Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ed0804f-a4bc-4242-b44d-24ce06ce381d/91fd7dc309891403d41e2cba0595870cbd8dc30d.roa
File:                     91fd7dc309891403d41e2cba0595870cbd8dc30d.roa (raw, json)
Hash identifier:          6YqtuH0ORCPTwQjNiOqByzBW1x7HkGWDZ5lYe4nJ5iY=
Subject key identifier:   37:87:2C:D8:A8:32:39:8A:94:4D:BE:8D:35:3D:A0:E7:9F:DA:99:7E
Certificate issuer:       /CN=70f50d1045a246b518ba0542b6fec0e6cf9a097f
Certificate serial:       0492
Authority key identifier: 27:2B:FE:99:EA:C6:B9:DE:9C:71:5D:35:A3:CA:F2:63:99:DE:D7:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70f50d1045a246b518ba0542b6fec0e6cf9a097f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3ed0804f-a4bc-4242-b44d-24ce06ce381d/91fd7dc309891403d41e2cba0595870cbd8dc30d.roa
Signing time:             Mon 18 Mar 2024 12:06:58 +0000
ROA not before:           Mon 18 Mar 2024 12:06:58 +0000
ROA not after:            Wed 18 Mar 2026 12:06:58 +0000
asID:                     16921
IP address blocks:        200.194.184.0/22 maxlen: 24
                          2806:41a::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170 (0x492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f50d1045a246b518ba0542b6fec0e6cf9a097f
        Validity
            Not Before: Mar 18 12:06:58 2024 GMT
            Not After : Mar 18 12:06:58 2026 GMT
        Subject: CN=91fd7dc309891403d41e2cba0595870cbd8dc30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:1c:72:4a:e7:23:4e:25:87:71:51:0a:7a:
                    09:86:03:8b:e6:18:a4:62:31:92:92:96:10:75:66:
                    17:94:1a:52:d7:83:ed:9e:8f:5a:92:ac:33:0a:28:
                    cc:d7:27:d3:88:45:ec:50:df:7d:72:c1:cc:59:ac:
                    47:77:01:75:65:cf:76:39:08:97:02:51:0b:18:62:
                    86:54:6b:75:75:d0:ce:36:f4:10:25:b6:e0:31:72:
                    b6:12:58:22:4f:fe:16:7c:04:bf:56:19:e5:06:ad:
                    9e:2f:47:73:0e:03:b7:af:c4:09:c5:6b:5c:db:c8:
                    46:2a:06:f8:f5:ff:13:a1:b5:31:b2:4b:6d:85:66:
                    4f:75:9e:12:0e:3b:0b:74:48:61:22:7d:28:bb:a9:
                    47:5a:25:a0:2d:b7:9d:9b:d5:bc:0f:7e:ce:dd:5c:
                    dc:98:cb:fd:c8:4b:3f:9a:13:72:c7:d3:27:55:aa:
                    00:40:d4:58:04:06:bb:fc:a6:c1:5d:8d:5b:b1:7a:
                    dd:e9:82:1d:5a:fa:33:ab:72:14:aa:7f:bb:11:88:
                    0f:28:fc:f0:68:08:6c:95:0b:b1:21:df:af:1c:dd:
                    ff:18:ed:63:4b:eb:41:ee:49:a3:0b:f0:28:eb:78:
                    f2:49:f7:4d:c9:fd:3c:2b:e0:3e:0b:e2:5f:99:4c:
                    0d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:87:2C:D8:A8:32:39:8A:94:4D:BE:8D:35:3D:A0:E7:9F:DA:99:7E
            X509v3 Authority Key Identifier:
                keyid:27:2B:FE:99:EA:C6:B9:DE:9C:71:5D:35:A3:CA:F2:63:99:DE:D7:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70f50d1045a246b518ba0542b6fec0e6cf9a097f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ed0804f-a4bc-4242-b44d-24ce06ce381d/91fd7dc309891403d41e2cba0595870cbd8dc30d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3ed0804f-a4bc-4242-b44d-24ce06ce381d/70f50d1045a246b518ba0542b6fec0e6cf9a097f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.184.0/22
                IPv6:
                  2806:41a::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:43:83:4f:d9:e9:2a:34:ca:be:2e:87:d7:ad:8c:6a:be:bb:
         e9:13:6d:91:3a:30:a6:f2:82:ac:c4:02:b5:43:80:d7:7d:f3:
         1b:f0:98:a8:76:ca:b5:d8:c8:52:9b:1c:57:2f:8c:a2:c2:e0:
         95:ca:4f:9e:b5:ff:79:f7:b1:cd:85:58:89:1b:1d:74:52:1b:
         f7:6e:1d:1f:0d:4c:59:af:57:30:e3:4f:23:d7:f9:b9:2c:5e:
         dc:1d:f1:3a:79:f8:46:6f:b3:2c:56:31:f2:18:bc:50:4c:d6:
         0e:55:56:77:47:69:4a:b9:f8:13:96:e3:42:fd:fb:a7:91:75:
         f7:29:76:0f:fa:ca:51:02:ba:9e:44:8f:8c:8e:ef:a5:3f:48:
         9e:6c:fd:9a:aa:5d:88:ce:69:3a:ce:9f:b6:56:51:2f:e5:ce:
         fb:f9:31:a2:e3:86:6f:34:da:2f:ad:78:9f:81:b4:ef:5c:6e:
         b6:42:94:6a:b7:80:94:60:57:22:28:22:69:51:d6:5b:48:2c:
         e6:85:25:d0:8c:7a:21:a1:c2:89:bd:ab:9a:e5:ce:ca:8b:4e:
         74:bd:b6:a7:7b:20:47:12:22:0e:9d:23:c7:e2:56:e5:f7:84:
         37:82:8b:5e:1c:8e:35:4c:a6:1d:3d:2c:33:fd:09:50:3c:4b:
         c9:05:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----