Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52c2380c-7225-47b1-b1e8-a13eba0cf564/cd261d1b73647bd28a3f9ca7e5fab3be7e9892f1.roa
File:                     cd261d1b73647bd28a3f9ca7e5fab3be7e9892f1.roa (raw, json)
Hash identifier:          NI6fJzf/kEhp1x8cgzzlK1PEaP43kBsLVaqR2g52n+g=
Subject key identifier:   FE:81:E9:7F:87:4B:DE:48:A1:D2:40:06:6B:41:0A:4A:40:81:86:10
Certificate issuer:       /CN=a79946d997e117592215d151fd82ce4fb377c788
Certificate serial:       27B91E
Authority key identifier: 04:48:25:4A:F5:36:7C:85:93:F0:75:C5:31:80:F0:27:B9:8F:9A:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79946d997e117592215d151fd82ce4fb377c788.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52c2380c-7225-47b1-b1e8-a13eba0cf564/cd261d1b73647bd28a3f9ca7e5fab3be7e9892f1.roa
Signing time:             Wed 06 Mar 2024 18:36:12 +0000
ROA not before:           Wed 06 Mar 2024 18:36:12 +0000
ROA not after:            Fri 06 Mar 2026 18:36:12 +0000
asID:                     52327
IP address blocks:        201.182.80.0/22 maxlen: 24
                          2803:4420::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2603294 (0x27b91e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79946d997e117592215d151fd82ce4fb377c788
        Validity
            Not Before: Mar  6 18:36:12 2024 GMT
            Not After : Mar  6 18:36:12 2026 GMT
        Subject: CN=cd261d1b73647bd28a3f9ca7e5fab3be7e9892f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:2d:af:fb:f1:e0:25:61:cc:fb:a2:60:30:
                    7d:87:f8:4a:25:85:ea:8b:39:e3:8f:4f:33:d8:28:
                    44:9b:83:4c:78:39:54:39:c8:9a:40:49:6e:cf:c1:
                    48:68:f2:a5:26:90:be:50:7c:f2:42:a7:f2:ff:1e:
                    20:a2:32:b5:40:21:b5:b4:6e:d9:3b:44:cb:45:5a:
                    87:ee:d5:52:d0:c9:33:c1:4f:7e:97:2e:63:ff:d6:
                    30:d8:cd:d0:b1:c9:83:33:04:13:09:c2:82:c7:98:
                    9a:a3:ae:ba:b1:81:c0:1a:a4:4b:fb:50:68:4b:e1:
                    ff:60:ce:0e:13:2d:95:39:90:c6:8c:52:42:b6:c9:
                    5f:c4:a8:5f:91:1e:29:e9:be:4d:fa:67:81:ce:2d:
                    b3:47:e8:86:d2:e1:64:d7:38:9f:0d:9b:b8:2f:41:
                    06:d3:01:ce:34:6e:75:1c:b6:1a:13:73:2e:13:37:
                    c4:84:6e:e5:a9:bc:6f:82:93:9f:f7:c2:a0:0e:d9:
                    54:bb:29:47:6a:2b:82:2d:04:82:4a:e2:df:39:8f:
                    ba:85:87:0a:a5:20:14:9c:50:d1:d5:8d:8d:12:2c:
                    d3:b3:c0:ec:bb:5e:80:27:9a:22:98:84:f8:17:72:
                    c5:ba:c4:35:14:8a:1c:73:2f:6d:57:86:ae:c4:e6:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:81:E9:7F:87:4B:DE:48:A1:D2:40:06:6B:41:0A:4A:40:81:86:10
            X509v3 Authority Key Identifier:
                keyid:04:48:25:4A:F5:36:7C:85:93:F0:75:C5:31:80:F0:27:B9:8F:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79946d997e117592215d151fd82ce4fb377c788.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52c2380c-7225-47b1-b1e8-a13eba0cf564/cd261d1b73647bd28a3f9ca7e5fab3be7e9892f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52c2380c-7225-47b1-b1e8-a13eba0cf564/a79946d997e117592215d151fd82ce4fb377c788.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.80.0/22
                IPv6:
                  2803:4420::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:05:c9:57:fa:80:d7:ba:0a:12:9e:01:17:88:c7:ca:7f:d2:
         1d:16:bc:24:1a:d3:e6:7f:f5:fd:e0:e5:5f:89:a0:14:2d:9f:
         65:ed:87:64:1c:cc:0f:f2:ce:2f:0b:72:09:9f:6f:3d:9e:9e:
         88:de:27:1b:91:dc:95:86:df:81:14:9f:d3:4a:91:17:ad:d1:
         e0:ed:82:68:73:c4:9a:35:ad:a1:ae:4e:ec:8c:99:06:f6:af:
         68:61:ee:3f:59:c4:86:a5:ff:fc:b1:1b:00:f6:66:27:49:4f:
         02:ab:51:50:c3:c5:ae:7c:cb:dc:a3:a0:bb:c7:b9:c2:99:69:
         2e:36:6f:33:f0:6e:92:e6:ee:31:7a:5e:92:06:ed:c6:bc:10:
         7a:29:0e:dc:46:6e:08:e3:91:dc:2d:79:b8:af:12:28:f7:3b:
         c8:10:fd:94:de:fd:79:d9:da:a1:d5:ed:fe:bc:9e:08:92:3a:
         c0:ac:74:a4:bd:62:fb:20:f5:4f:3c:c1:0f:0d:93:ab:50:51:
         be:96:26:a2:75:40:7f:de:dc:f7:20:59:50:70:6f:1d:6c:cd:
         30:27:9a:8c:fe:f1:61:19:9b:53:e6:e8:2c:63:11:ce:48:0a:
         a9:0a:43:38:2f:54:6b:07:2f:34:e1:6b:ec:d4:29:de:3b:70:
         8f:f2:9e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----