Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/f566392c564789041ae8b43ba6c7d3098423cb1e.roa
File:                     f566392c564789041ae8b43ba6c7d3098423cb1e.roa (raw, json)
Hash identifier:          Z+ikHeolMjBuxiZMUPuGaJb5ZXomthd/qoH0ZSlvr+0=
Subject key identifier:   D6:3E:46:27:A0:FA:42:4C:90:32:08:50:7D:86:41:37:F8:9D:43:00
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       085DE4
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/f566392c564789041ae8b43ba6c7d3098423cb1e.roa
Signing time:             Thu 12 Oct 2023 14:47:32 +0000
ROA not before:           Wed 11 Oct 2023 14:47:32 +0000
ROA not after:            Sun 12 Oct 2025 14:47:32 +0000
asID:                     27680
IP address blocks:        186.41.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548324 (0x85de4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Oct 11 14:47:32 2023 GMT
            Not After : Oct 12 14:47:32 2025 GMT
        Subject: CN=f566392c564789041ae8b43ba6c7d3098423cb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:00:33:a7:21:b7:18:84:51:99:38:e3:a6:
                    88:33:17:fe:2f:5d:e7:1a:04:2b:0d:8d:52:7a:63:
                    2e:21:89:ce:24:8e:c7:be:dc:d5:ef:f7:3b:34:ee:
                    b4:25:82:3e:f0:52:b6:d9:db:e0:42:9c:5c:56:76:
                    ee:71:81:f8:85:fa:92:8a:ba:23:84:fb:1d:6f:56:
                    a2:8c:e3:f6:e3:5a:51:bc:7f:69:b1:5a:20:b5:53:
                    a6:0a:59:85:3e:45:d2:a6:bf:93:35:53:bf:3a:49:
                    94:99:8b:85:37:6c:6c:a8:8a:10:bd:8e:7a:c1:18:
                    e0:df:e6:9c:78:a0:24:66:12:00:16:d9:66:1c:94:
                    f2:93:36:93:b4:bb:d2:bf:67:24:6f:01:81:27:11:
                    e9:48:f2:46:dd:b4:57:c9:6c:56:70:56:2d:de:d6:
                    e4:94:f7:e1:d1:5b:d2:13:12:2f:8b:69:15:c2:fa:
                    97:46:4e:e2:1c:4e:3f:f6:01:a6:b2:af:1a:93:e2:
                    d8:60:e1:0f:9b:69:77:8d:3f:7b:15:c1:9f:bd:6e:
                    e6:5b:71:3d:63:4c:86:67:a0:0f:d3:77:b5:3f:c6:
                    b1:02:d7:09:66:ca:c8:12:73:70:3a:fd:d6:fb:24:
                    c1:ef:10:90:af:11:6e:f4:ad:04:a3:86:e4:79:72:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3E:46:27:A0:FA:42:4C:90:32:08:50:7D:86:41:37:F8:9D:43:00
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/f566392c564789041ae8b43ba6c7d3098423cb1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.41.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:3f:37:8e:37:80:86:51:11:f5:57:a9:7c:1f:14:b7:9e:1e:
         f3:12:5d:c3:e9:92:51:3d:e6:5c:c9:be:c6:fd:b9:a0:62:bf:
         e0:05:f6:79:93:8c:17:09:56:1f:62:44:e9:0b:22:f6:cb:4f:
         6c:63:4d:3b:0b:65:dd:34:ba:26:c5:b4:5b:ef:85:ab:03:e7:
         6a:2c:6a:ee:0d:4b:d9:6d:a3:12:29:dd:0d:50:8c:5f:8d:c3:
         d2:38:ff:dd:00:18:b3:fd:a1:8d:f9:16:62:c6:2d:e3:55:7d:
         9a:4c:42:a5:60:b1:32:81:bf:1e:f6:1e:4e:de:fc:38:0f:a7:
         09:31:2d:28:ae:98:b1:8b:aa:21:2e:6c:2e:9f:7d:66:51:eb:
         11:f3:08:20:b7:2c:f8:57:ee:0c:ad:2c:3e:93:88:8e:74:fb:
         3f:0b:ef:e3:d0:ba:f4:9e:08:fe:09:00:9a:8e:13:9e:54:9b:
         b7:b0:87:7e:57:3d:02:db:5a:d3:4a:fc:d1:8a:27:e0:67:ce:
         68:a0:46:2e:17:42:66:62:55:a1:83:6a:8c:ea:9f:11:05:9c:
         27:a2:07:f6:c1:83:b6:64:da:95:23:f9:c7:73:58:6c:d4:47:
         ff:25:1b:d5:b2:b2:4a:61:99:ed:fa:db:13:2b:db:42:f2:be:
         bd:f8:1d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----