Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd295502-f344-44f2-9e00-bbbf2f1e50d9/3747f7b470977e0b6420e579ab863d0c83c8eff1.roa
File:                     3747f7b470977e0b6420e579ab863d0c83c8eff1.roa (raw, json)
Hash identifier:          /ZW3ZmLwFW7TNjSVEo56QgN+a9rjPjDe+wH/gHoO7mo=
Subject key identifier:   5A:49:12:BD:C8:DA:09:3F:35:4B:F7:D7:77:0C:7F:3C:21:29:5A:8A
Certificate issuer:       /CN=184d3b86d27c4f19e6eba3cae294a8f07eec2a0c
Certificate serial:       1197D1
Authority key identifier: 84:96:20:9C:D7:47:06:AF:C2:79:A2:8D:98:41:D2:8D:9A:E4:A3:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/184d3b86d27c4f19e6eba3cae294a8f07eec2a0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd295502-f344-44f2-9e00-bbbf2f1e50d9/3747f7b470977e0b6420e579ab863d0c83c8eff1.roa
Signing time:             Sun 10 Mar 2024 08:30:01 +0000
ROA not before:           Sun 10 Mar 2024 08:30:01 +0000
ROA not after:            Tue 10 Mar 2026 08:30:01 +0000
asID:                     61519
IP address blocks:        168.121.32.0/22 maxlen: 24
                          2803:3540::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152977 (0x1197d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184d3b86d27c4f19e6eba3cae294a8f07eec2a0c
        Validity
            Not Before: Mar 10 08:30:01 2024 GMT
            Not After : Mar 10 08:30:01 2026 GMT
        Subject: CN=3747f7b470977e0b6420e579ab863d0c83c8eff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:90:36:4d:2f:ef:b0:a1:9d:5f:e5:18:62:
                    60:fe:79:81:c0:f9:c1:65:9c:e2:0d:b8:58:dd:cc:
                    c9:ba:1f:69:82:fd:d5:52:3d:1d:eb:85:ce:9d:a1:
                    de:e6:be:d5:90:45:cf:e2:f3:7c:46:1d:9e:50:4d:
                    59:97:63:53:86:5d:74:fc:b0:89:01:e4:78:32:02:
                    16:85:0c:b3:01:62:4b:e3:85:c2:6f:c4:b7:0d:b9:
                    2b:17:0d:f9:c5:03:48:90:94:a9:2c:28:eb:08:44:
                    ed:c7:81:0c:dd:e0:8b:cd:53:1a:01:03:de:59:24:
                    d5:a1:5e:9d:ef:57:99:bb:86:3e:e2:f7:3c:f2:3b:
                    83:c9:5b:23:aa:c6:bf:2e:ac:2a:01:4a:f4:7c:83:
                    2b:2b:07:91:ed:6c:0d:ab:28:f0:90:b7:56:4c:0e:
                    1f:c4:20:94:56:e8:37:33:d5:80:51:fd:4a:40:61:
                    be:32:71:e1:4a:5e:5f:c2:84:ad:09:0f:ea:36:ec:
                    f6:df:5d:16:a8:5d:40:39:4a:74:c7:90:12:85:9d:
                    3c:93:39:34:8a:1d:3c:27:cc:ae:3b:04:86:8c:ae:
                    95:b7:e9:33:ee:cc:73:de:be:d0:d4:30:98:4f:3a:
                    b5:a1:f1:65:e5:60:0e:63:76:73:02:3d:1d:36:ac:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:49:12:BD:C8:DA:09:3F:35:4B:F7:D7:77:0C:7F:3C:21:29:5A:8A
            X509v3 Authority Key Identifier:
                keyid:84:96:20:9C:D7:47:06:AF:C2:79:A2:8D:98:41:D2:8D:9A:E4:A3:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/184d3b86d27c4f19e6eba3cae294a8f07eec2a0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd295502-f344-44f2-9e00-bbbf2f1e50d9/3747f7b470977e0b6420e579ab863d0c83c8eff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd295502-f344-44f2-9e00-bbbf2f1e50d9/184d3b86d27c4f19e6eba3cae294a8f07eec2a0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.32.0/22
                IPv6:
                  2803:3540::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:82:71:d3:1d:08:4f:25:86:d5:f9:a7:fe:57:3d:c0:73:0f:
         2d:32:f5:f0:c2:a2:45:5f:1d:98:08:51:ff:22:5d:2b:46:19:
         34:40:64:18:82:c6:dd:72:50:b7:54:d5:da:11:55:f3:2b:31:
         99:bd:fd:f8:bc:27:bb:22:5f:49:d0:c8:c3:d5:60:41:2e:5e:
         d3:e2:45:3e:39:2b:88:cc:48:08:e3:c6:39:5e:47:62:d1:cd:
         3a:c0:4a:ce:b4:59:b0:2a:1b:80:fb:7c:f7:c5:8a:2a:32:41:
         99:e4:38:dc:38:26:c4:b6:1c:6f:ed:fa:49:db:1d:ce:33:7f:
         dd:0c:d3:15:29:08:14:af:f4:e9:8d:25:22:96:c5:a7:ca:32:
         1d:5c:3e:99:0b:91:ad:da:df:35:d1:0b:b3:da:71:47:85:9d:
         ff:56:8c:ae:99:c6:84:08:3c:6d:b2:ee:22:57:e5:5f:4d:24:
         ba:0c:26:06:81:cb:42:f5:fc:5e:70:74:00:37:b0:74:50:d3:
         4e:aa:3b:5c:08:df:be:e8:94:15:5f:b4:97:e2:af:4b:f7:92:
         06:db:ff:b4:3d:13:8c:c9:ae:63:4e:e2:b4:8b:a0:0d:a7:ba:
         bc:bb:13:f2:13:c0:9b:c5:a7:54:18:3b:cb:fc:b9:8e:46:8d:
         5d:2e:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----