Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/c8f427d94d5fe3978eb1f63cfae36e9a97ad0e6b.roa
File:                     c8f427d94d5fe3978eb1f63cfae36e9a97ad0e6b.roa (raw, json)
Hash identifier:          yGr1wKxhv1l8Y9mWfrEFj3ndyvOvG5q4Bq1qgeDPa9o=
Subject key identifier:   99:6A:B0:F3:27:C0:54:90:CD:44:B0:03:AC:4E:F5:77:F7:55:09:6F
Certificate issuer:       /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial:       124F7F
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/c8f427d94d5fe3978eb1f63cfae36e9a97ad0e6b.roa
Signing time:             Fri 09 Feb 2024 07:32:13 +0000
ROA not before:           Fri 09 Feb 2024 07:32:13 +0000
ROA not after:            Sun 08 Feb 2026 07:32:13 +0000
asID:                     270047
IP address blocks:        179.0.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199999 (0x124f7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
        Validity
            Not Before: Feb  9 07:32:13 2024 GMT
            Not After : Feb  8 07:32:13 2026 GMT
        Subject: CN=c8f427d94d5fe3978eb1f63cfae36e9a97ad0e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e1:16:b8:c3:cd:7c:ee:2f:50:48:7b:e0:ad:
                    23:ec:cc:9d:a4:2b:1c:18:31:40:a5:2e:64:41:02:
                    10:bf:9c:18:6a:24:6a:9f:1d:a0:e8:52:bd:e1:c7:
                    e1:41:25:a5:8a:b3:56:26:69:48:c9:b1:d5:0e:99:
                    45:f3:2b:39:bc:2b:60:85:fb:3e:df:75:23:0c:89:
                    90:3b:ad:60:7f:44:d1:b9:c5:c9:4a:6c:80:09:02:
                    d3:bc:90:25:56:e8:da:5b:a8:55:d4:4b:fe:d6:92:
                    23:c3:ee:d5:67:9c:2b:fc:0a:fc:26:4d:f3:e8:58:
                    6d:91:7f:7f:32:1d:71:a3:c1:1e:d7:15:8f:e6:10:
                    98:f2:46:7d:62:7d:43:2a:e6:a2:ec:f7:56:4e:de:
                    18:aa:40:e8:67:2f:b5:ca:b4:8c:96:64:f7:bf:f6:
                    c9:ec:c9:c0:7e:75:8c:e6:13:5f:f2:64:90:58:2b:
                    54:44:d2:72:a6:90:25:44:27:8e:08:24:56:51:a8:
                    ed:91:0f:da:cf:dc:8c:9e:88:a3:b4:dc:56:e6:c8:
                    37:56:2d:27:af:92:13:fc:2a:8b:6f:b3:69:32:99:
                    48:b0:16:99:a7:11:1b:8d:20:fe:06:50:70:ea:08:
                    7c:a1:a8:1e:b2:3e:f5:91:f9:e6:3b:62:7e:57:17:
                    c6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6A:B0:F3:27:C0:54:90:CD:44:B0:03:AC:4E:F5:77:F7:55:09:6F
            X509v3 Authority Key Identifier:
                keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/c8f427d94d5fe3978eb1f63cfae36e9a97ad0e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:66:f3:49:11:12:49:af:d8:83:19:79:f5:19:6b:2a:ad:5b:
         8e:5a:ca:d6:e3:18:7c:1b:b0:f4:a7:9f:6b:9e:77:31:41:f1:
         6b:3f:c7:6f:97:57:d1:6c:54:21:08:89:34:89:e2:42:57:1a:
         26:e8:8f:0b:f2:71:d8:1c:4f:c8:22:a2:25:a0:ea:95:ba:6f:
         eb:45:cd:bb:4c:19:c4:f9:fd:6b:df:6a:58:6f:61:58:ea:cd:
         e5:ba:36:cf:50:c9:f4:45:5f:ca:e5:df:c3:a4:9f:15:51:18:
         ac:04:b3:c8:8d:56:92:88:4f:8a:1c:ec:65:be:b2:30:8e:00:
         6a:a4:c9:96:2a:8d:f3:29:90:5c:6a:d7:5e:00:9e:83:a4:0a:
         4a:97:43:d0:16:1a:9f:c9:33:fd:eb:a6:c1:63:1b:8b:cb:39:
         0e:7e:85:82:c9:e0:b2:2b:04:28:cf:51:6f:f1:ab:dc:24:02:
         0b:15:f9:a8:c4:96:43:db:98:cb:37:16:00:da:fd:44:73:91:
         2d:74:13:ed:39:8f:a0:78:37:de:6d:6e:46:90:6b:92:02:34:
         55:36:76:a2:8d:10:b9:4a:38:e9:99:62:0a:d2:31:a7:df:0f:
         a7:6e:ee:79:02:ea:4c:da:74:75:19:54:19:63:ac:89:d6:7f:
         58:42:39:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----