Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/fbc92185cc222c3b969ac2ca17c65dbae1c00f12.roa
File:                     fbc92185cc222c3b969ac2ca17c65dbae1c00f12.roa (raw, json)
Hash identifier:          aP+Ytunqw5NK/CsN4NrUIi6ea98tPcZEheapvm8OgHA=
Subject key identifier:   D0:43:91:CA:2E:9F:34:6E:4C:CB:06:CB:2C:59:0D:F8:9B:09:A0:22
Certificate issuer:       /CN=31742366465ae7b8aabae7fbfcda60083162897c
Certificate serial:       2521ED
Authority key identifier: A2:78:13:93:22:69:C8:86:9B:20:FD:8F:4F:20:96:AB:54:EB:BB:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31742366465ae7b8aabae7fbfcda60083162897c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/fbc92185cc222c3b969ac2ca17c65dbae1c00f12.roa
Signing time:             Mon 20 Nov 2023 13:38:29 +0000
ROA not before:           Mon 20 Nov 2023 13:38:29 +0000
ROA not after:            Thu 20 Nov 2025 13:38:29 +0000
asID:                     263702
IP address blocks:        138.255.100.0/22 maxlen: 24
                          131.221.32.0/22 maxlen: 24
                          45.225.92.0/22 maxlen: 24
                          168.195.128.0/22 maxlen: 24
                          2803:3b80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2433517 (0x2521ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31742366465ae7b8aabae7fbfcda60083162897c
        Validity
            Not Before: Nov 20 13:38:29 2023 GMT
            Not After : Nov 20 13:38:29 2025 GMT
        Subject: CN=fbc92185cc222c3b969ac2ca17c65dbae1c00f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ca:2c:3a:03:dc:f4:62:f9:af:7c:c2:32:fb:
                    f3:aa:f3:e4:c6:75:9e:65:e8:ba:4b:ad:ef:1f:42:
                    c1:bd:66:9a:72:58:de:ef:8a:7b:5b:dc:22:09:5a:
                    08:4a:8e:83:ce:ee:3a:69:e7:20:5b:5d:53:39:27:
                    87:3e:09:44:74:c1:a2:76:25:59:31:29:18:3f:45:
                    cb:79:76:31:51:14:ca:5b:8a:4b:33:5d:e6:59:c9:
                    2a:c2:e9:82:59:af:cc:54:80:e6:ee:36:08:bd:ca:
                    8b:b8:d3:85:d2:3d:72:6a:05:ab:c3:7c:1f:6a:55:
                    c8:cb:a5:60:a8:54:f3:95:c7:69:fe:07:84:45:98:
                    73:a3:f1:2b:a9:52:cd:b1:ac:bf:a6:fd:81:ca:42:
                    21:12:ae:96:b1:8a:21:f6:91:8e:02:be:02:71:7d:
                    7e:cb:c9:ad:2d:11:29:fa:8b:fb:9b:40:89:3e:0e:
                    76:be:4a:15:9e:6e:37:7c:05:56:da:9e:a4:c4:5e:
                    04:c5:5c:40:9a:f6:67:92:94:2e:36:bb:48:4a:74:
                    ba:a9:b1:ef:1c:74:0c:ff:6a:2f:09:dd:ee:30:83:
                    da:c9:95:33:fc:12:3c:c5:a5:25:59:5c:e2:be:28:
                    31:91:dd:4b:60:02:82:44:d0:b6:52:1c:d1:0a:8a:
                    e3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:43:91:CA:2E:9F:34:6E:4C:CB:06:CB:2C:59:0D:F8:9B:09:A0:22
            X509v3 Authority Key Identifier:
                keyid:A2:78:13:93:22:69:C8:86:9B:20:FD:8F:4F:20:96:AB:54:EB:BB:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31742366465ae7b8aabae7fbfcda60083162897c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/fbc92185cc222c3b969ac2ca17c65dbae1c00f12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/31742366465ae7b8aabae7fbfcda60083162897c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.92.0/22
                  131.221.32.0/22
                  138.255.100.0/22
                  168.195.128.0/22
                IPv6:
                  2803:3b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:f8:ee:bf:39:c6:25:78:88:81:ed:7c:f5:61:4c:eb:bb:94:
         90:e7:46:c0:5b:8f:42:8d:6b:86:51:92:1c:0a:df:fd:6c:a2:
         1d:6b:65:93:39:c2:b8:ab:67:fc:47:fb:53:be:32:26:51:42:
         20:2d:c9:e6:7b:b9:46:8d:71:16:fd:d9:fb:0f:47:7a:40:1d:
         4a:22:24:85:ff:65:5a:b4:c8:8b:41:0d:a3:c5:ce:0f:1f:9d:
         22:6d:fb:0b:12:cf:86:26:f2:72:77:62:68:7b:0b:0a:ef:38:
         c3:32:11:02:09:d5:58:d8:27:fa:c5:ea:1d:4d:da:80:9a:1f:
         a1:ba:89:03:d3:09:21:04:51:06:29:5d:db:0a:13:e4:9d:e3:
         ad:e1:5c:74:1a:ea:e9:79:f9:7e:87:c9:7f:f2:f3:f2:53:80:
         51:b2:fd:ef:2f:b5:27:48:a8:84:cf:0a:cc:d0:69:1a:60:20:
         54:83:6b:03:aa:52:91:4e:25:f9:d8:42:7f:3a:02:57:49:13:
         6d:34:07:cf:ba:5b:61:3e:35:c2:17:d0:c9:49:cd:13:74:25:
         ba:97:0f:a9:36:a7:c0:29:6e:0a:38:53:42:7a:1e:33:5e:2d:
         05:59:f8:37:5b:cd:19:a1:82:db:4a:c6:b2:da:d8:af:a6:d3:
         33:39:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----