Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bfe2523-2384-4939-a4a8-12f2939ff6b4/ce74394cbfe7992511d6425ec85003673ea5ff6a.roa
File:                     ce74394cbfe7992511d6425ec85003673ea5ff6a.roa (raw, json)
Hash identifier:          /X+CzEVetXvmm44rOvqk9fQ0CEbxYxpiL4pGvA4t2Cg=
Subject key identifier:   C3:93:8A:78:D8:A2:9A:FA:D1:4E:58:5E:68:34:A8:39:32:9B:41:9F
Certificate issuer:       /CN=97e19f80a914e88700bb231723808fdf850cfd58
Certificate serial:       0477
Authority key identifier: DB:E5:0A:FE:01:67:93:78:BF:E2:85:B4:DD:C2:FC:07:A5:9E:C5:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97e19f80a914e88700bb231723808fdf850cfd58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bfe2523-2384-4939-a4a8-12f2939ff6b4/ce74394cbfe7992511d6425ec85003673ea5ff6a.roa
Signing time:             Mon 15 Apr 2024 04:40:39 +0000
ROA not before:           Mon 15 Apr 2024 04:40:39 +0000
ROA not after:            Wed 15 Apr 2026 04:40:39 +0000
asID:                     27781
IP address blocks:        131.161.84.0/22 maxlen: 22
                          131.161.84.0/23 maxlen: 23
                          131.161.85.0/24 maxlen: 24
                          131.161.86.0/24 maxlen: 24
                          131.161.87.0/24 maxlen: 24
                          2803:7380::/32 maxlen: 32
                          2803:7380:8000::/34 maxlen: 34
                          2803:7380:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1143 (0x477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e19f80a914e88700bb231723808fdf850cfd58
        Validity
            Not Before: Apr 15 04:40:39 2024 GMT
            Not After : Apr 15 04:40:39 2026 GMT
        Subject: CN=ce74394cbfe7992511d6425ec85003673ea5ff6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cf:9e:e0:e1:5d:da:43:e6:02:f1:9f:44:f1:
                    97:13:b0:50:77:81:d2:55:b5:d4:11:ab:d5:64:e4:
                    4a:c3:f3:8b:8a:0f:89:8d:38:61:df:f3:b6:70:dd:
                    5a:52:c1:42:1c:a8:3c:e4:cf:3e:c6:93:c4:54:a6:
                    91:1b:e9:6f:16:0e:96:ae:59:18:95:23:5c:50:ea:
                    1b:02:31:55:d1:a1:2d:c7:59:8b:08:bf:4c:d1:eb:
                    f3:dd:9c:ec:bb:dc:df:88:aa:c2:2a:8c:19:40:16:
                    c8:b6:b5:ce:9d:bb:a4:fb:b9:be:fb:9b:f5:15:52:
                    a3:e9:35:55:04:39:e9:22:ca:4f:ae:45:3f:33:87:
                    d8:c1:3c:0c:73:95:25:0f:f1:2e:42:26:2f:f1:d8:
                    aa:68:cb:83:eb:8a:e2:cb:18:dc:93:9c:3d:45:99:
                    6d:5c:ba:d8:66:91:16:56:67:58:3e:75:5c:1e:41:
                    f8:87:6a:e4:82:ff:d8:00:f2:38:a1:9e:b1:07:29:
                    f3:e5:ee:71:ce:bf:d8:c9:bd:1b:c9:d0:a3:7c:d5:
                    18:91:21:d4:51:2e:3f:e2:4f:ce:35:28:ce:ea:e8:
                    10:46:f2:21:7a:a5:6c:3d:f1:e8:ef:6b:f8:57:2c:
                    77:ca:be:86:2d:b6:51:28:2e:a4:1b:ee:38:eb:e4:
                    b0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:93:8A:78:D8:A2:9A:FA:D1:4E:58:5E:68:34:A8:39:32:9B:41:9F
            X509v3 Authority Key Identifier:
                keyid:DB:E5:0A:FE:01:67:93:78:BF:E2:85:B4:DD:C2:FC:07:A5:9E:C5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97e19f80a914e88700bb231723808fdf850cfd58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bfe2523-2384-4939-a4a8-12f2939ff6b4/ce74394cbfe7992511d6425ec85003673ea5ff6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bfe2523-2384-4939-a4a8-12f2939ff6b4/97e19f80a914e88700bb231723808fdf850cfd58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.84.0/22
                IPv6:
                  2803:7380::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:39:1f:6e:50:4f:c1:77:fa:06:97:ab:54:77:5b:d4:73:a4:
         a2:9c:14:de:22:2f:13:96:27:d9:9f:ff:6d:f4:2b:05:2b:fe:
         59:25:65:98:94:4d:0c:ee:4b:01:4b:cf:0b:df:d0:11:bb:a7:
         84:27:25:ac:f8:f7:02:64:b2:5e:9b:88:ad:05:fd:1f:06:05:
         95:76:26:6c:50:9f:b9:e8:04:68:92:d5:34:78:54:5e:0a:9c:
         7d:c2:38:8d:0d:f9:51:44:f5:30:24:89:fe:4f:f8:28:78:2d:
         e6:d7:ff:cc:bf:f0:13:b4:d5:ec:73:c8:a2:58:b7:e5:ff:a9:
         f9:a5:85:f1:43:c0:32:10:70:4e:48:8f:69:af:57:14:76:f4:
         d3:ff:f5:45:d0:e2:53:04:0e:d5:00:8e:f1:99:e3:1f:06:ba:
         1e:ed:bb:aa:3c:ae:b1:fd:31:b0:07:84:6a:97:8a:28:f9:53:
         b0:5d:de:bf:01:71:f6:75:74:67:33:a5:b6:e9:41:5e:a0:80:
         27:bf:af:81:96:06:26:25:7d:a5:45:ea:1c:7f:98:24:e2:e1:
         c6:59:e6:6b:70:e8:57:ff:9d:96:97:92:38:06:bb:d3:dc:36:
         b8:56:e7:93:f2:9e:4b:4d:8d:82:ca:15:a0:2a:3f:ad:10:de:
         d1:6e:b5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----