Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/96e03a73a08fca7c89a6d780fe30442f432f07ac.roa
File:                     96e03a73a08fca7c89a6d780fe30442f432f07ac.roa (raw, json)
Hash identifier:          ISYrXsmnhqaff9vCsEOKgOMPWGvw0nGk3EYKdvI8efs=
Subject key identifier:   80:6A:9F:2A:58:AE:0B:AD:04:53:E1:3D:CB:C5:97:7D:43:FC:91:11
Certificate issuer:       /CN=73d66d1924e1166622ad12a1caea078bb4879ad0
Certificate serial:       1FCAA5
Authority key identifier: B4:AD:F4:8F:86:F1:31:10:20:F8:90:1E:AA:4F:EB:F5:7C:75:8E:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/96e03a73a08fca7c89a6d780fe30442f432f07ac.roa
Signing time:             Sat 13 Apr 2024 21:57:04 +0000
ROA not before:           Sat 13 Apr 2024 21:57:04 +0000
ROA not after:            Mon 13 Apr 2026 21:57:04 +0000
asID:                     264771
IP address blocks:        168.196.156.0/22 maxlen: 24
                          2803:30c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083493 (0x1fcaa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d66d1924e1166622ad12a1caea078bb4879ad0
        Validity
            Not Before: Apr 13 21:57:04 2024 GMT
            Not After : Apr 13 21:57:04 2026 GMT
        Subject: CN=96e03a73a08fca7c89a6d780fe30442f432f07ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:b0:54:af:75:ac:55:25:e2:5a:37:a4:9e:
                    78:78:ae:6a:34:2a:30:80:34:6d:32:54:3f:35:96:
                    af:71:90:b1:4a:56:73:e9:92:ec:44:82:d5:13:33:
                    26:1f:61:23:60:92:6c:3b:d9:4f:9c:50:fe:6f:56:
                    da:3d:85:d9:f0:af:2d:12:55:a4:b5:d8:aa:a2:ea:
                    c2:9b:90:24:52:3f:0a:52:20:f3:db:ea:19:39:74:
                    19:fc:4c:7d:08:38:83:e6:56:38:a9:8a:a7:57:db:
                    8d:2f:fc:25:c3:af:2f:f4:17:e6:05:8e:f3:cd:51:
                    b4:db:ed:f8:f9:f0:52:eb:3b:2f:25:38:11:07:f7:
                    9f:f7:b0:72:fe:f4:61:a5:d5:35:c9:7b:60:e2:66:
                    aa:db:8f:22:da:08:2e:e7:c0:0b:31:2a:18:da:4d:
                    ab:de:86:69:82:6c:17:3f:05:11:79:18:a8:d6:2d:
                    7e:df:09:d6:ca:8b:f8:96:4c:8e:d2:4b:96:0b:d2:
                    5a:35:28:21:45:94:dd:3a:b4:cd:0b:b7:22:da:28:
                    71:e5:17:96:5c:b5:47:27:96:43:11:a9:36:39:be:
                    42:78:cd:61:8d:17:da:63:86:47:93:ad:09:95:73:
                    19:fa:53:81:c7:30:e0:be:0d:ac:3f:af:57:18:95:
                    ab:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6A:9F:2A:58:AE:0B:AD:04:53:E1:3D:CB:C5:97:7D:43:FC:91:11
            X509v3 Authority Key Identifier:
                keyid:B4:AD:F4:8F:86:F1:31:10:20:F8:90:1E:AA:4F:EB:F5:7C:75:8E:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d66d1924e1166622ad12a1caea078bb4879ad0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/96e03a73a08fca7c89a6d780fe30442f432f07ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5aed039f-b84b-4b3f-9506-7a638bcf34da/73d66d1924e1166622ad12a1caea078bb4879ad0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.156.0/22
                IPv6:
                  2803:30c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:73:88:34:2b:8c:2a:ee:5c:92:5d:2c:ed:1e:67:60:ef:bd:
         48:72:76:6a:bf:94:07:59:c8:05:76:a4:09:07:52:58:32:f7:
         c2:85:cc:a5:66:ad:83:e2:8b:f3:62:c2:58:62:56:eb:50:a7:
         b5:c2:48:cb:f9:6c:e1:b3:57:e8:69:fb:78:f4:1d:6e:62:a1:
         cc:5a:c1:85:73:ba:c1:98:2f:ae:44:3c:e5:ab:74:1b:10:14:
         67:5f:e1:0a:f4:5a:60:a7:69:14:54:a7:49:96:21:bd:87:29:
         d6:4e:41:86:af:7d:0d:56:5c:59:3d:f1:bf:02:a4:e0:c4:76:
         70:5f:9e:5c:b8:30:4a:a1:14:2f:ac:0f:1b:04:8f:a3:8d:4d:
         dc:60:83:be:75:75:3a:83:47:93:01:90:c7:98:d6:8d:f8:50:
         75:77:39:8d:41:49:fd:ce:ec:fd:f1:c2:84:dc:3d:19:a5:c5:
         0f:ed:ac:53:95:79:8a:21:51:01:d3:4c:4c:51:c5:11:f4:6a:
         3a:e2:e0:06:fb:51:fb:18:63:77:e1:cc:a2:dc:5b:50:94:ab:
         ec:17:0f:37:91:15:55:36:bf:00:05:83:b0:b0:a8:e4:a6:d9:
         a3:ab:24:0b:a6:eb:14:b1:a9:27:dc:56:8a:3f:2d:ea:24:a3:
         9d:54:25:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----