Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/932910b8ab57f514ec0e72fda7676271d29c7181.roa
File:                     932910b8ab57f514ec0e72fda7676271d29c7181.roa (raw, json)
Hash identifier:          eNQsV6ZZddTA8uo3FjhgWlHR+hBXfvTtVoJWmYQOKdY=
Subject key identifier:   BB:05:7E:01:07:E7:7A:6E:CD:46:DD:C3:F5:DE:A4:BF:72:DE:2C:76
Certificate issuer:       /CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Certificate serial:       15F830
Authority key identifier: B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/932910b8ab57f514ec0e72fda7676271d29c7181.roa
Signing time:             Fri 22 Sep 2023 23:12:01 +0000
ROA not before:           Thu 21 Sep 2023 23:12:01 +0000
ROA not after:            Mon 22 Sep 2025 23:12:01 +0000
asID:                     265772
IP address blocks:        131.196.80.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1439792 (0x15f830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
        Validity
            Not Before: Sep 21 23:12:01 2023 GMT
            Not After : Sep 22 23:12:01 2025 GMT
        Subject: CN=932910b8ab57f514ec0e72fda7676271d29c7181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:61:3b:c0:dd:84:09:66:e8:3c:f6:fc:b5:
                    10:c9:c1:c1:8e:79:84:1c:49:b0:83:fa:86:87:08:
                    0c:1e:6a:f5:6e:82:db:6a:e3:30:2a:2a:92:72:3d:
                    d4:f9:b8:9f:f2:17:ed:74:e5:19:56:11:84:84:ad:
                    35:a0:d8:0e:fe:8d:cd:8f:16:cc:4d:f9:33:6f:f1:
                    43:28:b6:51:50:ba:1f:4c:c2:7c:2a:76:f0:d4:c2:
                    e2:99:99:3d:65:3c:60:a7:e9:56:e8:1c:f6:10:c2:
                    da:94:84:a4:fa:48:f3:a2:8f:03:e4:65:37:2c:24:
                    e2:bf:26:f7:b7:63:fc:9e:92:26:87:8f:ef:b1:be:
                    7b:e8:b2:11:20:2c:ce:d2:ae:33:be:f7:17:70:c6:
                    4c:3d:6c:a6:c0:9f:04:09:c4:fc:75:9f:9f:14:d3:
                    45:79:91:45:55:03:94:c2:da:2b:51:ac:a7:47:08:
                    ab:47:81:f3:0b:37:fc:6a:40:54:a6:cb:c5:68:b9:
                    bd:36:ea:39:32:7c:51:16:0b:4f:cd:8a:1e:88:af:
                    dd:5f:e6:bd:39:41:fd:14:d7:fd:a1:02:27:48:93:
                    49:8a:ea:9b:13:3a:2a:ce:02:67:15:08:18:ac:03:
                    57:0f:9f:74:d1:e5:8a:82:4a:e2:ce:17:76:10:6b:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:05:7E:01:07:E7:7A:6E:CD:46:DD:C3:F5:DE:A4:BF:72:DE:2C:76
            X509v3 Authority Key Identifier:
                keyid:B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/932910b8ab57f514ec0e72fda7676271d29c7181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:20:4e:5c:4c:10:17:59:7e:a5:c3:31:1d:89:b9:05:c2:52:
         b9:98:5d:f1:06:e3:c8:12:b8:79:dd:00:3b:a6:46:c3:b0:4e:
         d5:26:32:60:01:f2:45:e8:ce:c6:e3:e3:0a:a9:c5:fa:d2:2f:
         75:45:91:4f:e3:13:4e:ce:8e:02:55:58:66:6c:8b:e0:dd:82:
         b4:bd:db:00:15:10:20:c4:c7:c8:cc:79:bc:40:c3:c1:2c:35:
         ca:8b:57:ea:5c:68:dc:51:f1:72:37:de:a9:6f:5d:02:d5:75:
         a1:02:a3:ea:93:cb:9c:3e:e2:ce:9f:58:76:7f:e6:fd:cc:dd:
         99:16:9e:b0:7a:81:be:21:e1:ac:14:21:bb:ea:9c:46:ec:de:
         84:4a:b5:3e:9f:48:cb:a6:ea:e5:8c:cc:4c:2d:b0:74:38:95:
         3c:35:7d:b1:ea:e9:b6:3f:d3:d3:62:32:2b:2e:5f:17:3d:10:
         38:21:6d:8b:f2:cd:64:b2:fe:9f:89:8e:8e:dd:b8:ab:6f:60:
         87:73:6c:8d:3b:68:a1:50:c4:97:ae:7b:3d:95:24:eb:7c:65:
         8a:0b:a2:5d:c2:4b:73:1b:a2:43:ac:9b:84:c8:e2:b2:71:b6:
         d3:9f:52:d7:7e:97:11:4a:a6:4b:3a:e9:f8:18:6b:3d:2b:85:
         73:ab:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----