Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/d674ad0a7c6b2c319af76c0ae385c9154d520bdc.roa
File:                     d674ad0a7c6b2c319af76c0ae385c9154d520bdc.roa (raw, json)
Hash identifier:          cg8PAlGki/ocxJ4aNGMsfmDS1Jmx7CxbRQPYEGp1Mw4=
Subject key identifier:   98:6C:83:7D:38:AD:54:D8:10:2E:F4:49:3D:0D:6B:A2:E6:F4:A0:51
Certificate issuer:       /CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Certificate serial:       24AE7F
Authority key identifier: 4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/d674ad0a7c6b2c319af76c0ae385c9154d520bdc.roa
Signing time:             Tue 19 Dec 2023 14:26:43 +0000
ROA not before:           Tue 19 Dec 2023 14:26:43 +0000
ROA not after:            Fri 19 Dec 2025 14:26:43 +0000
asID:                     52436
IP address blocks:        168.181.208.0/22 maxlen: 24
                          168.196.32.0/22 maxlen: 24
                          138.97.176.0/22 maxlen: 24
                          207.248.124.0/22 maxlen: 24
                          179.42.168.0/22 maxlen: 24
                          190.122.180.0/22 maxlen: 24
                          2803:b900::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2403967 (0x24ae7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6663fb5d62a6c45845d461b066de1127b3e069
        Validity
            Not Before: Dec 19 14:26:43 2023 GMT
            Not After : Dec 19 14:26:43 2025 GMT
        Subject: CN=d674ad0a7c6b2c319af76c0ae385c9154d520bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:ac:8f:9b:ae:75:eb:fa:01:bc:43:e8:36:
                    39:0f:41:a7:c7:6f:c3:9b:23:ad:1d:3e:ca:45:5d:
                    22:0b:93:c5:14:66:3d:70:78:c5:c8:73:2c:dc:b7:
                    17:56:56:79:3d:8c:6b:c3:e0:ba:c9:be:64:c2:67:
                    dd:da:93:83:d9:93:eb:70:e7:d0:f6:75:06:55:14:
                    c2:0d:b9:19:fb:a2:b0:50:40:ee:7e:5c:21:9d:6b:
                    d0:d8:43:a0:1a:7f:9a:f4:f5:a4:a5:5c:5e:d0:55:
                    fe:d4:13:cd:90:1c:89:f4:78:ac:5e:d5:35:ea:e8:
                    2d:dc:95:cf:47:53:ae:ab:ff:82:18:98:12:77:61:
                    3b:06:d5:da:18:4a:cc:37:bc:eb:38:d6:7f:9f:2f:
                    83:a4:69:01:6e:25:c5:59:06:97:0d:83:1b:ae:72:
                    92:93:1b:0e:cd:2a:3f:6d:c3:1f:38:e5:6b:d7:05:
                    d6:50:a6:bb:a2:95:84:4d:96:79:ea:26:a5:92:15:
                    03:84:c3:0d:64:32:af:f8:38:4b:bd:7d:dc:6a:f1:
                    c0:80:5a:04:60:55:9e:b3:92:d6:e6:73:64:81:e9:
                    2a:18:c9:fb:64:9e:6e:b8:6e:17:2b:76:c3:ae:54:
                    be:17:c1:7b:3b:8c:08:fa:b0:20:95:37:13:a0:b0:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6C:83:7D:38:AD:54:D8:10:2E:F4:49:3D:0D:6B:A2:E6:F4:A0:51
            X509v3 Authority Key Identifier:
                keyid:4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/d674ad0a7c6b2c319af76c0ae385c9154d520bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/9e6663fb5d62a6c45845d461b066de1127b3e069.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.176.0/22
                  168.181.208.0/22
                  168.196.32.0/22
                  179.42.168.0/22
                  190.122.180.0/22
                  207.248.124.0/22
                IPv6:
                  2803:b900::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:7a:39:58:f0:e5:7d:c2:e1:43:27:5e:b5:04:07:82:9c:f2:
         ad:72:c2:f3:8e:31:e9:30:01:a9:7b:a9:01:7a:71:9c:ce:7d:
         b0:5a:e5:d6:bb:7c:6c:78:9a:6b:fc:85:41:ac:bb:17:7d:83:
         57:50:25:05:7c:c1:8e:f1:4a:39:8a:9b:09:bc:8a:f5:c3:72:
         ad:84:5f:a8:c1:0c:bc:85:7a:68:4e:98:03:2f:14:df:e7:73:
         30:66:6d:67:bc:c4:4d:d0:08:c8:da:51:b8:10:f5:30:26:cf:
         25:88:59:d0:45:e8:c7:2d:34:53:25:f3:eb:2f:0f:d9:e6:b4:
         35:98:f1:fa:da:7c:f4:ea:57:c4:48:1c:45:01:a0:e7:79:10:
         37:ab:49:be:a3:d2:98:5a:64:d7:1d:5e:aa:cf:13:51:df:d4:
         0b:07:f1:19:32:5b:ef:a7:4d:15:20:ff:05:cb:48:d5:79:85:
         1b:3e:39:f6:67:86:c5:5f:b6:a3:ba:f8:c0:08:38:fb:f1:92:
         98:ac:8f:4a:53:cc:fa:6c:21:67:10:de:00:60:89:9a:3d:47:
         ad:e1:85:6d:fc:03:33:82:46:7a:b3:a5:48:28:23:86:3b:e9:
         21:c7:2a:84:30:13:a8:46:6a:74:43:e6:6b:8f:2f:d7:ea:60:
         17:99:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----