Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/971d008232e7aed9a739b48b481189cd1fb5f335.roa
File:                     971d008232e7aed9a739b48b481189cd1fb5f335.roa (raw, json)
Hash identifier:          7FgaaRed5AhkD2I4AbEw7l2D8lAl28gODU9f2KNAWE0=
Subject key identifier:   87:F5:F8:50:A6:4E:DE:14:7A:85:74:99:7F:48:44:C0:93:BF:89:26
Certificate issuer:       /CN=99a6fc41bdae0a6a4945c4018c1d95c871e31e3c
Certificate serial:       1EF207
Authority key identifier: 11:80:E3:67:E8:52:18:E4:8E:D9:F4:9E:83:F1:05:C6:71:33:C9:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/971d008232e7aed9a739b48b481189cd1fb5f335.roa
Signing time:             Mon 04 Mar 2024 21:11:50 +0000
ROA not before:           Mon 04 Mar 2024 21:11:50 +0000
ROA not after:            Wed 04 Mar 2026 21:11:50 +0000
asID:                     262216
IP address blocks:        138.0.104.0/22 maxlen: 24
                          2803:5a00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2028039 (0x1ef207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a6fc41bdae0a6a4945c4018c1d95c871e31e3c
        Validity
            Not Before: Mar  4 21:11:50 2024 GMT
            Not After : Mar  4 21:11:50 2026 GMT
        Subject: CN=971d008232e7aed9a739b48b481189cd1fb5f335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:86:9f:9b:6c:1d:ee:f6:ab:fa:88:fc:1a:82:
                    01:c3:6a:65:5a:73:86:b8:f0:b3:7b:b5:31:ab:b1:
                    69:ed:f0:04:57:d2:01:93:c6:c5:76:3c:2f:48:e6:
                    4e:40:d8:ae:8a:ca:b2:c6:46:9f:d3:42:43:29:2a:
                    19:8e:c8:47:a9:54:13:b2:84:6f:c0:e3:8f:79:52:
                    61:b5:19:c4:db:8a:a8:f0:c3:54:5d:2a:a9:36:f1:
                    d8:b5:0f:86:89:57:63:36:d8:af:a4:a8:a3:c9:bd:
                    ba:de:24:1b:56:e1:33:51:91:cb:fc:a2:a8:8c:da:
                    2b:93:0c:b7:3f:2d:dc:46:0c:31:86:1a:7f:92:ec:
                    b1:ba:a8:43:67:bb:9a:66:5a:30:3e:7a:c6:5a:d7:
                    92:0b:a7:bd:b7:e9:f6:08:5e:45:86:90:10:2a:a4:
                    bc:88:d2:73:6e:09:28:fa:3c:44:97:e0:cf:87:f5:
                    38:e2:03:86:41:17:95:a5:6c:5f:c3:b6:80:d8:6f:
                    35:fe:1e:c3:c7:dc:e8:5c:22:30:d0:7d:86:0e:69:
                    82:0c:c6:f3:5e:5a:55:ad:14:82:91:46:0a:64:e5:
                    1c:5a:2b:80:dd:c0:e0:1b:89:5f:ed:77:2a:ae:57:
                    05:ca:a9:68:65:da:6e:83:61:e3:76:34:93:ab:2b:
                    db:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F5:F8:50:A6:4E:DE:14:7A:85:74:99:7F:48:44:C0:93:BF:89:26
            X509v3 Authority Key Identifier:
                keyid:11:80:E3:67:E8:52:18:E4:8E:D9:F4:9E:83:F1:05:C6:71:33:C9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/971d008232e7aed9a739b48b481189cd1fb5f335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.104.0/22
                IPv6:
                  2803:5a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:68:af:6c:b0:1d:64:34:f7:ec:59:80:07:ed:c3:cf:32:b4:
         4d:ce:5a:8c:bc:4f:33:e8:8c:52:0c:4a:47:b9:ef:d6:49:d2:
         5e:f7:d1:8c:a2:ba:ab:02:f0:f5:92:68:ff:28:db:f9:39:88:
         a2:aa:c0:a5:0c:bf:0a:33:71:39:cc:3c:6a:17:c8:24:c9:bc:
         3a:b5:6c:b0:0c:d8:8a:77:99:3b:6f:04:e7:14:df:00:0e:66:
         0f:fa:e9:c1:e8:a3:57:8f:f6:18:0c:e1:34:eb:97:2c:b5:8a:
         14:2a:6e:13:eb:67:30:90:c4:82:15:de:3a:e3:4b:26:c7:37:
         40:d1:6e:07:d8:26:d3:33:59:6a:a2:4d:cf:1b:02:78:e3:1b:
         36:c5:6f:8a:97:19:87:54:20:97:0f:2e:dd:6f:4d:0f:42:b9:
         e1:a2:9f:c8:21:92:3e:e3:c0:c6:90:8a:05:bf:ab:da:87:c6:
         2e:ea:5a:cd:4c:56:5a:75:e6:37:15:97:a1:4e:9c:88:21:f0:
         ee:1d:fc:1f:b2:04:56:e7:69:54:93:b4:67:e4:a0:76:f1:2c:
         b1:50:50:b6:6f:a0:a1:f3:77:7b:4c:75:10:f4:aa:6d:fc:28:
         a9:90:fc:30:f9:12:05:54:21:99:40:70:76:16:66:f1:65:c5:
         fc:b5:15:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----