Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ed70d10-b43b-4304-833e-6fa4f6e6de5a/d60be1fe517a3845dc531e2739496ddd591b91fb.roa
File:                     d60be1fe517a3845dc531e2739496ddd591b91fb.roa (raw, json)
Hash identifier:          40BDUiP844FeX33wfGnjuCVtYX8z7sBkYoskTY/aTJ0=
Subject key identifier:   7C:1D:14:38:BB:23:AC:FE:EA:0E:4A:5F:8B:B4:DC:BA:E2:48:DA:A7
Certificate issuer:       /CN=5ef016df5620fa74d12a4af38050da311ea4b4ab
Certificate serial:       09E9
Authority key identifier: 71:1C:D1:B6:BC:D3:BA:58:AE:B5:4D:B3:AD:14:9C:86:BD:1F:19:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ef016df5620fa74d12a4af38050da311ea4b4ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ed70d10-b43b-4304-833e-6fa4f6e6de5a/d60be1fe517a3845dc531e2739496ddd591b91fb.roa
Signing time:             Wed 13 Sep 2023 13:19:42 +0000
ROA not before:           Tue 12 Sep 2023 13:19:42 +0000
ROA not after:            Sat 13 Sep 2025 13:19:42 +0000
asID:                     273076
IP address blocks:        168.196.96.0/22 maxlen: 24
                          2803:6f90::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2537 (0x9e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef016df5620fa74d12a4af38050da311ea4b4ab
        Validity
            Not Before: Sep 12 13:19:42 2023 GMT
            Not After : Sep 13 13:19:42 2025 GMT
        Subject: CN=d60be1fe517a3845dc531e2739496ddd591b91fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e2:7f:e5:ca:27:ca:38:5f:aa:09:c5:20:33:
                    bc:4e:56:34:1c:f7:3a:90:d6:83:d4:dd:4f:f0:10:
                    96:14:b2:b6:d6:a7:04:81:d3:5e:9c:66:b6:c7:1e:
                    e7:16:e8:ca:d7:3a:17:88:47:b1:5e:a3:c4:79:9d:
                    2b:95:dc:0e:01:b3:c8:83:a3:42:ef:9d:18:d0:17:
                    13:0a:db:dc:76:8a:2d:a4:8b:c6:57:b9:3d:1b:8e:
                    69:d9:15:46:f2:b3:93:23:0a:c8:ee:21:01:44:31:
                    fa:14:3a:c6:bf:7e:da:8c:1e:93:41:e3:8d:51:be:
                    d7:c4:59:f3:89:9c:fe:d4:d9:09:83:15:33:4d:a3:
                    16:f8:88:f9:82:fd:80:ff:5a:bc:96:4b:9b:1d:a3:
                    12:1d:fc:2d:c5:40:74:8b:03:3b:c8:b3:51:0a:0d:
                    ca:1d:28:b4:08:1d:99:32:23:08:b6:e7:ae:c3:0f:
                    34:2f:76:19:a5:96:90:52:be:36:5b:64:e6:85:d3:
                    ca:1d:31:d0:f2:66:ec:ac:56:58:8e:a3:2d:eb:6a:
                    3b:0a:2d:93:1e:5b:e4:b2:0c:af:50:33:9c:fc:ab:
                    93:12:6a:f0:4d:83:44:d7:eb:f9:04:cd:2d:f7:be:
                    b2:3f:b5:6f:d5:f7:9d:1c:2d:5d:d0:f1:73:3e:b8:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1D:14:38:BB:23:AC:FE:EA:0E:4A:5F:8B:B4:DC:BA:E2:48:DA:A7
            X509v3 Authority Key Identifier:
                keyid:71:1C:D1:B6:BC:D3:BA:58:AE:B5:4D:B3:AD:14:9C:86:BD:1F:19:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ef016df5620fa74d12a4af38050da311ea4b4ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ed70d10-b43b-4304-833e-6fa4f6e6de5a/d60be1fe517a3845dc531e2739496ddd591b91fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ed70d10-b43b-4304-833e-6fa4f6e6de5a/5ef016df5620fa74d12a4af38050da311ea4b4ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.96.0/22
                IPv6:
                  2803:6f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:df:c2:cc:94:dc:77:bb:fa:3b:cf:30:4e:47:c6:35:7a:27:
         7b:f6:f1:0f:23:f6:ee:85:47:7a:99:0b:03:2f:81:1f:a7:e4:
         9d:0e:f2:69:21:bf:74:c0:a8:42:9e:cc:d4:bc:b1:9f:31:68:
         ea:63:2f:6f:7a:27:80:50:d4:1e:00:90:7f:e6:78:4e:45:7f:
         80:5c:b9:bd:6b:92:a8:63:e3:cb:ed:56:52:65:50:99:2e:dd:
         4b:bf:a5:f7:62:5f:25:09:75:b2:55:2e:2b:80:72:6c:84:67:
         19:e5:0a:e4:f6:78:fc:37:9d:aa:f8:aa:5b:5c:bf:c3:e9:83:
         26:f1:f2:90:39:af:93:a8:8b:1f:75:98:6b:86:36:68:de:8a:
         6a:10:05:32:54:bc:5a:de:02:08:9b:3d:cb:51:9a:16:67:45:
         c2:80:55:0a:cb:40:49:82:af:e8:80:d4:c6:f1:b5:8b:9e:5e:
         3f:46:36:b5:f3:f9:7b:a0:ad:78:27:33:a1:ee:12:1d:cd:5d:
         13:17:28:f9:e8:58:c0:e5:9a:c2:3d:df:e6:c6:a1:5b:aa:c5:
         52:ed:12:7a:94:60:4b:55:f4:24:9b:88:4a:73:51:d2:6a:83:
         b6:06:22:bd:57:9a:8d:44:92:fe:34:24:1c:11:af:ce:90:a7:
         95:d7:13:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----