Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/f465ae25d1e9c3acc8fe59c470723116fcd50368.roa
File:                     f465ae25d1e9c3acc8fe59c470723116fcd50368.roa (raw, json)
Hash identifier:          x7PfCSQ3uCfI/p0OezRWWAxQ96C7KXI0sS4YHgpN/T0=
Subject key identifier:   6A:36:DE:EB:79:58:E3:6D:ED:DF:B0:94:32:A4:BB:21:1D:C4:D8:C0
Certificate issuer:       /CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b
Certificate serial:       273DE0
Authority key identifier: B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/f465ae25d1e9c3acc8fe59c470723116fcd50368.roa
Signing time:             Fri 26 Jan 2024 14:55:49 +0000
ROA not before:           Fri 26 Jan 2024 14:55:49 +0000
ROA not after:            Mon 26 Jan 2026 14:55:49 +0000
asID:                     27839
IP address blocks:        201.150.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2571744 (0x273de0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b
        Validity
            Not Before: Jan 26 14:55:49 2024 GMT
            Not After : Jan 26 14:55:49 2026 GMT
        Subject: CN=f465ae25d1e9c3acc8fe59c470723116fcd50368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2a:d9:f7:30:88:59:73:28:ca:37:00:24:f2:
                    4c:08:47:73:a5:8a:cb:cd:b4:3c:8a:35:b0:08:0b:
                    df:eb:f2:fd:1e:ed:c8:e9:0b:bd:f7:50:e9:3a:ee:
                    cc:3f:18:75:0b:97:c2:82:34:66:65:3d:33:b3:0f:
                    e8:80:ef:e6:bf:6b:24:d8:4a:11:6b:62:eb:c2:b7:
                    b9:58:7f:b1:50:32:82:b0:8e:aa:23:a1:01:35:8b:
                    bd:7f:c5:37:43:9e:04:a6:94:0c:c9:67:ca:cd:75:
                    cf:7f:b8:5a:b0:84:bd:d5:17:7c:bb:2e:5d:a2:2c:
                    10:31:ed:48:a0:5b:ab:90:f2:56:b9:c0:14:15:43:
                    eb:a9:e8:36:45:2d:c6:b1:d6:1f:f1:04:cd:94:0c:
                    14:6a:bc:66:c9:aa:cc:9e:f8:f2:bc:a3:57:c0:6b:
                    8e:5e:8d:ef:e5:48:4d:49:b7:5a:03:9e:04:60:c6:
                    33:c7:59:49:5b:59:9e:cc:bd:fb:6a:3b:c7:90:95:
                    d6:d8:e6:84:8d:c9:0b:72:0c:9d:2e:6a:57:4e:eb:
                    67:19:d2:02:7c:16:d2:d6:a4:00:7a:7c:f5:ff:3a:
                    fd:0a:64:02:9c:c3:30:bc:04:ca:0c:91:d7:05:f4:
                    4a:fd:14:1a:65:1c:8f:30:9c:7d:7b:39:e3:28:2f:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:36:DE:EB:79:58:E3:6D:ED:DF:B0:94:32:A4:BB:21:1D:C4:D8:C0
            X509v3 Authority Key Identifier:
                keyid:B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/f465ae25d1e9c3acc8fe59c470723116fcd50368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/89a0699fe9f460e1f4fcd4dbeee82910785b065b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:72:b3:98:32:cf:cc:51:dc:28:cf:c0:ce:76:35:54:09:5f:
         7f:ce:ff:22:26:ae:54:4c:6c:03:4e:c9:b7:1b:35:df:02:78:
         0f:ff:c2:93:d9:c6:25:61:c8:cf:41:1a:0e:11:ee:2f:69:ba:
         dc:41:e4:10:3c:56:c9:5c:1d:a6:eb:6b:d0:0c:a4:81:75:b5:
         76:3b:4e:5c:57:4d:74:a5:3a:91:91:21:42:6f:77:d6:78:ca:
         13:19:22:66:e0:a3:26:7d:24:dd:f0:72:2a:89:bc:82:eb:8a:
         dd:a8:0f:72:16:a5:29:86:c2:11:59:d7:ef:7f:37:55:34:ba:
         37:6f:15:92:7f:ca:ba:1c:a1:60:f2:42:8c:7b:6f:84:f3:3b:
         8c:ae:aa:b4:03:2a:3a:78:9e:82:74:83:e6:90:e3:b4:aa:f3:
         3f:d4:64:3a:ad:b3:a0:4d:9f:6e:fe:1d:54:71:b5:0a:65:47:
         fb:5b:20:ba:e3:40:dc:c7:c1:62:9d:de:b2:dd:24:ec:83:43:
         85:9c:fe:48:22:25:77:74:b7:66:1d:80:9f:f1:b9:84:aa:4a:
         43:20:57:31:6e:37:27:f3:21:64:19:17:55:f4:5b:c1:8f:40:
         a6:f3:2a:0f:01:38:4b:b8:1b:f5:20:81:f6:3e:21:5b:b7:1a:
         3c:57:36:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----