Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/8792458a95fea3f4c56d4642f2eee94638301493.roa
File:                     8792458a95fea3f4c56d4642f2eee94638301493.roa (raw, json)
Hash identifier:          VZ/moKD8F76MfZDfKwezUZeN0vzjQi3L6CnTB06r5AI=
Subject key identifier:   06:6C:1F:CE:F1:A9:82:0E:A7:EE:54:30:42:96:DC:10:29:01:E5:B7
Certificate issuer:       /CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
Certificate serial:       2794DA
Authority key identifier: A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/8792458a95fea3f4c56d4642f2eee94638301493.roa
Signing time:             Mon 19 Feb 2024 15:09:57 +0000
ROA not before:           Mon 19 Feb 2024 15:09:57 +0000
ROA not after:            Thu 19 Feb 2026 15:09:57 +0000
asID:                     27651
IP address blocks:        181.42.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2594010 (0x2794da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
        Validity
            Not Before: Feb 19 15:09:57 2024 GMT
            Not After : Feb 19 15:09:57 2026 GMT
        Subject: CN=8792458a95fea3f4c56d4642f2eee94638301493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5f:dd:97:85:7a:1b:81:f0:14:01:49:98:c0:
                    1e:79:15:f9:76:84:27:44:cd:54:12:53:70:93:0d:
                    d9:24:d9:b9:7e:e0:88:c3:9b:05:64:a0:d5:32:41:
                    f0:8c:9d:9c:85:ea:28:c5:42:e8:53:f8:1d:bf:28:
                    d8:b0:3d:94:9b:ec:1a:3b:6d:6b:81:69:32:ff:9c:
                    ff:68:b3:7e:48:0c:a7:25:4f:31:7d:48:74:53:be:
                    f3:0f:e0:bd:43:2a:4a:a3:8c:c2:7f:59:b3:40:bd:
                    e6:f8:40:7b:9f:a6:75:9b:82:e3:b3:7c:23:42:1a:
                    36:bf:b5:64:3d:a4:c5:83:7a:8c:84:10:2d:40:0f:
                    77:43:2f:88:2a:76:a0:6a:5a:0f:71:a1:d5:64:aa:
                    9c:f4:62:f2:56:be:8c:44:d2:5c:8e:93:25:11:bc:
                    21:7b:81:04:e3:b1:dd:ce:25:49:b9:ae:1a:8f:9e:
                    39:3d:c0:59:34:aa:65:ed:f5:9f:a7:c5:9c:3a:ec:
                    5e:8e:8a:31:63:53:50:68:de:da:ac:b3:fc:d3:c7:
                    8f:15:06:2f:a9:a2:8f:16:cd:d8:2b:85:85:be:59:
                    93:95:37:c6:d5:3b:5b:e1:db:b2:9a:88:f3:41:c8:
                    d3:a4:c1:8a:4e:ab:de:0f:27:f7:13:7d:80:00:7b:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6C:1F:CE:F1:A9:82:0E:A7:EE:54:30:42:96:DC:10:29:01:E5:B7
            X509v3 Authority Key Identifier:
                keyid:A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/8792458a95fea3f4c56d4642f2eee94638301493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         42:3b:35:62:62:0a:8c:11:60:e9:be:84:4f:be:70:3c:52:59:
         37:7d:1b:40:54:b9:ed:61:93:c5:60:55:8e:92:58:06:b4:98:
         3f:ba:89:9d:89:ac:59:e4:3e:22:31:25:9b:71:50:81:30:2b:
         0e:46:06:b7:26:91:73:c4:1a:2d:b5:b4:0f:44:59:56:e7:09:
         5f:a9:80:e0:2b:16:39:46:c2:bd:da:0e:24:de:af:73:dd:a4:
         bf:ef:e5:83:f7:1a:4c:7d:8e:8a:5b:a2:53:d7:ad:87:9a:77:
         3e:5f:30:bd:7b:7a:63:32:60:ef:43:98:37:74:0c:a8:11:67:
         26:20:a9:2b:eb:3e:40:21:d3:9a:1d:cc:22:c5:40:1e:15:2d:
         35:dc:86:4d:a4:13:e6:c7:2b:46:f8:29:c8:2a:1c:11:7f:07:
         66:d5:f1:77:e4:18:ec:2e:69:61:c9:7f:c7:4c:a4:70:cf:95:
         56:f7:b0:ee:30:49:4b:ed:c7:7f:77:52:d7:9a:35:20:18:34:
         bb:b3:79:91:77:8e:38:1f:3a:52:a7:e0:fe:77:50:0d:df:d8:
         e8:43:40:07:9f:88:05:67:58:2a:5d:6c:2f:4f:5f:4e:7b:e6:
         dd:8f:78:cb:6b:a3:2c:69:72:1f:45:26:d5:5c:01:53:d6:8b:
         dd:06:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----