Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/2bf5b1449823a4e528f7b94324fe90bbfb860be8.roa
File:                     2bf5b1449823a4e528f7b94324fe90bbfb860be8.roa (raw, json)
Hash identifier:          3y723zlrOSqHJIA1UYy/ItcG8txJ5C+wSnDcT06QkWM=
Subject key identifier:   85:BA:62:8B:F5:AF:A0:A2:52:85:35:F2:0E:6C:D2:D3:D1:DF:63:8D
Certificate issuer:       /CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Certificate serial:       15A151
Authority key identifier: B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/2bf5b1449823a4e528f7b94324fe90bbfb860be8.roa
Signing time:             Tue 12 Sep 2023 15:13:57 +0000
ROA not before:           Mon 11 Sep 2023 15:13:57 +0000
ROA not after:            Fri 12 Sep 2025 15:13:57 +0000
asID:                     265772
IP address blocks:        131.196.80.0/24 maxlen: 24
                          131.196.80.0/23 maxlen: 23
                          2803:37c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417553 (0x15a151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
        Validity
            Not Before: Sep 11 15:13:57 2023 GMT
            Not After : Sep 12 15:13:57 2025 GMT
        Subject: CN=2bf5b1449823a4e528f7b94324fe90bbfb860be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a3:91:95:33:a7:13:ef:44:3f:36:f3:09:21:
                    d7:0b:4f:f0:d7:bb:d0:92:56:b5:70:cc:63:29:dd:
                    d1:83:14:59:20:34:a9:14:ff:ee:70:0b:ca:a0:83:
                    ee:57:ee:2f:81:0d:67:4f:cc:75:a5:67:ef:5a:58:
                    cd:ad:9d:f9:2c:98:12:d0:a0:ad:ca:e6:69:d2:2e:
                    d8:9b:32:37:20:63:41:e5:9b:13:c2:44:63:a5:34:
                    df:f0:cf:a0:cf:ce:e9:4a:b1:c0:eb:6b:d8:bd:b6:
                    b5:54:fb:e7:6b:f3:bf:ec:e6:1f:21:a8:7c:e2:e9:
                    89:4d:1f:f0:02:15:78:7a:85:72:e7:9d:a2:97:ee:
                    55:29:c8:84:0f:32:17:42:f2:85:0c:0b:78:b7:c8:
                    fd:2d:a5:6e:a9:49:57:c4:a8:76:67:3e:65:42:f1:
                    63:76:dc:f5:c3:6e:5e:8a:2f:dd:a3:73:fc:12:a6:
                    7d:23:39:d4:0f:07:aa:9e:3c:e4:0d:5c:30:a2:30:
                    00:32:16:82:6d:0f:d1:11:7f:98:e4:e7:f3:10:24:
                    e7:43:93:83:bd:dd:cb:aa:56:93:fd:75:8d:55:55:
                    a0:fc:33:52:92:c5:98:7a:4a:c2:30:26:e1:3e:21:
                    6a:3a:8d:6c:f5:58:88:b6:e0:24:43:4b:90:66:12:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BA:62:8B:F5:AF:A0:A2:52:85:35:F2:0E:6C:D2:D3:D1:DF:63:8D
            X509v3 Authority Key Identifier:
                keyid:B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/2bf5b1449823a4e528f7b94324fe90bbfb860be8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.80.0/23
                IPv6:
                  2803:37c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:e6:a4:f8:e6:b9:27:18:ba:11:8a:97:9b:54:96:91:53:bb:
         f2:4c:d0:a2:ff:82:14:35:0f:b1:e9:75:93:aa:71:de:a6:5d:
         b4:4d:26:70:7f:b5:ad:64:5c:ad:fe:a1:79:a0:3c:28:23:83:
         e9:23:84:1f:1c:8f:f3:34:07:d4:c7:c9:83:7a:5e:bb:a7:71:
         02:7e:1f:95:b7:ec:a0:eb:29:54:23:2e:84:39:41:80:8c:4f:
         14:7e:d5:ce:95:34:b8:09:0a:40:70:c9:55:84:35:e9:a9:a4:
         31:bd:51:0e:df:ff:91:2e:6f:76:5b:fd:2b:d7:2f:de:49:a6:
         06:61:4e:46:df:a9:01:dd:c2:a2:f2:54:e7:8f:52:56:b2:e6:
         15:c4:35:bf:8b:a6:1e:67:f9:b2:08:9a:19:a9:c0:17:05:ff:
         2c:c9:e1:94:6e:04:5c:be:f0:a6:3d:7f:d9:61:25:ed:c6:cf:
         f6:d0:3b:cf:59:42:e4:90:67:39:ab:ea:df:88:d1:6f:24:dc:
         fe:a4:0d:46:05:33:1d:1d:cf:0d:75:e7:90:c8:a8:7f:d4:b1:
         61:60:80:ab:ba:b3:68:e7:f4:ca:62:a4:0f:62:05:52:f3:2f:
         62:29:9e:e6:20:c1:c5:a2:4e:80:19:05:00:0b:77:d6:85:ab:
         91:10:82:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----