Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/fb7cd66665922280610547a9161269729ff71d18.roa
File:                     fb7cd66665922280610547a9161269729ff71d18.roa (raw, json)
Hash identifier:          ztTjoiH7XrNzKn5btlqwvZIbcsNyfOnx1r3Qw00KHO4=
Subject key identifier:   CA:F6:99:B8:18:48:22:DB:D2:C2:7D:40:AB:B4:19:52:1B:30:53:99
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       273A7C
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/fb7cd66665922280610547a9161269729ff71d18.roa
Signing time:             Mon 29 Jan 2024 14:43:44 +0000
ROA not before:           Mon 29 Jan 2024 14:43:43 +0000
ROA not after:            Thu 29 Jan 2026 14:43:43 +0000
asID:                     264806
IP address blocks:        200.31.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2570876 (0x273a7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jan 29 14:43:43 2024 GMT
            Not After : Jan 29 14:43:43 2026 GMT
        Subject: CN=fb7cd66665922280610547a9161269729ff71d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:56:31:07:39:81:52:8c:9e:9e:8f:68:2d:
                    47:51:1c:91:4f:17:01:ce:89:9f:03:52:3d:15:c1:
                    65:90:b8:0c:04:aa:7c:5e:02:a5:0b:1c:78:9f:7e:
                    e8:9a:75:ce:2a:ad:37:4b:dc:f6:bf:7b:4a:d9:75:
                    0d:4e:2a:e4:3f:20:57:6c:46:00:02:0a:ae:7e:c1:
                    b9:09:c6:93:e3:c4:56:68:dc:f0:8e:de:74:62:06:
                    4f:94:18:9a:73:2c:d3:90:5e:95:60:7e:9e:d9:7a:
                    3a:96:f2:5d:05:95:59:ac:f1:04:dd:e7:42:36:56:
                    96:3e:2b:59:bd:26:80:43:d2:3d:5f:72:55:25:39:
                    79:b2:4c:df:8c:e1:b3:92:44:66:94:c8:dd:84:8c:
                    af:79:bd:83:20:be:ab:2f:4e:04:b4:f5:32:3c:66:
                    3c:05:ee:a7:09:de:7e:46:2b:4a:68:32:2f:8f:31:
                    dd:4c:14:2f:b3:ca:e8:6f:b8:57:50:88:84:59:20:
                    78:81:47:0d:23:3b:fe:30:70:f0:aa:d4:cb:ff:39:
                    35:43:5e:e3:cb:8d:7c:66:c2:bb:e1:14:9a:00:34:
                    20:19:2a:e7:16:95:14:7a:e8:40:ed:7e:0b:a4:c2:
                    44:f2:a9:cd:1a:a0:21:c8:69:65:58:fb:8e:35:53:
                    44:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F6:99:B8:18:48:22:DB:D2:C2:7D:40:AB:B4:19:52:1B:30:53:99
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/fb7cd66665922280610547a9161269729ff71d18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:f8:70:2b:58:1c:30:82:27:0e:44:44:bb:7f:50:0c:24:94:
         6c:a7:f1:da:ad:23:6f:b8:3f:8a:7c:6e:31:0c:a6:7c:94:12:
         93:80:3e:f4:df:4c:70:dd:23:65:26:92:7e:5c:d8:9d:ca:cd:
         35:c3:12:6d:97:95:3d:16:03:2d:9d:22:42:3e:8d:1b:f6:15:
         d3:8b:da:6f:d9:0b:e7:e1:bc:b8:86:f6:1c:af:e0:e5:db:f0:
         53:c8:bd:24:7a:2a:9d:15:83:ae:a4:3b:27:61:44:03:00:98:
         62:a5:c4:ab:ed:fb:f7:e5:4b:83:a5:ae:d1:39:36:48:68:ee:
         60:dc:9a:7a:51:21:47:c8:dc:de:38:61:e0:84:50:69:02:3f:
         e7:61:8e:c2:c4:1d:18:98:6d:61:c4:22:b8:aa:45:3b:19:09:
         89:53:03:64:1c:a6:0e:2b:de:32:b6:5f:0a:a6:1a:4e:82:8e:
         ca:dd:a6:95:0e:8c:8d:51:43:cd:74:ea:5b:e3:4b:c2:e2:20:
         23:88:55:ef:a9:53:5b:17:d2:14:3e:35:15:04:00:89:11:5b:
         76:74:51:6c:1f:d8:c4:d8:8e:fc:37:ce:d3:7a:b3:65:9e:1d:
         91:be:c6:10:6c:62:b9:59:57:ba:1f:ae:a5:0e:20:ba:d0:4a:
         b3:d8:c4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----