Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/1d9541f2f04d3ca31c414bd2573dfce999e869c5.roa
File:                     1d9541f2f04d3ca31c414bd2573dfce999e869c5.roa (raw, json)
Hash identifier:          dUPFgy50zDScGYUm5jf+s4NvGc8HEltEOi1281Sr9JY=
Subject key identifier:   B4:B7:C9:60:9D:F4:A6:45:7B:14:52:5F:9E:1E:C3:68:45:9E:8A:F5
Certificate issuer:       /CN=f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99
Certificate serial:       261F4B
Authority key identifier: 35:B1:6D:7A:72:65:78:D7:94:68:40:DA:52:E6:EF:EA:FF:C5:C9:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/1d9541f2f04d3ca31c414bd2573dfce999e869c5.roa
Signing time:             Thu 14 Dec 2023 21:42:48 +0000
ROA not before:           Thu 14 Dec 2023 21:42:48 +0000
ROA not after:            Sun 14 Dec 2025 21:42:48 +0000
asID:                     270016
IP address blocks:        131.196.60.0/22 maxlen: 24
                          2803:67c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2498379 (0x261f4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99
        Validity
            Not Before: Dec 14 21:42:48 2023 GMT
            Not After : Dec 14 21:42:48 2025 GMT
        Subject: CN=1d9541f2f04d3ca31c414bd2573dfce999e869c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:ca:ed:97:23:ad:fe:64:f6:3e:7e:98:5a:
                    8b:e4:cd:9b:b6:0b:a0:cf:a1:2f:d4:71:c3:4a:4a:
                    4c:6d:4e:68:e5:e6:dc:14:c3:17:94:ea:43:9b:9e:
                    d3:e9:dd:88:c0:59:97:36:52:fe:81:d5:ce:8d:f7:
                    e7:61:18:a9:6f:0a:6e:33:fb:3b:89:2c:e1:34:6b:
                    84:22:5c:27:63:70:7a:ab:48:95:78:7b:88:a8:1d:
                    81:d0:21:63:eb:b2:49:f5:f7:09:a0:72:8f:03:e2:
                    21:60:58:a6:b6:e7:24:02:ca:fe:42:49:43:c2:8a:
                    37:b6:11:52:b8:c5:25:f4:77:f3:39:23:4e:fa:21:
                    d6:55:1d:70:c7:cc:1f:8c:e5:f8:a8:22:31:16:f4:
                    aa:d8:ad:f2:c6:71:40:13:51:c4:78:27:62:6b:ca:
                    0e:a1:fe:ee:c7:09:19:32:08:1e:f2:f3:d4:63:4f:
                    ac:37:60:d0:61:27:55:5e:72:bf:01:76:46:45:9a:
                    54:9f:37:0a:10:af:9c:57:d9:25:8d:47:06:72:f4:
                    51:e9:68:0b:69:77:a7:f0:92:46:35:e5:cb:36:2f:
                    91:60:6e:15:de:09:2d:e1:49:28:81:a2:cf:46:bb:
                    9b:61:b9:05:51:e6:4f:9d:25:07:a2:88:3a:bd:c1:
                    04:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B7:C9:60:9D:F4:A6:45:7B:14:52:5F:9E:1E:C3:68:45:9E:8A:F5
            X509v3 Authority Key Identifier:
                keyid:35:B1:6D:7A:72:65:78:D7:94:68:40:DA:52:E6:EF:EA:FF:C5:C9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/1d9541f2f04d3ca31c414bd2573dfce999e869c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.60.0/22
                IPv6:
                  2803:67c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:91:16:f0:76:d6:e9:08:31:a7:b2:51:ca:65:fd:f0:cb:2f:
         73:4a:6f:d0:9a:b6:96:e8:38:4e:ba:af:57:20:a4:5d:76:c4:
         72:3b:22:80:ab:aa:4e:5f:70:57:5a:e8:5a:30:eb:53:f1:5c:
         6c:82:ba:d6:46:4a:2f:af:52:ae:62:7f:87:51:e2:a9:87:a0:
         3c:8e:c5:62:d9:61:ee:20:8c:81:0b:c2:6f:33:d1:5f:a7:68:
         97:97:70:06:0c:c2:5a:32:df:06:98:a4:5a:57:a9:b7:eb:08:
         a6:8d:a0:c2:3e:75:8f:f1:8c:39:cd:60:69:b9:10:f2:d3:a6:
         f0:97:d7:a2:83:2d:2c:4a:fd:ec:06:e9:cd:27:84:f1:dc:f8:
         06:e3:57:ff:af:bc:0f:f2:4e:79:30:98:f4:e6:df:ef:32:7a:
         a1:12:c3:31:f7:3e:da:20:46:2b:d2:36:b9:c2:9c:13:91:12:
         d4:a5:5c:93:bd:21:32:5c:d3:ff:e7:b9:f7:c7:61:f3:be:5a:
         30:05:9c:ba:3a:86:de:ec:9e:ae:00:8a:0a:fb:dd:60:f6:d3:
         ce:0f:c6:57:78:3a:a6:c0:4f:3b:d1:6e:3a:f0:41:b4:38:ad:
         29:3e:29:a5:91:82:0f:fd:7c:b4:ac:e6:18:6c:6f:3b:9a:ef:
         5e:9d:d6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----