Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22a6fa81-dccd-4e1f-afe8-f6287accd26b/2f4f79600be2f9255b8939cd760645fc7bdfbb80.roa
File:                     2f4f79600be2f9255b8939cd760645fc7bdfbb80.roa (raw, json)
Hash identifier:          XtNQRhvTKgGCAgU1T2cg1PvDnUZ/5zJF0H01tYghR5s=
Subject key identifier:   F4:AA:9D:07:2A:76:AC:DC:7C:BE:85:3B:5D:06:D0:31:35:07:9C:EA
Certificate issuer:       /CN=a87a10409ce52feb71bbc555b70a9d552dbb8806
Certificate serial:       123FB4
Authority key identifier: E8:73:AA:E0:F4:90:B0:A6:B6:41:C9:5F:25:9C:DC:45:5C:B9:2B:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a87a10409ce52feb71bbc555b70a9d552dbb8806.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22a6fa81-dccd-4e1f-afe8-f6287accd26b/2f4f79600be2f9255b8939cd760645fc7bdfbb80.roa
Signing time:             Thu 14 Mar 2024 08:30:00 +0000
ROA not before:           Thu 14 Mar 2024 08:30:00 +0000
ROA not after:            Sat 14 Mar 2026 08:30:00 +0000
asID:                     264786
IP address blocks:        168.197.164.0/22 maxlen: 24
                          2803:98c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195956 (0x123fb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a87a10409ce52feb71bbc555b70a9d552dbb8806
        Validity
            Not Before: Mar 14 08:30:00 2024 GMT
            Not After : Mar 14 08:30:00 2026 GMT
        Subject: CN=2f4f79600be2f9255b8939cd760645fc7bdfbb80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4c:ab:b7:c5:bd:8b:fe:7b:8e:66:11:08:21:
                    12:b7:56:02:5b:7f:ea:b7:2b:f8:e6:de:7b:a7:d6:
                    9f:fc:8f:4b:01:af:c9:d8:6f:e2:60:7e:ed:9c:dd:
                    90:69:dc:1b:41:82:18:69:db:67:0d:3a:37:a0:07:
                    2c:8d:62:4e:45:1f:2f:5d:56:a0:d9:50:99:f4:19:
                    43:a4:2d:f6:cd:92:f8:56:52:c0:56:a4:57:c8:ae:
                    ec:9c:cb:25:c4:b1:4f:8d:15:64:3a:0d:a2:f8:d2:
                    5e:da:15:ea:01:d5:ca:f7:68:62:48:e2:4e:ee:36:
                    99:94:ab:e1:4b:9a:50:6a:8e:f8:9e:50:28:37:8e:
                    66:ec:6d:da:26:04:bb:79:10:22:c7:9c:7b:dc:de:
                    64:73:b8:ee:7e:9c:4c:0e:fc:a9:fd:7a:e5:99:ec:
                    35:e7:f0:8a:30:08:c9:de:07:c4:ad:ff:f8:a5:9a:
                    23:24:5b:b3:16:f1:91:82:ee:d5:8e:8d:08:4e:b5:
                    38:ba:23:20:f4:0a:0a:eb:80:2e:0a:20:bc:99:5b:
                    0d:96:0a:c0:6a:5a:e1:f2:b8:d8:5f:8a:31:ae:34:
                    7e:03:f8:fd:0a:6e:ab:ca:d0:ee:71:df:c6:b4:e4:
                    f5:f4:08:0a:51:44:1e:be:ff:82:39:49:d9:53:e2:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AA:9D:07:2A:76:AC:DC:7C:BE:85:3B:5D:06:D0:31:35:07:9C:EA
            X509v3 Authority Key Identifier:
                keyid:E8:73:AA:E0:F4:90:B0:A6:B6:41:C9:5F:25:9C:DC:45:5C:B9:2B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a87a10409ce52feb71bbc555b70a9d552dbb8806.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22a6fa81-dccd-4e1f-afe8-f6287accd26b/2f4f79600be2f9255b8939cd760645fc7bdfbb80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22a6fa81-dccd-4e1f-afe8-f6287accd26b/a87a10409ce52feb71bbc555b70a9d552dbb8806.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.164.0/22
                IPv6:
                  2803:98c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:6d:36:76:8e:db:eb:a6:a0:a4:90:86:18:a7:90:a4:24:23:
         f8:1a:13:65:c8:bc:e6:da:22:c2:05:23:52:c9:18:7f:7f:87:
         b4:7c:1f:a7:b7:d2:c3:93:14:19:43:01:67:91:de:59:a9:dd:
         48:dc:5c:1d:d9:55:cf:10:d7:43:41:e3:0a:e4:ee:7c:fa:4f:
         65:2d:78:78:0c:85:96:2f:fc:ae:3c:c1:4b:63:14:4f:34:bb:
         f8:e8:f2:a7:7b:9f:55:b2:dd:a3:01:62:7a:87:9a:6d:86:bb:
         eb:f5:fe:4d:2d:6b:98:e8:f5:b5:bd:22:3d:9a:2c:31:0c:a7:
         20:54:2f:4a:68:01:bc:51:1b:8d:7e:cb:8a:dc:de:c4:36:81:
         92:8e:0f:aa:db:30:87:d0:a6:04:e2:37:15:48:f8:be:9e:38:
         68:67:c7:fa:8f:3f:19:1f:59:db:8a:18:26:db:a2:a0:33:9c:
         ce:44:db:e8:79:d5:9f:56:00:ed:35:35:25:ed:54:2e:ee:81:
         24:da:10:f8:bc:6f:94:65:e3:ef:7b:e6:41:a4:04:69:6a:ea:
         ae:62:26:c9:b4:ef:d4:1f:91:54:e9:0f:5e:a4:9b:52:b5:41:
         b1:bd:bc:cb:fa:6a:b5:0c:01:a7:b8:a7:62:34:f0:cd:43:dd:
         b5:d3:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----