Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0bc0435-bf33-4b3f-9b93-c81fa0946334/558a9bf7c2b72532037101d96279316f05b2f349.roa
File:                     558a9bf7c2b72532037101d96279316f05b2f349.roa (raw, json)
Hash identifier:          A7j88gAjDSfGKV6B8UAufNYG06m/p3DjwhkT4c3btMQ=
Subject key identifier:   0D:DD:FF:27:F1:37:36:60:EB:8F:ED:33:68:21:C6:A5:23:2B:E8:54
Certificate issuer:       /CN=62dd925100bd51d8e62e06673d17e05527fce49d
Certificate serial:       075578
Authority key identifier: 89:86:39:A9:4C:CF:51:93:F2:FD:26:3A:22:A2:7E:3D:6C:CA:F3:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62dd925100bd51d8e62e06673d17e05527fce49d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0bc0435-bf33-4b3f-9b93-c81fa0946334/558a9bf7c2b72532037101d96279316f05b2f349.roa
Signing time:             Thu 15 Feb 2024 15:01:26 +0000
ROA not before:           Thu 15 Feb 2024 15:01:26 +0000
ROA not after:            Sun 15 Feb 2026 15:01:26 +0000
asID:                     11947
IP address blocks:        196.29.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480632 (0x75578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62dd925100bd51d8e62e06673d17e05527fce49d
        Validity
            Not Before: Feb 15 15:01:26 2024 GMT
            Not After : Feb 15 15:01:26 2026 GMT
        Subject: CN=558a9bf7c2b72532037101d96279316f05b2f349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:45:11:43:09:1a:00:6c:3a:fb:e4:f2:3c:52:
                    a2:53:3e:fd:2f:53:c9:e3:e5:65:b4:73:72:bf:b0:
                    75:a8:8b:b2:22:ca:86:93:7c:ac:e0:f4:27:dd:d9:
                    88:3b:ac:f5:ed:c7:51:3d:0e:6e:e7:60:a9:59:30:
                    44:a1:a9:ab:ac:b6:c1:6f:48:2a:05:20:37:4c:cf:
                    a5:34:3e:cf:22:3e:38:51:af:ca:59:6d:24:9d:c1:
                    ab:b0:ce:ee:9a:48:5e:0a:21:7f:82:90:f2:f8:25:
                    41:ba:d8:fb:52:6c:6f:2e:b2:47:d7:3b:f7:e3:60:
                    e2:71:c4:2a:42:de:9f:57:ae:05:aa:b2:93:ce:1c:
                    92:72:33:53:7b:e8:40:78:b4:ee:c0:7c:a0:b2:1f:
                    ea:68:ff:59:43:c0:fc:95:1d:d0:27:0e:ae:4e:80:
                    c8:c1:b3:64:f9:e2:6e:d5:a4:0c:46:af:7b:be:f3:
                    ad:db:42:82:1f:32:84:ce:0a:e8:fa:8d:bb:62:dd:
                    3e:a6:34:ed:22:19:f3:2a:69:e8:0c:62:97:ca:e5:
                    7b:a0:26:59:d3:14:e3:58:43:0e:9a:39:66:35:33:
                    8f:b3:61:4e:1f:4e:59:aa:e1:e0:c4:e3:c2:d0:b7:
                    86:c1:d9:f6:f9:52:33:d3:01:91:b2:5a:4d:e5:57:
                    85:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DD:FF:27:F1:37:36:60:EB:8F:ED:33:68:21:C6:A5:23:2B:E8:54
            X509v3 Authority Key Identifier:
                keyid:89:86:39:A9:4C:CF:51:93:F2:FD:26:3A:22:A2:7E:3D:6C:CA:F3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62dd925100bd51d8e62e06673d17e05527fce49d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0bc0435-bf33-4b3f-9b93-c81fa0946334/558a9bf7c2b72532037101d96279316f05b2f349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0bc0435-bf33-4b3f-9b93-c81fa0946334/62dd925100bd51d8e62e06673d17e05527fce49d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.29.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:5c:40:07:5e:9d:b5:1a:7f:3e:e4:84:98:bf:53:a1:c7:ff:
         3f:c0:85:bf:2a:86:cb:3e:da:eb:56:70:01:94:f3:04:2c:cb:
         c6:a3:51:39:5c:04:37:e8:53:12:d4:69:6c:20:05:da:97:8b:
         f8:c4:e2:8c:3c:54:85:a9:45:95:91:d8:10:e3:19:8b:89:ea:
         49:f0:a2:4c:eb:0b:cd:34:a2:94:33:0d:97:e1:7e:cb:35:27:
         c6:3d:24:b7:7d:76:9a:b7:f7:60:38:cf:6d:c4:af:49:17:83:
         b5:89:5b:25:01:de:9b:30:b9:18:bc:93:9b:24:07:d1:15:67:
         b9:23:7b:5c:48:e5:44:65:e9:a4:0c:b5:33:28:76:32:05:e3:
         8f:eb:f0:79:97:35:76:36:c2:29:4a:28:78:8f:27:0e:75:2e:
         61:e3:5a:46:83:fd:12:02:fb:4c:7d:6e:99:a0:1f:ed:8f:62:
         54:fe:9d:74:4c:bd:4a:7f:32:04:72:7c:f4:55:27:c0:75:27:
         93:55:0b:6a:63:4a:8e:ba:05:7a:ce:5f:73:17:29:a3:9e:10:
         44:0f:af:3b:39:0f:29:47:c7:e4:ce:af:91:60:b2:e3:d6:fa:
         2d:9b:43:ae:3e:8a:00:1c:5e:31:ee:c0:4e:f9:c6:7d:ff:d5:
         61:0d:68:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----