Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/67c147073529facb42f76150a598687aa4559328.roa
File:                     67c147073529facb42f76150a598687aa4559328.roa (raw, json)
Hash identifier:          RooyJgg3Z4W7OXQWP/2IGktDlEi2zR1mlugnLShlieg=
Subject key identifier:   A4:0A:B4:DD:59:7B:23:04:C5:EF:4A:D2:7F:F1:46:E5:8C:C1:78:FF
Certificate issuer:       /CN=94997e9738eb4843477b7a8b538303d62f97978d
Certificate serial:       245B9C
Authority key identifier: 97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/67c147073529facb42f76150a598687aa4559328.roa
Signing time:             Tue 17 Oct 2023 20:19:32 +0000
ROA not before:           Mon 16 Oct 2023 20:19:32 +0000
ROA not after:            Fri 17 Oct 2025 20:19:32 +0000
asID:                     264668
IP address blocks:        131.196.112.0/22 maxlen: 24
                          2803:27c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382748 (0x245b9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94997e9738eb4843477b7a8b538303d62f97978d
        Validity
            Not Before: Oct 16 20:19:32 2023 GMT
            Not After : Oct 17 20:19:32 2025 GMT
        Subject: CN=67c147073529facb42f76150a598687aa4559328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:a0:51:60:82:2f:b9:da:e4:8d:b9:df:c5:
                    27:a5:86:64:e7:43:c7:81:c2:af:90:1f:11:5f:9e:
                    75:74:3d:ab:86:ca:6f:a1:87:c5:e3:11:d9:eb:bf:
                    93:45:66:f4:06:83:7e:ef:1a:4a:f5:17:1c:e4:ea:
                    0c:04:11:f7:41:a6:42:15:dc:f9:ac:5f:70:ec:6f:
                    0d:90:7a:a4:df:73:be:f0:18:67:d4:9d:b6:f5:31:
                    fe:f3:72:74:d1:93:72:6b:eb:66:c4:b9:6e:72:80:
                    b6:33:c8:16:7f:38:df:e6:da:dc:00:2e:46:d6:a6:
                    f3:63:d3:aa:24:ba:37:70:1e:b4:ad:bc:22:46:95:
                    b9:81:88:9e:74:82:54:83:77:b3:4e:99:24:77:bc:
                    8f:14:e9:63:b0:c9:64:7c:3f:ae:12:6f:4e:7d:64:
                    84:20:61:a1:c7:19:53:11:a2:11:ed:ba:03:1b:a4:
                    57:37:35:9e:cb:c9:f7:69:5a:cf:5b:9d:a0:7a:1e:
                    68:1b:0d:33:ab:68:99:b4:dc:d7:b6:41:1a:d9:0b:
                    04:a6:f4:4a:5f:70:d7:52:6b:dd:2d:dc:ea:53:5e:
                    f6:39:38:d6:79:4a:9c:cf:35:c4:56:e5:5c:60:7a:
                    62:cf:cf:43:a6:29:27:ee:86:40:29:da:c6:b4:e8:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0A:B4:DD:59:7B:23:04:C5:EF:4A:D2:7F:F1:46:E5:8C:C1:78:FF
            X509v3 Authority Key Identifier:
                keyid:97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/67c147073529facb42f76150a598687aa4559328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/94997e9738eb4843477b7a8b538303d62f97978d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.112.0/22
                IPv6:
                  2803:27c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:e1:bf:8e:a0:ee:33:40:13:83:4b:91:68:b7:83:9d:1b:80:
         ea:c8:c7:a8:f1:c2:8c:60:5e:0b:52:b2:77:7e:3d:c6:c1:53:
         b8:be:d4:b1:a7:5f:69:5f:00:70:b1:5b:fe:03:09:38:f6:9c:
         22:73:fb:26:a9:a2:38:bf:3c:1e:5d:47:0e:31:94:89:6c:b1:
         8c:29:e9:95:9a:76:39:d9:13:dd:8b:53:b7:74:61:1c:73:b3:
         c2:cd:2d:b9:8e:67:4c:e8:0f:65:7c:f2:e1:c4:56:00:ca:3e:
         02:3c:d2:02:f3:3e:be:ce:cb:e7:c8:68:a3:fe:28:e1:8f:40:
         1a:e3:59:fc:dc:bd:cf:9c:5d:f6:60:7b:c2:36:5a:61:6e:66:
         f0:10:8f:55:20:12:83:81:29:0e:3d:2d:1d:ab:67:d1:26:d6:
         8c:fa:04:e7:3c:9b:f1:4b:3b:58:d3:e9:5e:0d:77:5a:4f:6c:
         41:71:88:30:fb:e1:f8:61:6e:17:17:fa:a3:3a:ca:cb:c5:e3:
         03:d5:73:c1:c2:4b:83:50:8b:4c:bd:d9:bf:96:50:89:7b:de:
         aa:6a:3d:9b:8a:fc:70:9b:58:75:e8:a7:cc:59:0d:57:a2:06:
         3c:69:4a:c6:5d:55:90:d9:de:a1:ea:15:f0:00:a9:85:99:c2:
         4b:f5:b2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----