Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/4fe8dd35692c0e9a87e10274ced5554b6946e70b.roa
File:                     4fe8dd35692c0e9a87e10274ced5554b6946e70b.roa (raw, json)
Hash identifier:          kUnL0eDS3eZnkTd37lEJa+o9TNsn20rR9r3d5vJd6so=
Subject key identifier:   4F:E2:5D:29:06:B7:D5:08:6D:63:EE:DF:88:89:87:11:EC:3F:FA:60
Certificate issuer:       /CN=30415e525ae2a6911d8229a69de6df7b5716b468
Certificate serial:       28537E
Authority key identifier: AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/4fe8dd35692c0e9a87e10274ced5554b6946e70b.roa
Signing time:             Thu 22 Feb 2024 00:19:15 +0000
ROA not before:           Thu 22 Feb 2024 00:19:15 +0000
ROA not after:            Sun 22 Feb 2026 00:19:15 +0000
asID:                     265762
IP address blocks:        128.201.162.0/24 maxlen: 24
                          2803:fbc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2642814 (0x28537e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30415e525ae2a6911d8229a69de6df7b5716b468
        Validity
            Not Before: Feb 22 00:19:15 2024 GMT
            Not After : Feb 22 00:19:15 2026 GMT
        Subject: CN=4fe8dd35692c0e9a87e10274ced5554b6946e70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e7:3e:21:87:12:97:e7:17:a4:36:de:ce:a7:
                    19:54:40:f4:cf:c1:2c:de:d1:ba:b9:a7:14:46:93:
                    82:38:b1:f5:92:33:e7:4e:23:93:13:cc:04:b5:31:
                    c4:d0:49:86:f4:93:79:3f:c0:26:44:54:ba:b9:de:
                    66:c1:cf:af:18:88:4c:67:4a:29:8b:34:21:c5:7e:
                    3b:b6:c9:cf:21:e6:90:ef:3f:3b:3d:93:2f:9e:69:
                    50:60:ea:61:a1:2e:95:0a:92:15:3d:3f:5f:0d:ea:
                    86:f7:6a:61:d6:43:f4:0a:f6:37:5f:12:c7:d9:d2:
                    2c:f6:03:44:93:38:7d:1a:af:3b:e4:86:ad:02:c4:
                    b4:35:d7:76:f1:41:09:1a:3b:e1:ce:14:76:2a:ec:
                    91:38:c1:84:9c:6d:88:5f:27:0f:28:cd:8e:4c:91:
                    64:85:3f:23:a9:d9:53:dd:6b:ce:cc:2d:bb:e9:b4:
                    ad:0a:c3:63:db:5e:09:ce:60:ad:a7:34:75:ff:a9:
                    b0:b3:a7:bf:30:ab:ac:dc:41:02:8d:95:1a:da:d2:
                    7c:b6:0d:3b:5e:2f:ca:e3:c8:6f:36:09:ca:16:e1:
                    ce:d1:f8:f2:9c:17:5f:8a:0e:79:21:ec:55:92:c3:
                    eb:71:04:96:6d:67:92:1f:7c:16:a9:13:ef:e9:34:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E2:5D:29:06:B7:D5:08:6D:63:EE:DF:88:89:87:11:EC:3F:FA:60
            X509v3 Authority Key Identifier:
                keyid:AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/4fe8dd35692c0e9a87e10274ced5554b6946e70b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.162.0/24
                IPv6:
                  2803:fbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:b2:99:58:91:f3:35:50:8f:bc:83:86:36:a2:ec:87:18:cc:
         d8:27:4c:dd:35:90:2f:fc:68:25:80:e7:cf:97:5f:da:6f:b3:
         54:47:d5:bf:f5:8f:49:f9:93:40:03:c6:ed:72:7a:3e:1e:89:
         79:cb:17:87:e1:39:5b:a0:52:fa:0e:70:21:46:af:94:b2:9f:
         94:59:e9:20:dd:81:7e:d3:fd:27:7c:64:1f:1a:c6:79:27:f4:
         2b:c5:f9:4b:cb:af:f6:05:00:a3:b9:0a:a0:95:ba:7e:87:fb:
         aa:a5:8a:e1:c4:64:b7:fc:7b:12:60:07:52:4e:25:fb:cd:ef:
         e3:a7:f3:82:9c:fe:6f:65:d3:6f:91:f5:00:f0:db:59:3f:87:
         6a:7c:31:df:f4:c9:3f:ea:1a:88:f2:af:60:a9:15:2a:7a:e3:
         9e:57:cd:29:1c:03:80:34:81:9f:e1:cb:b2:f5:75:22:b6:79:
         3c:42:69:bc:a5:54:41:30:96:b7:62:c8:e7:2a:bc:11:b8:5a:
         d5:b9:80:61:68:9f:97:16:f5:e0:6d:cd:32:b3:cc:bf:ab:36:
         0e:ee:8c:01:89:39:7f:e0:3e:7f:74:2a:87:a3:f8:6f:bc:c2:
         35:ed:f5:75:68:49:d7:25:71:9e:17:5c:1b:43:98:de:b9:f3:
         4a:74:06:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----