Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/010cd731715be23421a67ef692204636bca08081.roa
File:                     010cd731715be23421a67ef692204636bca08081.roa (raw, json)
Hash identifier:          r4CNSX4jedAC5slJ9Y5jxWXeE2feBUNrAM7+31+q6fI=
Subject key identifier:   B8:BF:A1:12:5E:DF:03:FD:A1:12:FA:63:96:56:C9:1E:27:49:98:7F
Certificate issuer:       /CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
Certificate serial:       20DFD2
Authority key identifier: 9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/010cd731715be23421a67ef692204636bca08081.roa
Signing time:             Fri 05 May 2023 15:39:43 +0000
ROA not before:           Thu 04 May 2023 15:39:42 +0000
ROA not after:            Mon 05 May 2025 15:39:42 +0000
asID:                     265629
IP address blocks:        170.239.204.0/22 maxlen: 24
                          2803:9cc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2154450 (0x20dfd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
        Validity
            Not Before: May  4 15:39:42 2023 GMT
            Not After : May  5 15:39:42 2025 GMT
        Subject: CN=010cd731715be23421a67ef692204636bca08081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0a:41:30:11:b0:09:fb:71:5c:78:bb:f8:e2:
                    a4:d9:1c:84:39:6d:d3:dd:f9:42:d4:9a:29:dd:07:
                    05:1c:50:64:0e:be:35:59:ba:0c:f4:8b:e1:45:a2:
                    59:83:41:47:c1:db:b0:42:c0:bd:25:58:3d:ae:22:
                    23:be:88:1e:08:9a:95:d1:c3:27:7f:b9:d8:41:41:
                    53:2e:68:ec:92:93:c9:6d:4a:21:e1:e5:95:5a:67:
                    28:ea:4e:a6:f0:52:be:12:a9:5e:c7:c5:2c:26:21:
                    8a:cf:8c:27:c1:f4:b7:ab:e7:74:d8:55:ff:e5:b5:
                    aa:fc:bb:02:2f:c6:b9:ce:68:d2:32:7f:8d:07:22:
                    f0:2b:88:62:ec:ef:5f:f2:c0:85:6f:89:31:84:1a:
                    2b:40:19:5f:b1:71:6f:a5:38:f9:f7:25:54:b8:5b:
                    71:54:4c:59:91:2a:f0:bb:48:16:4d:36:cd:3e:66:
                    b9:25:70:9a:74:da:57:3e:20:43:89:77:2f:93:8e:
                    87:5c:8b:d9:bf:fe:4d:1d:ba:64:4d:10:ca:35:ee:
                    74:44:62:dc:47:2f:d2:b3:35:78:19:6a:2b:77:89:
                    3b:9c:ce:63:d9:35:6c:04:85:82:8d:3d:92:14:3e:
                    62:8d:15:26:de:c3:94:f3:17:65:01:2c:d5:74:a3:
                    d7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BF:A1:12:5E:DF:03:FD:A1:12:FA:63:96:56:C9:1E:27:49:98:7F
            X509v3 Authority Key Identifier:
                keyid:9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/010cd731715be23421a67ef692204636bca08081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.204.0/22
                IPv6:
                  2803:9cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:36:03:7c:a6:34:dc:20:dd:41:fe:52:e1:a4:97:3d:b1:6c:
         4b:18:9d:8a:41:ea:62:7d:e6:9b:b7:be:34:02:b5:19:56:4d:
         17:80:53:de:fa:8b:11:35:c0:f6:34:23:21:54:79:76:a1:8c:
         a6:95:08:fa:d1:02:a0:eb:9e:06:79:88:ef:41:76:23:81:70:
         92:fb:51:c5:49:8d:1d:e6:c9:eb:ad:f5:0c:50:bf:57:be:19:
         e6:cd:ea:d2:08:1c:f1:25:9d:d6:fc:6b:b3:4f:01:07:42:35:
         56:37:2a:d6:ec:97:36:ab:87:b0:0c:83:bf:de:9c:a2:34:3d:
         5a:62:e9:08:eb:a0:a7:7e:95:ad:1b:1a:55:99:f7:5a:75:98:
         67:17:34:96:72:e8:9b:ba:1a:bd:6b:f7:9e:d2:a9:35:87:6d:
         65:41:8d:63:38:7b:7b:9f:af:96:a4:8f:a3:c7:fb:e1:7e:45:
         1a:42:fb:4f:40:d0:bc:bf:19:fd:a3:0f:ed:99:76:52:99:1f:
         38:e2:36:a1:e4:49:bb:1e:ed:52:7e:e3:e5:27:71:d3:97:0b:
         44:63:2e:3f:57:a6:e1:a8:0b:16:f0:de:88:cb:fe:ff:a8:73:
         72:c2:98:42:dc:af:1b:bc:f8:8e:52:e7:15:ae:cb:94:89:5c:
         e0:ac:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----