Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/26da1ce2d38af17318446706e1afd1f60786b7db.roa
File:                     26da1ce2d38af17318446706e1afd1f60786b7db.roa (raw, json)
Hash identifier:          4ywOSzxhCyaAX7UhEzIBr/c1uL24x57dZ7pPDI7DwmE=
Subject key identifier:   FE:9C:CA:08:EA:93:4D:00:A0:84:28:34:79:94:67:5F:4B:2C:AD:8D
Certificate issuer:       /CN=d802d1f4519aab3e5793a16a3c9971a640951720
Certificate serial:       27BDDC
Authority key identifier: 07:D9:8A:D9:50:01:E8:23:10:71:BF:BD:6B:25:1E:14:9A:A4:DD:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d802d1f4519aab3e5793a16a3c9971a640951720.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/26da1ce2d38af17318446706e1afd1f60786b7db.roa
Signing time:             Thu 15 Feb 2024 23:35:59 +0000
ROA not before:           Thu 15 Feb 2024 23:35:59 +0000
ROA not after:            Sun 15 Feb 2026 23:35:59 +0000
asID:                     263693
IP address blocks:        179.60.232.0/22 maxlen: 24
                          138.121.160.0/22 maxlen: 24
                          2803:3880::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2604508 (0x27bddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d802d1f4519aab3e5793a16a3c9971a640951720
        Validity
            Not Before: Feb 15 23:35:59 2024 GMT
            Not After : Feb 15 23:35:59 2026 GMT
        Subject: CN=26da1ce2d38af17318446706e1afd1f60786b7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2f:1c:f5:d9:58:8f:48:14:d9:14:12:ce:05:
                    ee:a8:95:5e:db:c6:1b:80:33:40:eb:30:14:91:08:
                    70:24:b6:5c:7f:bc:53:9a:20:98:21:31:55:cf:b8:
                    48:aa:95:5c:47:52:78:d0:56:84:7c:d1:6a:40:84:
                    e2:07:b1:d1:29:0d:8f:f8:a0:c6:4d:78:e4:4c:ff:
                    58:2f:c3:fc:90:6d:c2:ed:f5:a6:23:94:b7:72:ac:
                    4b:d2:2d:73:23:75:20:d9:d7:2b:89:40:94:7e:f8:
                    76:dd:c0:b8:d0:bb:6a:c5:1e:19:26:ab:fa:b9:f5:
                    32:eb:8e:03:0a:22:1f:08:b9:77:ca:6f:ef:8e:dd:
                    c1:1f:a9:3d:06:a1:ed:4e:bf:d1:f4:c1:52:bb:0e:
                    52:3e:bd:7c:03:0b:52:12:2a:e6:5e:6b:ca:c6:65:
                    5b:50:6d:75:b5:63:89:6b:e9:f6:6e:52:13:7f:07:
                    2c:f1:d7:12:63:54:29:cd:36:8f:5e:ce:f4:74:70:
                    91:7d:88:3f:58:64:52:87:db:73:f1:e9:1a:ce:fe:
                    df:31:06:8f:31:cc:68:de:f5:10:46:7a:7b:2d:51:
                    82:1d:61:ff:c6:ec:35:9e:58:25:a9:98:f8:fc:78:
                    a5:83:f3:3d:8d:8a:7a:12:60:51:dd:9f:39:b3:23:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9C:CA:08:EA:93:4D:00:A0:84:28:34:79:94:67:5F:4B:2C:AD:8D
            X509v3 Authority Key Identifier:
                keyid:07:D9:8A:D9:50:01:E8:23:10:71:BF:BD:6B:25:1E:14:9A:A4:DD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d802d1f4519aab3e5793a16a3c9971a640951720.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/26da1ce2d38af17318446706e1afd1f60786b7db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/d802d1f4519aab3e5793a16a3c9971a640951720.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.160.0/22
                  179.60.232.0/22
                IPv6:
                  2803:3880::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:fe:80:5e:b8:53:1f:cc:af:f1:db:2e:14:35:af:bc:f5:75:
         38:cb:03:18:cc:a5:6e:76:91:de:cc:28:05:ff:e9:92:1d:0e:
         10:c4:b8:7d:03:1b:78:d3:76:55:d9:21:37:83:f0:51:ff:fa:
         3a:71:57:70:bd:dd:0e:85:e7:5e:b7:d0:21:3e:f8:27:20:a3:
         33:1f:af:d4:fa:a3:0a:fa:e3:86:39:33:96:28:b0:ec:b9:5d:
         8e:29:01:7c:ba:90:22:de:17:5f:04:e5:41:c1:90:99:4a:8a:
         0e:97:b8:ed:12:5c:7d:07:e5:9d:ad:15:9e:da:a8:0d:2e:a0:
         8b:9a:8a:64:1d:71:6a:47:b8:c3:3a:9e:a5:56:06:03:24:be:
         c7:fb:8f:fe:81:b7:c4:ba:1e:b1:46:2d:7a:d6:4d:90:28:a6:
         33:11:83:d3:92:5c:81:05:8b:73:bd:a1:e9:7e:67:44:38:25:
         24:1d:8a:04:bb:ef:fd:2c:d7:d8:84:2e:0c:9f:16:35:3d:77:
         24:c1:92:02:88:bb:be:0f:d6:41:37:cd:0c:af:57:1d:e9:44:
         68:5e:62:23:03:28:b4:0f:fb:15:e3:19:d1:e8:a6:88:3e:4f:
         1f:c0:3b:55:4e:71:83:f2:57:bb:bf:2b:c3:16:b7:5c:dd:48:
         21:c8:0b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----