Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e97950b-e264-4efc-b62d-bb9be834f07a/5f88ed8ed6b44e536c68ff2d47cf4f040a748f37.roa
File:                     5f88ed8ed6b44e536c68ff2d47cf4f040a748f37.roa (raw, json)
Hash identifier:          lkp4es+1D6z7sQf7tyFq78dhUi1K0pEnDVyemb1h1Rc=
Subject key identifier:   69:7D:4A:52:F1:08:B8:FA:DE:45:3C:12:FE:77:A4:EB:3E:30:E9:68
Certificate issuer:       /CN=0ba89b5a5f62fc523e60435c6d5fa0dcdf68d657
Certificate serial:       27CB9F
Authority key identifier: F9:25:D3:A4:9E:FD:63:03:A1:A0:A6:F9:E5:53:CA:10:FE:8C:1A:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ba89b5a5f62fc523e60435c6d5fa0dcdf68d657.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e97950b-e264-4efc-b62d-bb9be834f07a/5f88ed8ed6b44e536c68ff2d47cf4f040a748f37.roa
Signing time:             Tue 12 Mar 2024 17:15:12 +0000
ROA not before:           Tue 12 Mar 2024 17:15:12 +0000
ROA not after:            Thu 12 Mar 2026 17:15:12 +0000
asID:                     22080
IP address blocks:        186.148.64.0/20 maxlen: 24
                          200.112.128.0/18 maxlen: 24
                          168.121.212.0/22 maxlen: 24
                          200.124.96.0/20 maxlen: 24
                          2803:7540::/32 maxlen: 64
                          2800:a40::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2608031 (0x27cb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba89b5a5f62fc523e60435c6d5fa0dcdf68d657
        Validity
            Not Before: Mar 12 17:15:12 2024 GMT
            Not After : Mar 12 17:15:12 2026 GMT
        Subject: CN=5f88ed8ed6b44e536c68ff2d47cf4f040a748f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c9:0a:d8:88:f5:1f:24:d5:4f:31:b6:f7:01:
                    ae:f5:03:31:c0:d3:26:f7:08:4e:c9:8e:91:79:4a:
                    57:87:15:a4:46:cc:a0:9b:27:8b:fe:80:c8:d2:10:
                    04:78:c6:12:3f:59:0e:ba:ff:a6:23:63:bd:3b:25:
                    a2:64:d0:80:2d:1a:76:50:38:34:e2:07:56:da:de:
                    0b:6b:d3:e4:5e:c0:cf:a9:3c:11:04:aa:30:d8:4f:
                    c8:a1:b2:4e:11:44:28:9b:b2:a7:e7:54:fa:66:e5:
                    9c:97:f4:c8:19:e4:36:3f:ca:33:44:9b:1c:f7:07:
                    0f:7d:0d:14:95:3a:77:dc:d2:82:7c:a0:3c:93:35:
                    10:fd:ac:96:96:bf:f6:28:8c:c0:3e:82:27:26:97:
                    36:01:1e:e3:80:3b:16:18:96:10:01:1f:3d:06:6b:
                    9b:03:cf:09:c9:ce:06:67:13:43:ee:78:84:53:91:
                    15:7e:4c:f5:92:c5:a0:14:25:0d:2e:c2:96:56:a7:
                    89:cc:bf:bc:a0:79:c0:2d:51:01:7f:65:7b:87:3a:
                    02:6d:b9:43:90:f9:8e:2f:90:d0:91:de:ff:03:21:
                    92:41:7a:72:96:f9:9b:b8:9e:22:db:d3:bb:db:28:
                    2f:50:55:af:b4:c7:16:e2:12:bd:3b:7d:a8:6d:3f:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7D:4A:52:F1:08:B8:FA:DE:45:3C:12:FE:77:A4:EB:3E:30:E9:68
            X509v3 Authority Key Identifier:
                keyid:F9:25:D3:A4:9E:FD:63:03:A1:A0:A6:F9:E5:53:CA:10:FE:8C:1A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ba89b5a5f62fc523e60435c6d5fa0dcdf68d657.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e97950b-e264-4efc-b62d-bb9be834f07a/5f88ed8ed6b44e536c68ff2d47cf4f040a748f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e97950b-e264-4efc-b62d-bb9be834f07a/0ba89b5a5f62fc523e60435c6d5fa0dcdf68d657.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.212.0/22
                  186.148.64.0/20
                  200.112.128.0/18
                  200.124.96.0/20
                IPv6:
                  2800:a40::/32
                  2803:7540::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:1c:b4:55:c1:9d:6e:01:06:f8:70:a6:03:e9:a5:55:ff:66:
         4c:a3:45:d7:57:5d:c6:9d:98:a3:39:a7:c8:29:6e:51:70:32:
         58:73:42:89:78:2f:9a:3d:22:0f:4a:c7:13:38:bf:9c:70:ae:
         3e:bf:b6:3f:ed:94:b9:cd:a8:75:66:32:53:b7:fa:bd:60:47:
         12:3f:00:ba:82:db:b1:20:4d:e9:0d:30:a9:1d:f1:b7:b4:9e:
         83:2f:13:7f:46:3b:28:33:c2:a6:fb:f2:7d:b3:87:8a:0b:7a:
         18:0a:d1:7f:b0:76:91:01:14:3c:aa:7d:62:3a:44:23:3d:e1:
         1d:34:39:af:9b:58:3b:b4:e4:ea:3f:8f:7a:5d:c5:bf:c4:0f:
         8c:54:3a:b5:17:b2:2f:fc:51:35:96:7c:32:b1:15:ce:3b:90:
         20:af:5f:06:6d:21:f6:0c:ad:1f:23:fd:9c:96:f1:19:34:fd:
         c6:e1:aa:20:b1:2c:93:97:71:04:b4:ce:57:de:eb:98:0d:69:
         e3:18:17:d7:4c:ca:62:21:41:cb:d4:05:38:57:03:e2:0a:a6:
         7c:46:71:1e:f7:4e:74:d5:a9:40:cc:5a:0b:a4:17:d9:18:d9:
         f8:2f:32:b8:18:09:3a:61:a6:0c:e9:f7:91:3b:3e:5b:b4:97:
         0c:25:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----