Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a90308d-60c3-4c5e-8e83-a1b940289fba/d725a3453d768d1f56a08a3fdc508e6d19c3044d.roa
File:                     d725a3453d768d1f56a08a3fdc508e6d19c3044d.roa (raw, json)
Hash identifier:          n5dRHPLLgWvS5QxM3l8uRGFUZyBosQKBkT92Q6ZXWAQ=
Subject key identifier:   9C:4D:52:BD:1C:78:7E:FA:C1:F4:CC:5A:78:48:04:E1:54:E8:41:BF
Certificate issuer:       /CN=d9e912e96bbf3562ad510bb79dcae95926afc83d
Certificate serial:       27EFF0
Authority key identifier: 99:13:4D:E8:7E:A8:F2:1E:EA:9D:7D:E1:50:8C:83:C8:9B:07:33:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9e912e96bbf3562ad510bb79dcae95926afc83d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a90308d-60c3-4c5e-8e83-a1b940289fba/d725a3453d768d1f56a08a3fdc508e6d19c3044d.roa
Signing time:             Mon 18 Mar 2024 14:18:44 +0000
ROA not before:           Mon 18 Mar 2024 14:18:44 +0000
ROA not after:            Wed 18 Mar 2026 14:18:44 +0000
asID:                     14754
IP address blocks:        186.151.96.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2617328 (0x27eff0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e912e96bbf3562ad510bb79dcae95926afc83d
        Validity
            Not Before: Mar 18 14:18:44 2024 GMT
            Not After : Mar 18 14:18:44 2026 GMT
        Subject: CN=d725a3453d768d1f56a08a3fdc508e6d19c3044d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:25:f2:ab:97:46:4b:74:a1:a3:94:92:1e:
                    4a:ad:15:d5:e1:8a:01:63:3a:79:02:8a:3d:83:7f:
                    10:d7:0c:dc:c8:4c:f2:ff:75:25:df:00:88:d8:08:
                    38:1c:4c:c0:d7:f1:06:bc:fb:fa:7c:0d:3d:48:7a:
                    12:eb:d0:98:35:c3:d2:2c:61:b6:ba:fb:79:eb:97:
                    2d:e0:7d:df:0e:d5:98:08:b7:f4:4e:bc:35:1e:e0:
                    5f:c7:c6:73:d4:92:a6:c2:3a:e4:6a:89:04:f0:9c:
                    15:73:1d:eb:8c:8b:12:9c:3e:21:bc:b0:5b:59:d7:
                    45:cb:21:36:71:81:3b:ec:6e:13:fb:85:16:5f:0b:
                    84:68:05:af:39:75:a1:18:d8:12:e1:6a:52:d2:64:
                    21:6c:8b:01:aa:02:ad:42:63:67:8b:b2:f3:99:62:
                    72:84:0d:cb:b9:b7:d6:c7:7c:c5:b7:de:71:5f:24:
                    ef:1a:af:0b:d0:79:78:a6:0b:7f:9a:5d:f4:ba:35:
                    ae:8e:dc:26:d1:df:fb:ec:07:22:29:a8:f9:4c:37:
                    95:51:8b:b2:ad:ea:94:ac:81:c5:83:c3:d8:cf:04:
                    4d:9e:2a:83:01:77:2b:30:59:16:db:d2:a2:47:e3:
                    13:d2:b9:44:81:73:3d:7a:bc:6f:d0:05:36:38:57:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4D:52:BD:1C:78:7E:FA:C1:F4:CC:5A:78:48:04:E1:54:E8:41:BF
            X509v3 Authority Key Identifier:
                keyid:99:13:4D:E8:7E:A8:F2:1E:EA:9D:7D:E1:50:8C:83:C8:9B:07:33:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9e912e96bbf3562ad510bb79dcae95926afc83d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a90308d-60c3-4c5e-8e83-a1b940289fba/d725a3453d768d1f56a08a3fdc508e6d19c3044d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a90308d-60c3-4c5e-8e83-a1b940289fba/d9e912e96bbf3562ad510bb79dcae95926afc83d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:49:ea:f0:04:63:b2:f5:2e:a3:c5:6d:2b:e9:4a:48:9b:7f:
         f1:e8:c8:60:f1:b4:e5:da:70:71:0f:74:2c:b4:7d:3a:61:fd:
         fa:4b:3b:ac:1b:97:a7:50:4a:30:c9:56:a1:63:07:a6:77:44:
         06:d9:37:90:8a:9b:2f:37:2f:25:78:d8:c8:e1:6c:7e:2f:54:
         7a:11:41:09:72:e9:d0:cf:27:de:8e:f3:e0:38:e7:47:fe:5d:
         ee:f4:4b:2f:37:a1:89:b8:61:87:f5:47:5d:e6:d6:0d:aa:ab:
         6f:18:35:7b:10:73:b4:8f:96:7f:f5:d9:0a:9d:ca:f0:39:31:
         ce:03:d8:8e:f3:aa:60:90:71:25:33:18:5a:8c:c3:f6:43:4b:
         3f:cc:eb:c1:f8:5b:c6:85:1d:e8:04:b7:08:00:02:e2:8d:f1:
         99:b7:16:37:d4:1a:63:1b:9c:cf:73:36:f7:37:c2:22:d4:37:
         da:c7:47:9a:a2:77:9b:ac:17:6b:07:44:c9:87:2e:5e:1f:19:
         95:57:cd:33:24:90:44:7a:0b:21:a0:4a:92:ac:09:85:c2:14:
         05:fe:7f:e1:4e:cd:40:7c:66:2f:98:95:c8:03:f3:10:dd:a8:
         ea:ee:24:16:84:cc:34:02:af:4c:be:24:89:eb:5c:19:6b:36:
         45:61:5a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----