Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/a7d6c2e2c4400a6242de54c24ec9825d242f6a17.roa
File:                     a7d6c2e2c4400a6242de54c24ec9825d242f6a17.roa (raw, json)
Hash identifier:          SRha5GegvceE5+IuPytHWqgxpaQxT07tvIZhQQyfcw0=
Subject key identifier:   F6:CC:21:53:0B:D1:7F:2E:17:D4:87:A6:F0:D5:B6:01:D5:75:53:2B
Certificate issuer:       /CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
Certificate serial:       27A3C6
Authority key identifier: A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/a7d6c2e2c4400a6242de54c24ec9825d242f6a17.roa
Signing time:             Mon 19 Feb 2024 15:19:04 +0000
ROA not before:           Mon 19 Feb 2024 15:19:04 +0000
ROA not after:            Thu 19 Feb 2026 15:19:04 +0000
asID:                     27925
IP address blocks:        186.11.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2597830 (0x27a3c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
        Validity
            Not Before: Feb 19 15:19:04 2024 GMT
            Not After : Feb 19 15:19:04 2026 GMT
        Subject: CN=a7d6c2e2c4400a6242de54c24ec9825d242f6a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:70:5a:e6:1c:7d:e9:69:d1:46:9d:cf:90:
                    f3:7c:fb:85:8d:3a:67:7b:b8:b7:b4:d0:10:20:b2:
                    5b:a2:0f:e7:ef:e0:d3:92:4f:9e:ad:52:65:da:8f:
                    d4:48:0d:16:bb:26:58:e8:d1:55:79:84:ad:5b:52:
                    4f:e8:fe:b9:11:a7:b5:63:99:37:f4:ca:e7:2c:fc:
                    df:b2:d8:f9:be:6b:a1:94:37:a9:e2:8a:c2:00:9b:
                    60:b7:ee:86:cc:88:6e:47:65:c9:40:cd:3f:3f:00:
                    6e:06:34:49:1c:f6:6f:c7:ca:e5:60:82:77:bc:9e:
                    ad:e6:b6:60:82:e2:0c:23:48:f5:ea:5c:49:eb:b9:
                    dc:92:38:20:44:60:b0:d3:9e:ff:7b:ff:89:9d:09:
                    1a:ac:bf:f3:95:36:fd:b8:b2:61:6e:77:e2:33:34:
                    be:76:7a:89:86:8d:20:cb:86:c0:8f:28:c9:c1:a7:
                    d2:dd:1c:de:ad:54:ea:eb:85:b6:93:43:9b:f4:7b:
                    ca:f0:cf:9c:ad:db:74:86:3f:af:0c:7a:4b:17:13:
                    e1:ab:d2:18:a0:e8:ed:93:71:88:99:5f:7f:13:e3:
                    83:68:f0:6e:5c:e8:c0:98:5d:fc:5c:b0:32:02:b7:
                    2a:f5:1b:e4:6d:f7:65:c6:08:f6:52:a6:83:97:ec:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CC:21:53:0B:D1:7F:2E:17:D4:87:A6:F0:D5:B6:01:D5:75:53:2B
            X509v3 Authority Key Identifier:
                keyid:A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/a7d6c2e2c4400a6242de54c24ec9825d242f6a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.11.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3a:d6:5a:e8:f8:ee:78:e8:bf:cb:60:1e:94:25:de:e0:18:15:
         94:fb:14:2c:04:1a:5b:bb:87:e4:06:2c:9c:bd:f5:20:52:71:
         40:78:9c:e2:c7:4b:7a:cb:fa:b4:b4:bb:db:6c:58:84:bf:bf:
         ae:b2:4a:38:ba:3b:a0:21:1f:e2:ce:00:44:db:e9:45:b1:4b:
         75:91:f9:c9:64:0d:ef:59:6a:14:c9:3b:ed:fc:4d:10:e2:07:
         af:6d:ec:3c:57:4c:aa:ab:1c:a9:d3:ae:cb:45:22:1f:4b:8b:
         da:18:5a:ce:53:9d:ad:55:f1:8a:3d:f4:4e:9f:d2:c0:f9:8c:
         a1:0b:12:0e:16:f9:02:11:cf:25:a6:7d:92:3d:6b:7f:0e:43:
         b4:44:af:e7:d5:97:3e:4e:3c:d9:c3:98:12:9f:24:85:6a:7e:
         f0:cb:f6:64:a6:5e:53:6b:8e:72:f4:ee:96:3c:d8:6d:a5:29:
         0b:29:d5:f9:44:63:e3:cb:2c:4e:5a:c4:e9:5c:f8:54:08:75:
         0a:c2:fd:b9:3a:9c:29:eb:fb:a8:d4:48:7f:28:b0:d0:3c:fe:
         49:96:1e:f9:53:cf:5a:8e:64:7e:1f:97:40:10:b2:56:6b:cf:
         95:8f:45:3d:ae:d3:1d:94:3b:ce:1e:fe:eb:f4:13:ec:b9:1c:
         e0:3c:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----