Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/a630b5b9072edc12402cc7c28799b08105ff8ad7.roa
File:                     a630b5b9072edc12402cc7c28799b08105ff8ad7.roa (raw, json)
Hash identifier:          88JqgZf/eh1ZYka5sTNbMvth1+zzlM2Rvrv5CWoFM00=
Subject key identifier:   F7:4D:FB:1A:EF:3D:5F:08:BD:EB:01:44:A2:9E:F0:69:37:6E:60:B2
Certificate issuer:       /CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Certificate serial:       1CE714
Authority key identifier: 61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/a630b5b9072edc12402cc7c28799b08105ff8ad7.roa
Signing time:             Wed 28 Feb 2024 16:31:36 +0000
ROA not before:           Wed 28 Feb 2024 16:31:36 +0000
ROA not after:            Sat 28 Feb 2026 16:31:36 +0000
asID:                     272992
IP address blocks:        131.221.40.0/22 maxlen: 24
                          2803:8b80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894164 (0x1ce714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
        Validity
            Not Before: Feb 28 16:31:36 2024 GMT
            Not After : Feb 28 16:31:36 2026 GMT
        Subject: CN=a630b5b9072edc12402cc7c28799b08105ff8ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:99:04:23:ee:73:55:e0:9f:4d:4a:a3:b5:
                    88:35:c0:1f:51:a2:e7:b3:92:de:95:51:3f:3d:3c:
                    2e:3c:56:fb:70:91:c1:77:0d:73:35:34:ad:5c:29:
                    cd:09:ad:fc:a0:20:63:e3:ee:e2:fe:f0:b6:59:09:
                    5c:68:2f:a9:8f:c2:5c:54:d5:9e:1e:c3:b8:2f:16:
                    3f:91:6a:f4:27:60:35:11:30:6e:8f:d4:c5:e6:85:
                    2b:2c:9b:e8:b7:a5:5b:a7:97:b2:af:c5:e5:5d:6a:
                    96:47:a6:69:a3:ab:b5:9b:6f:b1:53:19:4f:68:20:
                    a8:af:7e:f6:83:c1:ea:68:13:3e:3d:f6:1c:66:cc:
                    81:a3:ba:7b:0e:3e:42:99:0c:aa:99:5c:a8:d7:2f:
                    85:98:ce:b8:82:58:6a:18:7e:33:32:a8:58:d5:58:
                    f1:f1:7b:f2:df:ba:da:60:c8:36:dc:78:18:ad:c5:
                    99:2e:8c:1f:91:07:5a:9a:d3:51:08:69:21:88:e0:
                    69:17:9e:39:58:49:67:71:f4:12:4e:77:d2:16:90:
                    8f:2a:44:86:ce:24:26:80:c2:a5:0e:d1:58:39:c1:
                    9c:7e:3f:03:7d:c9:76:e7:ab:db:30:35:3b:a7:d3:
                    07:0d:f5:5c:98:86:b9:b6:e2:23:e9:ac:25:f7:40:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4D:FB:1A:EF:3D:5F:08:BD:EB:01:44:A2:9E:F0:69:37:6E:60:B2
            X509v3 Authority Key Identifier:
                keyid:61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/a630b5b9072edc12402cc7c28799b08105ff8ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.40.0/22
                IPv6:
                  2803:8b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:f5:f8:ed:b7:20:2b:ef:65:f9:35:de:ad:e8:17:df:c2:
         3a:fd:7e:47:18:a6:b7:31:d5:59:a1:1f:81:1e:06:76:70:f7:
         04:dd:c3:17:c2:52:9b:b0:64:6e:89:9b:4e:5b:6b:be:af:2e:
         26:61:b2:c3:32:a2:77:2e:2f:7d:01:73:ca:7d:f8:76:5e:e8:
         13:c1:18:db:8c:d2:f1:c6:81:33:2f:06:86:02:68:3a:a4:89:
         dd:66:c7:34:d5:ba:2d:27:0e:22:30:c1:73:53:65:de:d1:2f:
         0d:cf:0b:87:64:ee:11:bd:44:f6:09:24:48:ae:f1:d6:22:9b:
         bf:5d:52:3c:75:4d:84:4f:c8:c3:ba:fe:18:b8:23:29:25:d1:
         15:51:7f:b3:d0:67:e4:81:bb:0d:a1:a8:6f:fe:37:da:cd:50:
         e1:cc:07:cf:84:94:8e:5d:4c:c7:c5:08:b2:66:f2:5d:e9:5c:
         fc:30:f3:2d:ee:d2:08:37:e4:d5:9b:9a:82:74:b0:03:b4:ee:
         d7:df:d6:ae:3e:dc:99:eb:46:27:7b:cd:4e:e2:ea:c4:76:df:
         d1:bc:5e:a8:22:c3:54:4e:80:2d:40:a5:89:3e:98:d6:2c:e5:
         8c:72:91:c9:02:3c:be:86:3e:72:bf:7c:1a:8c:3a:85:c2:46:
         0a:eb:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----