:2f:f0:36:
         a8:31:78:45:80:f0:2b:a6:17:a8:4a:04:e6:9c:bb:e8:1b:b8:
         6b:1a:8f:fe:16:a7:c3:5a:2f:1e:eb:76:f1:ac:11:1e:0d:c0:
         7c:7b:02:b1:09:a0:58:cd:73:69:69:8c:3b:7e:16:61:6f:e7:
         9a:55:1c:5f:09:3d:d6:3d:5a:4b:90:30:c3:80:4d:de:0a:cb:
         73:c7:9a:93:04:ae:80:e5:1f:80:2d:e2:6d:4c:eb:bf:f5:9b:
         8c:68:ea:b1:2a:44:d6:01:ef:74:de:55:de:93:16:3f:03:cf:
         05:23:2e:fe:22:fe:ba:22:bf:18:ea:3b:fb:86:fe:32:f1:aa:
         ad:ac:78:36:0d:92:b6:a7:f0:41:83:08:82:1a:37:c3:f0:9d:
         96:93:fb:66:3e:a2:35:0e:e8:91:a8:58:f9:28:6a:a3:c8:5b:
         85:b3:9e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----