Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/ae2a01b961fea3d38b2db8448a19c66a244d14bc.roa
File:                     ae2a01b961fea3d38b2db8448a19c66a244d14bc.roa (raw, json)
Hash identifier:          7246YwPngfFTY5o92yL2r1/SPhBjXDwAKtmsZH6OOd8=
Subject key identifier:   1C:A5:7F:9C:15:2F:8F:DC:BA:02:9B:6B:3E:DC:95:B0:D6:87:32:E0
Certificate issuer:       /CN=b1eadf44e23f1448be60c0468eb9f4738d5692ba
Certificate serial:       1D5D60
Authority key identifier: E2:F3:81:5E:62:68:44:E2:76:86:2B:C2:EE:C5:28:ED:89:97:0F:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1eadf44e23f1448be60c0468eb9f4738d5692ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/ae2a01b961fea3d38b2db8448a19c66a244d14bc.roa
Signing time:             Sat 27 Jan 2024 04:07:48 +0000
ROA not before:           Sat 27 Jan 2024 04:07:48 +0000
ROA not after:            Tue 27 Jan 2026 04:07:48 +0000
asID:                     42
IP address blocks:        189.201.244.0/23 maxlen: 23
                          2801:c4:c0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924448 (0x1d5d60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1eadf44e23f1448be60c0468eb9f4738d5692ba
        Validity
            Not Before: Jan 27 04:07:48 2024 GMT
            Not After : Jan 27 04:07:48 2026 GMT
        Subject: CN=ae2a01b961fea3d38b2db8448a19c66a244d14bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:24:f7:3f:e1:a8:4e:69:28:52:1e:23:7f:
                    16:ac:72:d7:6d:ae:e0:88:97:03:6c:3a:b2:83:fa:
                    6e:64:61:d3:54:68:bd:00:34:3f:04:01:4e:51:25:
                    e1:23:f6:30:61:36:e8:9b:ca:10:02:8a:f0:d1:35:
                    bc:83:b8:7a:65:16:c3:1b:3f:72:eb:e0:6d:81:02:
                    40:76:83:7d:14:59:6e:a2:4d:ae:6e:18:f5:0f:9f:
                    bc:c1:58:8b:61:db:45:14:8b:e0:92:e2:9e:11:7c:
                    60:9a:7f:fb:6d:8e:af:c2:f7:04:4f:e3:ee:e1:a1:
                    ef:6e:3d:2f:bf:58:66:c1:4e:cb:1b:3c:d1:3c:9f:
                    eb:00:da:2f:5e:09:60:c4:14:e5:9f:3d:82:96:04:
                    08:97:1f:36:5e:f3:69:e8:ca:09:3a:e4:85:a5:99:
                    e8:f1:8a:5c:d9:f9:1b:92:fd:a1:d9:8b:9f:19:0c:
                    30:ce:1d:35:81:33:87:2d:48:ff:72:1f:91:39:a2:
                    36:6b:a8:dc:23:7b:f9:d4:9a:04:ac:13:79:71:69:
                    5c:e0:3b:af:18:fb:b0:bc:5d:22:1f:3a:c8:ca:c8:
                    ae:ad:03:9a:57:ae:35:a3:12:3b:88:a8:0c:dd:6e:
                    1a:aa:cd:53:7b:e0:91:de:1d:0a:b1:6e:13:12:9b:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A5:7F:9C:15:2F:8F:DC:BA:02:9B:6B:3E:DC:95:B0:D6:87:32:E0
            X509v3 Authority Key Identifier:
                keyid:E2:F3:81:5E:62:68:44:E2:76:86:2B:C2:EE:C5:28:ED:89:97:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1eadf44e23f1448be60c0468eb9f4738d5692ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/ae2a01b961fea3d38b2db8448a19c66a244d14bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/b1eadf44e23f1448be60c0468eb9f4738d5692ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.244.0/23
                IPv6:
                  2801:c4:c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:29:85:8a:2b:e8:f0:89:4d:5b:47:74:7b:96:15:cf:29:72:
         13:80:9b:25:19:db:bd:f3:41:bf:18:99:a1:82:54:f3:ac:7d:
         ad:c8:61:50:f4:f2:8f:3f:cc:07:ec:38:9f:f4:fe:d2:8e:6b:
         62:98:3a:2d:73:bd:48:05:8d:62:63:cf:b0:9b:1e:10:eb:ac:
         1d:17:74:ef:6d:da:90:4e:c5:d1:b8:c8:05:c5:55:75:c9:8c:
         7c:4d:b8:c0:ea:77:a7:8a:14:f9:55:03:d0:d2:38:7e:88:7f:
         d8:a0:4a:e9:47:d1:9f:b5:0c:48:83:63:a5:6a:d0:e5:5a:2b:
         76:a0:bf:60:c9:72:ac:e6:c2:3d:cb:07:a1:ef:83:6f:29:1d:
         95:04:b3:81:43:9b:76:6c:d9:d0:0b:74:66:df:cc:41:5c:e1:
         46:bb:91:ef:ba:79:8b:37:20:9d:0b:4b:3a:d2:5e:ed:27:1b:
         a5:f5:38:d3:6f:ee:0f:91:ed:1b:53:2d:04:23:7a:65:2a:59:
         ac:c3:7e:fc:1c:9c:81:a6:e9:7c:b0:bc:ea:62:66:7a:56:b0:
         54:ea:f4:6b:f9:c2:ab:96:41:b5:47:a6:2a:4e:81:b4:7a:1f:
         a1:48:da:30:0a:66:02:37:f1:03:0e:d8:5a:59:35:ce:e1:0f:
         12:58:94:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----