Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0396bf77-b67f-4e46-bf02-bb65b59def49/38640822fa926a7aa094e23520a560cffdd9ca69.roa
File:                     38640822fa926a7aa094e23520a560cffdd9ca69.roa (raw, json)
Hash identifier:          yTIL+pL55FvpCwEAd/kbw7Ko24s4y/S+oEC83eB9YGU=
Subject key identifier:   E1:C4:D2:7C:E3:64:34:92:1A:C9:DC:13:14:A2:CE:94:87:BE:AC:5A
Certificate issuer:       /CN=5312306318ac6d60ca59838d50ba8b51676ed129
Certificate serial:       033C
Authority key identifier: 4C:1C:25:7D:13:07:D9:5F:D0:C2:52:AD:51:CD:5D:69:AA:25:C6:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5312306318ac6d60ca59838d50ba8b51676ed129.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0396bf77-b67f-4e46-bf02-bb65b59def49/38640822fa926a7aa094e23520a560cffdd9ca69.roa
Signing time:             Wed 10 May 2023 16:24:55 +0000
ROA not before:           Tue 09 May 2023 16:24:55 +0000
ROA not after:            Sat 10 May 2025 16:24:55 +0000
asID:                     271775
IP address blocks:        192.231.116.0/24 maxlen: 24
                          2803:4fe0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5312306318ac6d60ca59838d50ba8b51676ed129
        Validity
            Not Before: May  9 16:24:55 2023 GMT
            Not After : May 10 16:24:55 2025 GMT
        Subject: CN=38640822fa926a7aa094e23520a560cffdd9ca69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:cb:56:7e:af:73:49:ce:2b:c5:2f:f1:a5:
                    24:d6:18:ef:fa:15:4f:2d:64:3d:02:9b:ca:3d:68:
                    7e:d0:c5:ee:df:96:d9:08:97:f4:ca:03:4c:52:41:
                    f9:40:4c:a8:33:77:f0:22:d2:f7:31:47:80:1a:84:
                    0c:1a:f5:15:d0:78:28:81:af:97:a5:ca:e0:6b:be:
                    15:86:7d:80:b7:e2:a4:18:41:3f:85:38:04:fc:7a:
                    75:c6:4b:d4:34:f1:be:16:5a:e9:b0:1d:7b:ec:76:
                    70:61:8c:e9:d4:f1:0e:88:66:2d:32:1d:56:2d:17:
                    c0:25:ed:2f:02:49:0a:7d:3e:bf:47:20:53:0d:5c:
                    68:1a:99:7a:89:bc:63:5f:0e:50:cc:52:18:e7:b0:
                    2c:08:0c:6e:fa:76:c3:77:d6:37:13:4d:52:e2:f3:
                    90:0e:07:12:31:7e:9e:9b:d6:3f:1d:ba:a5:1d:a4:
                    fd:52:9f:f6:d5:0c:37:8e:6d:cb:78:86:16:d2:97:
                    ea:98:44:e6:6f:b0:41:75:4e:4b:66:aa:9b:3e:ea:
                    b6:6f:52:bd:a3:34:f3:38:f3:04:52:67:c7:b0:39:
                    ad:2d:11:c2:78:21:b1:70:04:91:f6:9f:83:5c:99:
                    d8:f1:5b:eb:d7:e6:0a:a6:ca:16:31:ac:b1:f2:30:
                    a4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C4:D2:7C:E3:64:34:92:1A:C9:DC:13:14:A2:CE:94:87:BE:AC:5A
            X509v3 Authority Key Identifier:
                keyid:4C:1C:25:7D:13:07:D9:5F:D0:C2:52:AD:51:CD:5D:69:AA:25:C6:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5312306318ac6d60ca59838d50ba8b51676ed129.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0396bf77-b67f-4e46-bf02-bb65b59def49/38640822fa926a7aa094e23520a560cffdd9ca69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0396bf77-b67f-4e46-bf02-bb65b59def49/5312306318ac6d60ca59838d50ba8b51676ed129.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.116.0/24
                IPv6:
                  2803:4fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:c8:71:68:06:b6:79:25:88:35:2a:68:10:d0:9d:00:99:78:
         8e:80:2b:34:d5:f7:fd:64:a3:80:34:aa:7c:33:aa:f7:9c:03:
         c9:73:09:7b:6d:60:b8:44:b5:32:da:36:d6:0f:7a:6e:36:83:
         3d:23:b0:6b:46:1c:bf:d6:fd:8a:03:ea:83:7c:00:bf:66:27:
         62:05:0a:23:47:73:b6:27:cc:81:66:a3:84:29:af:f3:a5:d5:
         dc:6e:94:64:c9:17:5a:48:c6:11:f4:f5:be:05:55:bf:81:89:
         1a:d1:34:55:b0:e0:91:0a:74:44:d2:53:47:a7:e8:70:7d:4d:
         86:d1:55:4d:6e:26:a1:2b:c4:59:8c:bb:89:d6:5e:3a:71:25:
         00:96:11:c5:f4:65:d5:79:a2:aa:33:05:e9:9e:10:a6:c3:3c:
         57:4e:92:11:6d:d3:76:3a:5b:3c:f1:17:17:77:dc:24:de:b8:
         bd:0a:ef:44:33:c4:27:60:00:21:ca:24:0d:a2:b8:e7:53:e2:
         7f:9b:57:1f:26:91:0a:65:8b:65:c4:be:4b:00:9e:68:df:af:
         ef:af:e5:18:be:ca:fe:76:3b:9b:0c:d5:15:fa:81:a3:19:14:
         8d:eb:7f:61:8f:86:51:2a:d5:93:2e:f8:a7:d3:ae:0d:35:e4:
         45:b5:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----