Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/38b429e8dfe6ca0180b3050542b58230792a8229.roa
File:                     38b429e8dfe6ca0180b3050542b58230792a8229.roa (raw, json)
Hash identifier:          edg0XWQZ5nZDsFIwBCAeKvD8hnHK4121UN3tgWSJcAw=
Subject key identifier:   9A:F9:A7:AF:E3:6C:C6:4F:EC:5B:12:3F:B5:B1:38:6C:A6:28:F1:91
Certificate issuer:       /CN=d0615608a5f64a875e5be0a66c710b668ecb0886
Certificate serial:       1947D6
Authority key identifier: C3:2B:D5:97:7D:9A:F1:4D:F2:53:CB:EB:AC:C7:D2:22:2A:41:67:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0615608a5f64a875e5be0a66c710b668ecb0886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/38b429e8dfe6ca0180b3050542b58230792a8229.roa
Signing time:             Wed 31 Jan 2024 21:24:34 +0000
ROA not before:           Wed 31 Jan 2024 21:24:34 +0000
ROA not after:            Sat 31 Jan 2026 21:24:34 +0000
asID:                     28398
IP address blocks:        164.163.188.0/22 maxlen: 24
                          2806:2ed::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656790 (0x1947d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0615608a5f64a875e5be0a66c710b668ecb0886
        Validity
            Not Before: Jan 31 21:24:34 2024 GMT
            Not After : Jan 31 21:24:34 2026 GMT
        Subject: CN=38b429e8dfe6ca0180b3050542b58230792a8229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4b:06:ae:9c:be:1f:ac:1d:c2:54:10:66:f6:
                    02:2d:96:62:f1:1e:c7:01:d0:bd:b0:f0:1b:c2:49:
                    0b:a8:41:a5:aa:43:aa:74:28:19:ef:4d:08:6a:a8:
                    cd:6b:0c:b2:de:13:d3:6d:b0:83:ba:04:04:14:b0:
                    af:4c:c3:47:2a:cb:04:be:36:eb:f7:77:5e:9a:b0:
                    e2:45:4c:bc:c0:88:b1:29:75:57:da:f8:39:85:32:
                    8a:da:ad:85:77:91:1b:f1:be:95:3e:0d:4b:52:f7:
                    8e:d0:1f:c5:b6:57:57:d2:c8:2c:2b:d6:10:3c:f7:
                    19:d3:a1:fa:c4:ca:19:f8:87:6c:89:7e:bb:15:f2:
                    78:52:af:0a:9b:cd:81:3e:fe:f5:47:99:ea:e5:cf:
                    b9:3f:ae:6d:e8:6c:4a:b2:56:d2:95:93:75:ca:9a:
                    05:fe:b5:6f:fb:e8:f0:4f:89:80:82:8e:a7:f1:f7:
                    07:c9:b6:53:cb:b7:b9:29:46:8e:dc:30:6c:ff:9a:
                    22:dd:0c:03:59:2e:e9:57:1e:f3:53:43:c8:05:03:
                    29:b2:4b:6e:78:fc:b3:17:b7:ee:04:e6:7f:dd:28:
                    f0:ad:f1:95:78:2c:e4:8d:14:3e:44:d1:bc:bb:85:
                    13:ca:e9:4d:79:e6:dd:e4:99:ff:8e:58:4b:8c:47:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F9:A7:AF:E3:6C:C6:4F:EC:5B:12:3F:B5:B1:38:6C:A6:28:F1:91
            X509v3 Authority Key Identifier:
                keyid:C3:2B:D5:97:7D:9A:F1:4D:F2:53:CB:EB:AC:C7:D2:22:2A:41:67:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0615608a5f64a875e5be0a66c710b668ecb0886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/38b429e8dfe6ca0180b3050542b58230792a8229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/d0615608a5f64a875e5be0a66c710b668ecb0886.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.188.0/22
                IPv6:
                  2806:2ed::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:94:86:54:b5:1c:df:c8:3e:76:f9:05:9a:39:88:f6:39:c7:
         fa:cc:e7:af:e0:6e:90:59:61:a0:db:ac:6a:bf:1c:38:bf:5b:
         27:d0:27:27:aa:84:9c:9b:da:59:0b:01:4e:a6:6e:a1:c6:b2:
         5e:e7:48:f1:46:1b:96:d4:02:c2:9a:64:af:dc:59:9c:c1:a9:
         50:e4:69:74:53:b6:4c:bc:99:25:18:5c:19:55:68:18:c3:c6:
         62:ca:8d:a1:36:49:9a:17:87:5d:94:65:a3:dc:98:47:96:15:
         b5:a6:e3:66:d1:b1:ad:1d:ad:4d:76:fe:52:1f:3c:b1:3d:d0:
         fa:78:34:19:ea:89:29:81:f4:d6:34:a8:bf:51:ea:74:1b:8c:
         9d:3e:77:36:81:d6:8e:fb:13:50:75:ee:95:98:48:92:3e:3f:
         50:4a:aa:57:d6:61:a6:a1:17:a6:96:8e:9d:b1:ef:32:ab:86:
         c7:7d:7b:fd:c0:c5:b9:4a:ca:87:a7:5f:c4:fa:10:4a:c6:f7:
         df:8f:2e:d7:5b:d1:f4:3f:62:7c:08:f1:62:be:d2:0e:cd:47:
         e6:42:90:95:1b:ec:c6:90:66:3c:50:06:e8:33:69:fe:18:44:
         76:03:51:36:10:dc:d2:6b:dc:e7:1a:5a:f7:a5:ea:23:82:34:
         aa:60:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----