Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a9f9b0e-e1a1-44ba-a052-69417edbb2bb/017887bff640a82f297e51672336c05adde78296.roa
File:                     017887bff640a82f297e51672336c05adde78296.roa (raw, json)
Hash identifier:          5Tq51yvCuAJBaWOK7N7/q9FQYiHN3r9BjwGC7w2jDX8=
Subject key identifier:   29:58:C4:06:73:74:F1:B8:02:78:41:BA:5B:D6:6B:F8:B9:18:D7:8F
Certificate issuer:       /CN=c14b2462ab22dc8e57ca4d1a2a86de6762dbdb11
Certificate serial:       291536
Authority key identifier: 5F:E9:8E:F4:F3:28:B8:D0:2F:3A:D1:D1:73:A9:27:4E:0D:25:FB:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c14b2462ab22dc8e57ca4d1a2a86de6762dbdb11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a9f9b0e-e1a1-44ba-a052-69417edbb2bb/017887bff640a82f297e51672336c05adde78296.roa
Signing time:             Mon 25 Mar 2024 23:50:03 +0000
ROA not before:           Mon 25 Mar 2024 23:50:03 +0000
ROA not after:            Wed 25 Mar 2026 23:50:03 +0000
asID:                     264821
IP address blocks:        168.196.124.0/22 maxlen: 24
                          138.97.248.0/22 maxlen: 24
                          2803:9040::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2692406 (0x291536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14b2462ab22dc8e57ca4d1a2a86de6762dbdb11
        Validity
            Not Before: Mar 25 23:50:03 2024 GMT
            Not After : Mar 25 23:50:03 2026 GMT
        Subject: CN=017887bff640a82f297e51672336c05adde78296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:54:c2:ca:82:e8:f4:d8:bb:d7:7e:8c:71:6c:
                    6d:eb:aa:8d:b8:2d:fd:e4:e6:d4:b5:3a:56:89:7b:
                    56:09:a4:81:47:67:70:a1:9d:8c:21:3b:33:ec:ad:
                    58:46:7a:38:75:7f:04:4e:b0:44:ed:92:c3:99:a6:
                    7d:cf:cf:92:88:13:65:8e:0a:75:d2:6d:a1:14:56:
                    d8:e4:69:75:2f:33:70:c6:e8:31:b2:03:9f:23:1e:
                    7d:9d:82:7f:2a:d8:57:ba:45:f3:61:80:10:33:5d:
                    45:f9:e1:bd:c9:56:d6:04:fb:9b:1d:43:d3:2a:7a:
                    cd:f5:df:ed:d3:ba:61:5a:f4:f2:a5:c4:29:97:70:
                    f4:ee:d3:56:f2:73:57:98:71:9a:25:f4:70:e8:52:
                    cf:0b:cf:c3:4a:21:3c:43:48:8d:73:a7:4c:e2:59:
                    7b:91:f9:f6:25:3d:26:a2:24:a4:d6:5a:ac:6c:0a:
                    b8:19:ca:f9:60:36:44:13:00:56:aa:46:b1:e8:df:
                    28:10:15:6b:d4:b3:66:df:7a:45:90:61:f1:17:a5:
                    a5:02:9b:9b:e0:8f:f5:a4:21:74:41:f2:4d:80:77:
                    8a:46:7a:02:3f:e2:a6:55:16:1d:04:c2:77:de:e2:
                    77:90:c0:dc:ed:ab:12:30:06:b9:c8:d7:bf:40:64:
                    77:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:58:C4:06:73:74:F1:B8:02:78:41:BA:5B:D6:6B:F8:B9:18:D7:8F
            X509v3 Authority Key Identifier:
                keyid:5F:E9:8E:F4:F3:28:B8:D0:2F:3A:D1:D1:73:A9:27:4E:0D:25:FB:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c14b2462ab22dc8e57ca4d1a2a86de6762dbdb11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a9f9b0e-e1a1-44ba-a052-69417edbb2bb/017887bff640a82f297e51672336c05adde78296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a9f9b0e-e1a1-44ba-a052-69417edbb2bb/c14b2462ab22dc8e57ca4d1a2a86de6762dbdb11.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.248.0/22
                  168.196.124.0/22
                IPv6:
                  2803:9040::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:76:9c:93:32:c2:8f:e6:d6:f6:34:66:b9:96:92:37:5c:6f:
         78:5d:4d:bb:71:59:82:f4:fa:38:3f:f4:b0:0a:51:e8:dd:5f:
         4d:af:40:74:d7:da:5c:01:40:94:64:4c:f7:cf:16:bb:92:78:
         c7:20:f2:39:23:05:20:81:6d:5e:f0:84:6b:d7:77:50:5d:6d:
         87:e6:bc:c7:28:52:01:38:9c:95:9b:27:25:30:56:cd:80:22:
         11:d8:5a:b6:c1:c1:c6:ca:8d:92:82:29:58:ab:af:11:99:62:
         ea:8a:76:33:07:6b:00:b5:b9:7d:70:7b:13:55:3c:07:b1:a1:
         33:c3:0b:a3:66:01:3a:21:ed:4c:88:1e:53:25:3b:cb:a2:f2:
         89:0c:3a:9c:ae:42:93:4f:a3:5e:88:d8:1f:5c:3c:4a:5b:2c:
         ea:06:63:83:0e:75:3a:a9:d3:d5:86:8b:44:62:c5:6e:81:39:
         13:95:ea:7b:23:9b:f3:5e:8c:31:fb:d7:cb:1c:a7:18:69:3a:
         1f:22:53:36:96:cb:35:77:55:fe:96:b8:24:2e:5d:da:b7:d6:
         3a:c5:c5:4e:54:f0:9f:c0:79:c1:68:58:c7:2e:28:5a:8e:05:
         e9:73:00:6d:02:71:e0:8b:3f:cd:fa:c5:59:9d:75:71:06:21:
         4a:63:a5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----