Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/924b526c-e497-4466-9ac5-b833e70a326a/a8e239ad9359d3bc33063608e8e4c43d685676bf.roa
File:                     a8e239ad9359d3bc33063608e8e4c43d685676bf.roa (raw, json)
Hash identifier:          yHxqrR+cEbEmt0V5QKDe/zeNtjfZVor6iEHoZZgu5nU=
Subject key identifier:   33:08:7D:9C:6F:20:5D:6D:1B:44:8F:AC:8D:68:AF:4E:D9:02:3E:30
Certificate issuer:       /CN=0ed37484359538a0379fdd6ff6c7c133f1bdbee3
Certificate serial:       20D193
Authority key identifier: BB:3C:AB:A2:D0:A9:6B:FC:17:DA:9E:33:33:72:83:38:A6:08:E2:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ed37484359538a0379fdd6ff6c7c133f1bdbee3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/924b526c-e497-4466-9ac5-b833e70a326a/a8e239ad9359d3bc33063608e8e4c43d685676bf.roa
Signing time:             Mon 08 Jan 2024 14:38:13 +0000
ROA not before:           Mon 08 Jan 2024 14:38:13 +0000
ROA not after:            Thu 08 Jan 2026 14:38:13 +0000
asID:                     269992
IP address blocks:        179.60.136.0/22 maxlen: 24
                          2801:11:2800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150803 (0x20d193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ed37484359538a0379fdd6ff6c7c133f1bdbee3
        Validity
            Not Before: Jan  8 14:38:13 2024 GMT
            Not After : Jan  8 14:38:13 2026 GMT
        Subject: CN=a8e239ad9359d3bc33063608e8e4c43d685676bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:e1:39:c2:2e:88:9d:e1:39:a5:a4:05:24:
                    34:91:74:54:f3:c8:f8:44:6e:04:a2:c8:ee:0e:13:
                    49:31:23:7b:87:98:a6:90:d1:59:38:82:48:1f:7e:
                    c9:02:66:2c:4c:f7:94:9e:4e:38:ae:6d:3a:3e:fa:
                    64:a7:16:7c:99:40:6c:b7:a9:0c:3c:4d:03:07:b9:
                    e7:89:3c:d7:fe:05:f3:04:d6:5d:11:d7:c4:e1:97:
                    af:db:41:4a:e3:61:f9:d2:79:d3:c4:a0:7e:3f:54:
                    1a:eb:0b:08:48:92:26:84:a1:04:7f:39:ac:37:92:
                    0f:7b:ec:0e:51:09:61:18:d2:d5:b4:00:b4:db:fc:
                    71:ad:cc:b9:8a:f2:da:ca:91:09:71:23:f9:48:0b:
                    db:cf:96:ff:73:05:db:7e:69:dc:07:ea:9b:e0:3d:
                    ee:8f:13:49:f5:a7:4e:de:11:64:c4:8d:af:98:31:
                    6b:9b:76:78:68:71:1f:81:f3:d1:18:e6:34:a8:b7:
                    26:64:01:1a:4a:cd:ca:2f:4a:06:b6:a9:ee:06:3d:
                    f7:0c:73:21:24:88:81:f4:0c:6f:d5:06:ae:47:6c:
                    8d:c2:af:fd:79:33:db:da:11:07:c2:06:09:3f:44:
                    43:b1:c6:f6:3c:ba:f1:ed:fd:5e:19:a8:b0:5f:63:
                    a5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:7D:9C:6F:20:5D:6D:1B:44:8F:AC:8D:68:AF:4E:D9:02:3E:30
            X509v3 Authority Key Identifier:
                keyid:BB:3C:AB:A2:D0:A9:6B:FC:17:DA:9E:33:33:72:83:38:A6:08:E2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ed37484359538a0379fdd6ff6c7c133f1bdbee3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/924b526c-e497-4466-9ac5-b833e70a326a/a8e239ad9359d3bc33063608e8e4c43d685676bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/924b526c-e497-4466-9ac5-b833e70a326a/0ed37484359538a0379fdd6ff6c7c133f1bdbee3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.136.0/22
                IPv6:
                  2801:11:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:44:cb:8e:18:89:f5:eb:34:c7:2a:1b:ef:cf:4a:25:30:
         58:f7:a6:a6:09:e4:44:ae:df:d4:bc:20:80:74:85:fe:d7:32:
         db:e5:fe:46:1f:3f:ac:5c:0a:5b:96:ad:aa:1a:07:cd:f6:5a:
         d3:40:87:c7:7d:4b:c1:04:d2:c0:5c:5c:50:bc:72:64:41:de:
         d8:af:3e:61:3e:98:5d:74:ba:8f:5c:27:87:bc:ab:0b:ba:d3:
         e7:70:4c:e1:5e:71:e7:88:f8:7e:dc:fb:99:2a:c7:bc:15:50:
         68:1e:e4:45:c4:b3:81:cc:6d:e3:fc:d1:b1:98:24:4b:3f:50:
         34:05:eb:d5:60:3e:26:7e:82:0d:57:a4:74:70:04:5c:5a:80:
         a0:7c:b3:8c:54:b3:3d:45:0f:8d:bd:b1:30:18:76:15:a0:c9:
         85:63:cd:c5:e5:dc:82:87:fa:25:99:78:fa:60:0a:b2:f1:30:
         07:95:d0:bc:a1:8c:de:12:02:34:0e:ed:10:68:43:dc:01:b0:
         38:0c:50:9c:88:6c:eb:93:a7:9e:54:55:88:09:31:7b:ef:7c:
         b1:9b:9d:b4:0d:7b:cd:a3:12:9f:f5:ee:34:1b:6c:69:d7:82:
         ac:7a:d4:b8:98:74:5c:28:55:d3:6f:fb:5a:45:5c:04:cc:45:
         99:61:54:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----