Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/741ba552bec01ed89e91675b91201f0b4944f55b.roa
File:                     741ba552bec01ed89e91675b91201f0b4944f55b.roa (raw, json)
Hash identifier:          6iXYOQy71r4xhhfqRqCQ3gtUizugtUx/NMHOcAgghaY=
Subject key identifier:   07:62:8D:1B:F8:24:CF:1D:AA:11:68:1D:8D:9C:2B:07:86:03:3A:6A
Certificate issuer:       /CN=9d5f7256141d4f6ae5e5a02600389ee713736db9
Certificate serial:       11075B
Authority key identifier: 1F:B5:82:5A:DC:1F:5F:84:8A:35:B2:21:8A:D9:EC:94:5C:8E:B6:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d5f7256141d4f6ae5e5a02600389ee713736db9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/741ba552bec01ed89e91675b91201f0b4944f55b.roa
Signing time:             Wed 13 Sep 2023 15:46:12 +0000
ROA not before:           Tue 12 Sep 2023 15:46:12 +0000
ROA not after:            Sat 13 Sep 2025 15:46:12 +0000
asID:                     28007
IP address blocks:        131.108.4.0/22 maxlen: 24
                          2803:bd80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115995 (0x11075b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5f7256141d4f6ae5e5a02600389ee713736db9
        Validity
            Not Before: Sep 12 15:46:12 2023 GMT
            Not After : Sep 13 15:46:12 2025 GMT
        Subject: CN=741ba552bec01ed89e91675b91201f0b4944f55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8b:99:76:29:9c:ad:ee:fc:14:37:a5:04:3d:
                    14:f0:be:e3:f1:51:92:84:9f:ed:72:52:49:c2:fd:
                    4f:5f:b5:db:c8:64:41:43:73:8a:3a:5f:1e:6b:fa:
                    7c:31:39:9e:f7:24:97:3c:5c:eb:70:5d:55:81:64:
                    0c:42:a8:bb:62:c2:f3:ba:28:3f:4d:6c:15:0b:cf:
                    04:e7:fe:b9:66:9a:95:3d:f1:6c:60:e6:7c:16:f5:
                    27:ec:1c:1c:c4:27:e3:bd:48:5a:a6:cb:f0:47:18:
                    26:18:21:53:b8:c3:2f:46:2c:e2:b8:0a:6f:9a:ec:
                    d6:b8:ca:7d:00:e0:89:cd:22:fd:bb:bd:36:8b:f9:
                    e7:f2:7b:6a:95:ae:db:50:5f:c1:56:14:cd:67:fc:
                    5c:8c:8b:9c:7a:51:f2:1f:e7:bf:d5:b6:38:e5:04:
                    12:ce:a5:5a:05:93:8e:6f:33:79:64:50:f8:6b:4f:
                    87:eb:52:ac:48:f0:dd:40:cb:58:73:50:ef:69:2c:
                    d3:bf:7e:ac:e9:e2:b5:08:34:a2:e7:cc:99:5d:1c:
                    89:1a:4c:e9:ac:58:06:a7:7f:c6:70:71:9c:14:19:
                    03:b0:91:69:7e:49:39:3a:15:af:1b:74:e7:cd:91:
                    fa:c6:1f:58:27:f2:e1:a8:3e:1e:69:9a:02:3c:bb:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:62:8D:1B:F8:24:CF:1D:AA:11:68:1D:8D:9C:2B:07:86:03:3A:6A
            X509v3 Authority Key Identifier:
                keyid:1F:B5:82:5A:DC:1F:5F:84:8A:35:B2:21:8A:D9:EC:94:5C:8E:B6:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d5f7256141d4f6ae5e5a02600389ee713736db9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/741ba552bec01ed89e91675b91201f0b4944f55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/9d5f7256141d4f6ae5e5a02600389ee713736db9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.4.0/22
                IPv6:
                  2803:bd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:4b:b6:b6:f6:f2:f4:de:20:42:56:9c:84:2b:5c:0a:a2:da:
         a3:c8:1e:8a:a6:29:e3:86:5f:49:d3:1b:a8:a7:af:ee:09:ad:
         97:c3:9c:80:47:a8:e6:9f:3c:0c:3a:e7:93:e6:22:ac:ac:5f:
         00:32:17:90:56:00:a6:dd:04:38:52:70:e1:9f:b3:26:80:a2:
         a8:7c:cc:20:62:81:03:10:b1:95:0b:e9:45:98:b8:a5:2e:c8:
         83:f6:0e:3a:32:be:4a:f5:79:42:3f:4d:de:cf:9d:17:c1:d4:
         4c:18:6c:24:57:c8:d3:18:e4:81:82:3d:b8:30:a4:c2:35:b5:
         d6:25:a2:cd:78:ce:be:88:4b:a7:8a:ea:48:6d:c9:96:a0:0b:
         ae:8a:29:3d:62:85:4b:78:9d:cb:30:dd:e2:95:27:45:77:8e:
         1b:80:8d:b6:29:a0:ae:bf:7a:3d:79:ae:f2:f4:7e:e6:a1:f9:
         9c:ba:e7:f0:6b:c1:b7:29:fb:d0:17:a7:bb:10:3e:82:b1:0f:
         65:22:07:66:ea:e7:16:af:a5:aa:ef:8b:11:37:f5:86:33:87:
         cd:13:b7:bd:77:09:45:39:d7:0a:4d:87:4c:82:b8:59:ac:22:
         95:99:be:19:b3:b2:8a:2a:9a:8c:cc:9e:d1:ca:f5:47:bf:1c:
         d6:ef:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----