Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/b98e81bbfd10ff3158e284d535cbd537073a8232.roa
File:                     b98e81bbfd10ff3158e284d535cbd537073a8232.roa (raw, json)
Hash identifier:          UGgl7u+xrfrMxPpV340wfs0pmKKWKfrscRfv98cDy44=
Subject key identifier:   79:BA:14:E5:BE:94:3C:14:0D:38:B2:A0:EC:5F:64:1E:5A:91:CC:D3
Certificate issuer:       /CN=950b09210530c2a8f9ddac3b8483a9df5c0f7b70
Certificate serial:       186521
Authority key identifier: 83:62:47:EA:DD:C7:74:49:96:54:34:30:B7:65:6D:46:60:84:9C:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/b98e81bbfd10ff3158e284d535cbd537073a8232.roa
Signing time:             Thu 11 Jan 2024 18:32:08 +0000
ROA not before:           Thu 11 Jan 2024 18:32:08 +0000
ROA not after:            Thu 11 Jan 2029 18:32:08 +0000
asID:                     264658
IP address blocks:        167.250.212.0/22 maxlen: 22
                          2803:4540::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598753 (0x186521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950b09210530c2a8f9ddac3b8483a9df5c0f7b70
        Validity
            Not Before: Jan 11 18:32:08 2024 GMT
            Not After : Jan 11 18:32:08 2029 GMT
        Subject: CN=b98e81bbfd10ff3158e284d535cbd537073a8232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:02:11:96:0c:13:0c:db:75:61:e4:6a:13:
                    d0:58:c7:0e:4a:d3:d8:25:0d:51:3b:2e:4a:42:4f:
                    d8:c1:97:b9:6f:a4:77:3d:57:fb:50:c6:d8:38:ab:
                    a9:d4:b4:31:61:f5:0e:25:1b:f8:5b:fa:d9:86:9e:
                    11:1d:40:1b:bb:19:e8:17:b9:85:3d:b7:99:35:74:
                    7f:eb:ef:7d:6a:cf:0a:6c:1d:4d:a9:4d:d5:ae:4b:
                    3f:dd:cf:9f:7f:08:1e:d8:e3:17:d5:3f:cb:bb:91:
                    4e:91:31:89:06:70:8e:ae:cb:c9:97:05:17:b7:fe:
                    7e:79:e1:c1:a0:cc:8d:c5:f7:0c:e3:09:67:6b:72:
                    86:05:be:7a:80:41:0d:f6:89:af:98:dd:a6:d5:61:
                    36:76:34:b1:10:0e:5e:10:c1:9e:70:11:0c:43:b5:
                    21:15:b0:f8:fc:ee:4c:17:a6:47:d9:38:68:1d:4f:
                    c5:2d:41:a8:26:fa:01:1e:7e:22:3f:f0:06:81:41:
                    2f:9e:8b:ff:dd:e9:f7:96:58:c3:01:1b:c0:40:26:
                    ef:63:49:e2:05:ab:01:38:a3:af:83:3b:4c:d4:8c:
                    2b:2f:7c:12:c7:38:1a:73:8d:9d:d3:1a:b8:06:a2:
                    30:56:f8:c0:6c:ae:5b:02:7b:7b:cb:49:82:85:16:
                    58:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BA:14:E5:BE:94:3C:14:0D:38:B2:A0:EC:5F:64:1E:5A:91:CC:D3
            X509v3 Authority Key Identifier:
                keyid:83:62:47:EA:DD:C7:74:49:96:54:34:30:B7:65:6D:46:60:84:9C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/b98e81bbfd10ff3158e284d535cbd537073a8232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.212.0/22
                IPv6:
                  2803:4540::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:b4:3b:3d:d5:e6:a7:be:cd:b8:69:8e:0d:5b:47:a0:2f:
         5a:65:96:0a:fe:5f:ca:3a:11:68:92:16:81:3b:fc:06:a0:d5:
         37:b9:a6:4b:5c:28:dd:99:c7:88:80:97:8c:4f:a9:98:0d:ee:
         b0:5d:5e:4c:d4:08:a0:59:a2:9a:7e:9f:8f:0f:23:37:60:29:
         bb:e7:b9:19:89:e4:82:6b:ab:23:04:eb:1f:50:9b:ca:6d:b1:
         75:1d:68:ed:de:93:52:53:fe:80:24:60:f9:9c:53:bf:08:40:
         ea:7e:79:2e:ae:9f:e7:a5:26:d5:6a:da:01:65:73:3c:7c:95:
         2f:42:29:15:68:ce:42:16:b3:14:02:c4:56:06:56:5b:87:10:
         a7:7b:dd:5e:41:ac:79:0a:b7:6e:42:84:4f:e2:c2:29:e0:cb:
         8f:55:f3:7e:ad:d5:d3:e2:4f:f9:20:f6:40:aa:04:4f:d6:fb:
         ac:d9:4b:54:e0:3a:1e:57:1d:f1:7f:9b:00:dc:d7:04:ef:6e:
         3f:f8:c8:63:a6:48:44:62:ed:49:b6:c3:6a:1c:1d:68:47:2f:
         c1:a6:ef:e2:2f:aa:1e:bf:2c:92:1a:46:9f:34:e2:35:92:64:
         3e:ba:98:6d:b4:5f:50:c9:6a:27:0f:d8:97:88:56:f1:45:8e:
         fa:0c:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----