Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/0f78e7485637fe20a441aebf0633d999ba56166d.roa
File:                     0f78e7485637fe20a441aebf0633d999ba56166d.roa (raw, json)
Hash identifier:          /GPU9Ife1Q1SroTHdT+X283j3fdBooaxBqJUDc5n8Yo=
Subject key identifier:   D5:51:4C:39:6A:DC:B0:CB:94:FC:71:E9:7F:A1:6D:FC:BD:8D:34:4B
Certificate issuer:       /CN=1d01e0d3cb834f895612155144725f326726b46a
Certificate serial:       1A00C1
Authority key identifier: 09:29:CA:B4:B6:2B:66:D5:F7:17:2A:EE:84:5E:79:84:65:AF:59:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d01e0d3cb834f895612155144725f326726b46a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/0f78e7485637fe20a441aebf0633d999ba56166d.roa
Signing time:             Fri 12 Apr 2024 20:10:07 +0000
ROA not before:           Fri 12 Apr 2024 20:10:07 +0000
ROA not after:            Sun 12 Apr 2026 20:10:07 +0000
asID:                     265770
IP address blocks:        164.163.124.0/22 maxlen: 24
                          2803:97c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704129 (0x1a00c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d01e0d3cb834f895612155144725f326726b46a
        Validity
            Not Before: Apr 12 20:10:07 2024 GMT
            Not After : Apr 12 20:10:07 2026 GMT
        Subject: CN=0f78e7485637fe20a441aebf0633d999ba56166d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:37:b9:51:83:61:9f:29:c6:82:0c:7a:62:
                    b0:d9:ff:b8:1d:83:f3:2b:ae:ab:8b:9a:84:0f:1c:
                    49:c2:b9:9c:da:50:fa:b2:72:a4:88:37:17:b1:eb:
                    05:53:f2:79:70:93:29:bc:04:f2:9f:ab:85:d6:2d:
                    03:18:65:b6:bf:e3:f8:c2:fd:6e:c5:2a:d1:8d:ac:
                    7c:03:26:7a:4c:8f:89:ea:04:0a:30:cf:76:ee:dc:
                    e6:fd:14:57:34:a7:03:f6:60:a5:85:fa:b6:3d:e2:
                    4c:7a:46:9a:a2:69:bd:64:71:2a:79:9d:9e:99:b6:
                    28:18:9e:e5:7c:d0:df:99:0c:50:c9:90:70:a2:38:
                    43:a6:b9:ec:5a:23:48:f9:c2:49:0b:46:94:64:5e:
                    28:c0:37:86:8f:22:09:a4:e5:59:56:29:b6:42:4d:
                    75:f0:1d:9e:d0:2f:7e:e4:89:ef:5a:93:8f:5c:0f:
                    e9:e3:12:c2:09:cc:18:2c:9d:e6:70:a8:e5:16:c6:
                    65:fa:07:01:72:a3:70:b8:a0:c9:ce:57:e8:48:8e:
                    e5:53:87:49:92:34:be:3d:29:d8:14:9f:6c:be:d6:
                    14:6b:78:7f:e5:a9:94:16:c6:c9:82:05:dd:b8:b6:
                    43:83:d3:b0:de:74:94:47:54:67:77:f3:53:44:36:
                    11:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:51:4C:39:6A:DC:B0:CB:94:FC:71:E9:7F:A1:6D:FC:BD:8D:34:4B
            X509v3 Authority Key Identifier:
                keyid:09:29:CA:B4:B6:2B:66:D5:F7:17:2A:EE:84:5E:79:84:65:AF:59:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d01e0d3cb834f895612155144725f326726b46a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/0f78e7485637fe20a441aebf0633d999ba56166d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/1d01e0d3cb834f895612155144725f326726b46a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.124.0/22
                IPv6:
                  2803:97c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:1b:b6:62:62:ae:e0:44:ee:71:5e:13:65:ca:78:4a:bc:16:
         1f:2f:c8:56:0e:21:18:2f:1b:44:c3:00:9f:10:eb:0c:cf:e1:
         0e:fa:14:90:93:5e:ea:20:e6:d4:78:25:6e:11:d8:27:21:ed:
         42:6f:8f:f9:bb:d4:dc:31:3a:bd:db:09:27:72:af:a2:43:42:
         e9:66:a7:90:0c:8a:60:84:dd:44:f6:b3:3d:5d:10:6b:43:28:
         87:4d:b0:2a:e5:4f:be:5b:90:92:6e:8a:f1:f6:8f:a3:10:4b:
         5e:d2:cb:2d:03:8d:94:33:b5:ec:7a:d8:fe:78:25:e9:ed:6d:
         38:a4:7a:34:d8:a4:4e:20:93:ca:02:da:29:a5:8d:5d:00:e0:
         62:98:21:d9:0b:cd:ff:6e:2d:fa:92:19:f2:cd:a7:97:6b:29:
         cf:12:9b:60:42:da:7f:8e:54:d1:74:21:1f:84:69:11:a1:d2:
         9c:2b:4d:db:1a:8f:e2:79:dc:87:ce:ff:ea:49:47:46:51:a4:
         26:98:9c:bb:f9:03:33:1d:e6:2a:48:e1:89:9c:67:0c:c4:06:
         da:78:9d:5c:c5:a1:a1:8d:0e:eb:c4:0a:86:87:f5:e6:1b:53:
         c8:04:ff:dc:be:65:51:96:53:cc:40:d3:01:72:bb:4f:3b:5d:
         10:d6:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----