Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/b766278eca6ac2bcf67e2a72a5c2fcf3fdd0a36e.roa
File:                     b766278eca6ac2bcf67e2a72a5c2fcf3fdd0a36e.roa (raw, json)
Hash identifier:          5oc+5Wk5jODwsePT5+E5R2eAIPeVEfInOdG8giizqhs=
Subject key identifier:   DD:F4:32:FE:C8:21:37:C2:B2:3C:23:04:DF:E2:51:AA:99:7F:7F:87
Certificate issuer:       /CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
Certificate serial:       275FA8
Authority key identifier: C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/b766278eca6ac2bcf67e2a72a5c2fcf3fdd0a36e.roa
Signing time:             Tue 13 Feb 2024 20:46:10 +0000
ROA not before:           Tue 13 Feb 2024 20:46:10 +0000
ROA not after:            Fri 13 Feb 2026 20:46:10 +0000
asID:                     52263
IP address blocks:        170.246.156.0/22 maxlen: 24
                          170.150.56.0/22 maxlen: 24
                          138.118.80.0/22 maxlen: 24
                          190.171.96.0/19 maxlen: 24
                          190.113.96.0/19 maxlen: 24
                          200.105.96.0/21 maxlen: 24
                          2803:1300::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2580392 (0x275fa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
        Validity
            Not Before: Feb 13 20:46:10 2024 GMT
            Not After : Feb 13 20:46:10 2026 GMT
        Subject: CN=b766278eca6ac2bcf67e2a72a5c2fcf3fdd0a36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:4b:6b:ea:00:68:62:f2:3e:ee:4c:54:5c:
                    c3:81:90:92:78:88:09:74:78:2c:8b:63:75:d2:c4:
                    5e:34:01:e6:87:85:9a:a4:bc:6d:f5:4c:9e:42:9b:
                    e3:c6:cd:54:18:9c:db:a3:c5:63:03:9a:9d:0b:5b:
                    6c:d4:f3:7f:64:14:ef:34:13:ff:78:bc:f3:bf:1e:
                    8d:09:49:6d:ba:f9:f9:c5:70:d3:4f:75:6f:2b:55:
                    17:bf:f2:78:c7:08:72:81:f4:1f:51:24:4f:c2:7c:
                    19:06:73:c4:d0:11:94:6b:ac:a1:3e:f6:fd:03:5f:
                    82:fd:55:86:d4:b9:3b:41:1a:06:66:6a:07:c8:c4:
                    78:56:78:89:92:6e:64:4a:2d:9a:9e:c5:ea:d5:50:
                    43:71:02:b7:d0:1b:28:58:74:2b:8d:95:65:e5:b5:
                    a2:a5:44:a9:7e:7b:5e:af:18:bb:6e:e8:54:65:18:
                    40:97:c7:63:ee:18:8d:d4:92:ff:fd:9c:aa:57:cb:
                    79:72:23:d5:f8:7c:6d:23:c6:a4:26:d3:65:49:5b:
                    fb:54:81:77:37:84:6f:74:21:3d:66:83:45:6c:27:
                    ba:7a:90:50:44:71:89:b2:79:74:e0:93:e6:7b:4b:
                    9a:b5:6a:48:c1:6e:6f:df:c8:be:9e:f3:7a:29:e0:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F4:32:FE:C8:21:37:C2:B2:3C:23:04:DF:E2:51:AA:99:7F:7F:87
            X509v3 Authority Key Identifier:
                keyid:C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/b766278eca6ac2bcf67e2a72a5c2fcf3fdd0a36e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.80.0/22
                  170.150.56.0/22
                  170.246.156.0/22
                  190.113.96.0/19
                  190.171.96.0/19
                  200.105.96.0/21
                IPv6:
                  2803:1300::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:8d:87:df:2a:87:c1:2b:5d:6c:a6:d7:4c:3f:4f:ff:8e:fc:
         12:23:84:5d:b6:cc:ab:7f:80:75:0b:f3:95:d5:0f:47:10:31:
         d2:bd:c0:25:99:7d:1a:5d:69:6a:29:c2:07:e7:be:2b:c5:e6:
         92:41:32:02:16:ab:75:b4:fe:3a:34:06:7e:57:41:98:b4:85:
         ec:27:54:8a:3e:c8:e4:0d:52:f6:29:57:57:13:85:0a:f9:17:
         69:b7:e3:25:bd:01:94:39:a3:f3:9e:42:fa:11:07:f8:65:90:
         fb:9d:cc:3d:a6:77:b2:f2:a7:ba:cf:a0:f4:06:b2:dc:5c:47:
         07:11:f5:1a:56:8a:73:fe:49:fd:fa:d1:5e:9d:75:2c:7e:21:
         36:14:c8:84:d1:36:3f:53:57:d9:96:2d:16:4f:8e:97:c7:87:
         fa:39:a4:cd:6c:e5:01:86:bb:ef:9e:b2:60:60:96:86:a8:c2:
         41:ad:c6:ad:5f:73:14:4d:98:d8:99:88:e3:14:53:28:37:96:
         f0:95:ca:5f:87:84:0b:eb:70:bc:a1:a4:d9:a1:af:eb:7c:62:
         23:f0:8a:64:05:cb:27:ab:d6:e0:d7:de:25:7d:ce:0b:50:de:
         0d:f8:9e:65:79:1d:5f:b2:cb:74:3c:8f:30:e9:0f:da:2a:21:
         97:20:51:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----