Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/e11ef755ca975ed9622eca3a026a0772915163fc.roa
File:                     e11ef755ca975ed9622eca3a026a0772915163fc.roa (raw, json)
Hash identifier:          FoNrGWEjIKoydEDVe2FD34lka0eB3CJoOOZY8J4gukA=
Subject key identifier:   28:88:40:86:10:DE:14:51:EA:DD:16:81:1E:2E:82:EC:E5:C3:73:8E
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24CB72
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/e11ef755ca975ed9622eca3a026a0772915163fc.roa
Signing time:             Mon 30 Oct 2023 12:07:04 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     64106
IP address blocks:        201.182.132.0/23 maxlen: 24
                          2801:168:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2411378 (0x24cb72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=e11ef755ca975ed9622eca3a026a0772915163fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e8:28:81:15:00:4e:1d:ec:bc:21:75:21:76:
                    c3:7a:f2:c7:b1:34:88:4d:1d:96:3a:85:55:97:9d:
                    ac:61:a6:5b:38:5b:41:56:b1:ac:06:59:58:ee:f6:
                    4f:ae:3d:d6:b7:ed:7e:ee:22:c6:90:be:a9:99:7f:
                    31:bf:21:ff:98:19:d3:17:c5:8a:f4:f3:4c:25:f7:
                    66:cc:df:01:4c:b0:7f:af:e8:19:f9:e1:c7:4b:b4:
                    51:d3:97:03:3e:b0:a3:a2:bc:98:4c:c7:5a:51:88:
                    c0:6a:dc:1a:9b:89:b7:39:5f:b5:a6:af:ec:8b:6f:
                    79:e6:9f:2a:2d:24:da:96:71:63:e9:32:16:c6:52:
                    14:5d:26:7d:4d:71:72:79:2e:85:2b:db:33:37:ac:
                    67:64:31:61:4b:ae:96:d4:e6:ba:8e:51:a6:97:e0:
                    e2:9c:dc:71:b4:fd:1a:c3:4f:26:ed:71:64:9e:d4:
                    38:46:87:aa:62:0f:ab:45:af:92:44:21:b2:a1:d6:
                    c5:71:7b:23:4e:8a:1c:27:f4:53:81:c2:a7:6a:05:
                    b6:79:4a:c8:29:3a:22:4f:75:0e:92:2f:ae:e6:31:
                    8f:da:b7:77:1f:d4:f1:3c:f8:90:20:e7:b1:92:e3:
                    56:7e:e6:c6:52:de:3c:92:ca:aa:df:76:39:45:88:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:88:40:86:10:DE:14:51:EA:DD:16:81:1E:2E:82:EC:E5:C3:73:8E
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/e11ef755ca975ed9622eca3a026a0772915163fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.132.0/23
                IPv6:
                  2801:168:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:e2:2a:38:c0:2b:8f:0c:7d:0b:3e:d4:b5:b4:2b:18:b9:2b:
         85:01:2f:51:55:ae:07:32:9b:0c:e3:3a:5c:73:49:79:52:0f:
         0d:82:d7:78:32:8a:f8:e8:c3:00:5a:4e:bb:d9:15:b4:02:6c:
         56:e0:61:53:2f:bb:d2:3e:ac:c1:27:76:26:d1:18:b6:96:7b:
         1f:e7:08:c7:77:77:2f:bc:61:ef:c1:26:11:59:91:90:28:2b:
         8a:95:2b:f8:c4:57:65:7c:7e:5f:d0:24:17:6c:a4:5e:76:c8:
         a8:f9:c5:82:f1:92:b7:e7:15:17:71:57:ed:8a:84:43:64:3b:
         67:24:a1:29:1c:78:e7:14:b1:69:d3:68:78:55:b4:ae:43:49:
         53:d9:4e:01:eb:7e:b9:32:73:69:5d:bb:bd:b5:5f:5c:c6:61:
         b7:86:ba:78:0c:74:41:69:15:13:2b:86:de:ac:2e:18:06:e5:
         ce:a7:75:6f:58:96:b0:bb:c7:94:48:a3:69:29:3f:6c:bc:f5:
         93:e0:2c:c0:e4:2f:11:08:5d:4c:67:ed:74:1d:b9:cb:7d:a8:
         d8:f1:30:81:df:a0:ab:33:e9:62:7c:61:30:5a:f7:fa:89:9f:
         5f:6f:c7:6d:28:82:31:04:2e:e4:2b:d3:90:44:c2:90:20:ca:
         b8:d7:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----