Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/9d1066b90e087786fb044a866cd6652e4d301fa0.roa
File:                     9d1066b90e087786fb044a866cd6652e4d301fa0.roa (raw, json)
Hash identifier:          gC8Hi8YlA4nrFvMTcW1WJsYAB6lSXoMhlq55UoE/XT8=
Subject key identifier:   DF:A9:BB:57:51:DE:64:E8:96:C7:7D:3C:07:E9:A0:2B:BB:92:13:B7
Certificate issuer:       /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial:       277514
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/9d1066b90e087786fb044a866cd6652e4d301fa0.roa
Signing time:             Tue 13 Feb 2024 16:31:59 +0000
ROA not before:           Tue 13 Feb 2024 16:31:59 +0000
ROA not after:            Fri 13 Feb 2026 16:31:59 +0000
asID:                     6471
IP address blocks:        186.67.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2585876 (0x277514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
        Validity
            Not Before: Feb 13 16:31:59 2024 GMT
            Not After : Feb 13 16:31:59 2026 GMT
        Subject: CN=9d1066b90e087786fb044a866cd6652e4d301fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:f8:0a:63:b1:7b:12:b3:a3:b7:1c:83:e3:
                    35:0d:d5:d4:14:ca:39:79:50:f7:33:d0:86:ad:cd:
                    03:f7:79:8e:b8:3f:d3:16:6e:b9:99:66:8e:de:7a:
                    df:f6:db:99:9d:8a:24:64:38:18:e5:01:51:22:7f:
                    11:d2:ca:60:34:3c:3c:10:61:8f:74:c8:0d:45:c0:
                    42:15:6a:12:65:b1:2a:a4:81:3f:c8:5a:c1:80:e6:
                    65:7d:5c:f3:29:b6:c1:1a:43:b2:bf:e2:42:af:9c:
                    01:ae:c2:fc:22:ff:ce:0d:82:49:96:08:5d:cc:25:
                    6f:6b:32:94:4c:02:1f:4c:20:a8:8b:ec:1d:43:b7:
                    9b:f2:79:62:0d:9f:fb:e9:db:66:0e:87:be:5d:1b:
                    97:12:8a:d6:79:76:8b:63:00:9e:2c:c2:91:cd:d7:
                    f7:14:b4:70:43:7b:eb:25:ce:e2:f9:d8:b4:08:a3:
                    77:b7:ef:ef:5c:81:c9:ff:d9:b9:52:28:2c:53:e4:
                    6e:f7:c0:f0:0b:fd:52:46:97:56:e8:80:94:06:45:
                    14:67:6e:cd:62:6c:a6:19:93:53:9b:4b:d5:46:14:
                    98:37:07:21:31:5a:95:58:fd:0c:d5:18:76:35:7e:
                    1c:b9:1e:47:8c:fe:94:ea:b1:e1:05:d7:8c:6a:74:
                    b6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A9:BB:57:51:DE:64:E8:96:C7:7D:3C:07:E9:A0:2B:BB:92:13:B7
            X509v3 Authority Key Identifier:
                keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/9d1066b90e087786fb044a866cd6652e4d301fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.67.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:d4:28:d9:c4:c0:69:4c:6b:94:e8:3e:06:5f:bc:f0:0f:d0:
         53:26:04:70:c6:b6:3b:58:ee:93:3e:c8:2e:39:9e:21:9f:d4:
         b6:5a:48:e8:ea:f4:65:b3:72:9f:46:62:39:9c:c9:d0:7c:4a:
         7a:80:c0:93:18:50:a9:8c:29:1e:44:20:bf:53:87:d5:97:dc:
         a3:97:4b:fe:84:07:00:c8:1e:df:f6:20:88:f4:4a:7d:af:8a:
         5d:58:ca:b2:eb:9b:4a:d5:b7:89:cd:e6:02:dd:8b:29:77:33:
         f6:e8:ed:a0:2a:b5:0f:c4:55:09:67:4e:c2:6c:ba:79:be:41:
         93:58:6c:a9:0f:88:06:ad:2e:c6:c1:e2:94:2f:d2:c3:2c:7c:
         97:e2:c2:67:3f:aa:f0:ce:27:e1:cc:4f:e3:b9:ca:64:88:a2:
         f1:17:b0:f1:10:1d:98:db:33:e8:f0:56:cf:99:b0:50:da:bc:
         d8:6b:1c:7c:cd:1e:16:7b:8c:64:3e:ed:a2:98:b0:29:ca:ae:
         59:bd:9f:65:ee:72:c5:0e:53:58:34:94:1d:98:d2:68:82:59:
         1b:12:5c:cf:3c:3f:8a:eb:94:75:bc:ec:5c:f0:d1:74:c3:10:
         de:f1:c7:fd:b1:9a:96:ac:4e:a2:8e:1f:2e:00:ba:f5:c2:ee:
         f3:98:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----