Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/bd658eb4b8b169ee3359efe467e266f5e987978f.roa
File:                     bd658eb4b8b169ee3359efe467e266f5e987978f.roa (raw, json)
Hash identifier:          9uGl6g3s/MENlYhz67EqPKhz3W/hFUNw1sI6e+zV48s=
Subject key identifier:   14:CE:0D:C8:F7:12:CA:C9:39:6D:9D:30:F0:D6:FC:F4:B1:E8:D4:36
Certificate issuer:       /CN=c804815bcdfef674dc896f6b3f2e0b169560053d
Certificate serial:       147C22
Authority key identifier: 50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/bd658eb4b8b169ee3359efe467e266f5e987978f.roa
Signing time:             Thu 11 Jan 2024 19:37:10 +0000
ROA not before:           Thu 11 Jan 2024 19:37:10 +0000
ROA not after:            Sun 11 Jan 2026 19:37:10 +0000
asID:                     263740
IP address blocks:        161.0.0.0/20 maxlen: 20
                          161.0.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342498 (0x147c22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c804815bcdfef674dc896f6b3f2e0b169560053d
        Validity
            Not Before: Jan 11 19:37:10 2024 GMT
            Not After : Jan 11 19:37:10 2026 GMT
        Subject: CN=bd658eb4b8b169ee3359efe467e266f5e987978f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:c2:dc:8b:34:10:47:d7:a0:7e:93:34:54:
                    eb:a0:4a:00:2f:82:26:0e:45:44:fb:c4:86:43:01:
                    13:80:dc:c1:25:45:2e:b1:01:1e:0b:fc:18:a8:70:
                    d6:5e:03:38:92:e9:f1:67:80:70:32:2d:13:c5:65:
                    2d:9f:f4:c9:bb:6d:af:91:e2:d0:11:6b:32:4f:97:
                    7f:49:65:2a:08:d5:61:03:4c:03:a1:a0:3b:69:b9:
                    ba:06:54:b3:63:b5:51:8a:e4:16:75:b0:0f:73:3e:
                    3c:96:91:e2:0c:fa:2e:b7:95:ef:5c:de:f3:b1:49:
                    95:ea:22:7b:55:55:99:bb:50:ec:1b:b4:a8:8f:42:
                    02:8a:0d:8c:fd:78:71:d5:34:66:6d:bb:89:d4:ba:
                    c0:f2:64:62:82:02:37:2a:4f:d6:b8:57:60:40:17:
                    ff:95:6d:d7:36:9a:51:da:ab:31:71:66:fd:52:8a:
                    ca:39:9d:46:58:ca:6c:00:31:b9:ee:b3:e1:0e:5d:
                    c4:6b:37:30:b5:2c:58:72:03:e0:6a:51:92:8d:5f:
                    1b:6d:fd:20:0c:c5:fc:cf:ea:40:3a:76:d3:7a:6b:
                    2c:e4:30:67:e8:b9:b6:c4:47:c2:3b:4c:5e:fa:5b:
                    0b:f1:6a:04:fa:c6:35:cc:2d:0d:2a:6d:03:85:45:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CE:0D:C8:F7:12:CA:C9:39:6D:9D:30:F0:D6:FC:F4:B1:E8:D4:36
            X509v3 Authority Key Identifier:
                keyid:50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/bd658eb4b8b169ee3359efe467e266f5e987978f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/c804815bcdfef674dc896f6b3f2e0b169560053d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         28:d3:81:ff:a4:d9:d1:03:61:96:28:0f:21:88:5c:cc:33:84:
         67:bb:f6:84:7f:28:9a:18:76:28:2a:71:86:0c:85:73:d2:e6:
         32:5c:5f:cf:29:aa:6b:15:6f:e1:a4:b0:ae:93:4f:e1:33:9f:
         18:e2:5d:c0:68:40:37:f9:84:53:ab:99:3d:aa:cb:18:8a:94:
         21:b1:f1:72:f3:5c:47:1f:cf:90:ab:59:2c:b0:5a:38:1e:6a:
         2f:e1:00:47:56:a1:ab:bd:f0:03:4f:20:5b:f9:87:0d:d7:1e:
         15:ad:84:3e:8f:30:47:f0:22:77:da:4f:1e:db:62:7b:01:da:
         fc:20:7d:27:57:95:e9:a5:6d:09:f3:45:3b:4d:c5:40:23:64:
         e1:c5:1d:12:76:76:25:01:e5:95:9c:be:c8:f4:f1:52:42:9d:
         6d:04:7c:e4:2e:48:1a:eb:48:d5:c6:2e:d9:01:ce:67:97:f6:
         c7:2c:10:34:5b:48:af:0e:a8:84:b4:8e:36:93:47:a7:e8:f1:
         12:00:ff:63:a5:a8:d5:65:4b:cb:a2:5e:c2:d7:c2:4a:ea:80:
         8c:0d:97:7a:87:21:66:cb:59:9f:71:b6:f6:74:99:93:14:14:
         15:9b:90:2f:83:da:b8:70:db:52:82:e8:55:05:8c:56:f0:e4:
         80:55:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----