Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/fdbd01ac3ed3c40a6ef4b116a26e235a616a72c1.roa
File:                     fdbd01ac3ed3c40a6ef4b116a26e235a616a72c1.roa (raw, json)
Hash identifier:          mk2GQ2wjw1Hnslq9vMZUtfkyNug7DFEKciYrK86Gh3o=
Subject key identifier:   CB:F4:6C:58:52:84:D3:E9:D0:25:4E:95:4A:75:1C:F2:F9:E1:A4:B5
Certificate issuer:       /CN=513aff20d0cdcc2d2629f1e5e517572eb944dba2
Certificate serial:       265084
Authority key identifier: 9A:2F:48:B1:87:04:85:99:98:9C:94:B5:F9:E6:F7:68:CD:30:F5:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513aff20d0cdcc2d2629f1e5e517572eb944dba2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/fdbd01ac3ed3c40a6ef4b116a26e235a616a72c1.roa
Signing time:             Mon 15 Jan 2024 03:32:14 +0000
ROA not before:           Mon 15 Jan 2024 03:32:14 +0000
ROA not after:            Mon 15 Jan 2029 03:32:14 +0000
asID:                     265696
IP address blocks:        131.196.212.0/22 maxlen: 24
                          2801:15:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2510980 (0x265084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513aff20d0cdcc2d2629f1e5e517572eb944dba2
        Validity
            Not Before: Jan 15 03:32:14 2024 GMT
            Not After : Jan 15 03:32:14 2029 GMT
        Subject: CN=fdbd01ac3ed3c40a6ef4b116a26e235a616a72c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:28:0c:b8:26:65:cd:af:d8:27:cc:e9:e2:
                    ec:01:54:15:63:b1:87:39:bf:d8:4f:69:a4:16:34:
                    92:88:df:22:95:e4:b6:0c:de:ab:71:26:fb:57:8a:
                    69:b0:61:5a:e0:72:54:2a:4d:83:45:28:64:dc:ff:
                    ba:42:e3:7f:89:e1:83:ac:75:a7:e0:02:97:b6:f6:
                    8a:8f:9a:cc:42:23:9a:3c:ae:b5:f0:78:2a:9d:b3:
                    f0:79:09:dc:d8:dd:fd:e9:5c:f0:c2:97:2e:14:6b:
                    b4:23:0b:da:65:4d:28:80:4d:4d:24:67:d8:7a:08:
                    94:05:a3:7c:c3:8f:23:51:41:07:55:3b:2a:91:07:
                    5f:9f:1a:33:71:24:66:5e:71:db:d9:df:82:1e:5c:
                    3b:4c:3e:31:c6:de:b7:4e:55:84:50:5a:47:94:b3:
                    a2:73:15:f5:ff:02:3c:ba:f9:9c:c1:0c:f4:d9:88:
                    ac:45:83:fa:af:89:00:ae:5b:19:d9:ac:4a:6b:ea:
                    be:07:e6:37:8e:19:07:22:de:35:53:cd:78:72:58:
                    82:41:d7:80:45:22:21:be:a2:63:41:12:21:5d:df:
                    87:cd:9c:25:82:1c:14:75:f8:82:3a:29:0f:a0:f4:
                    d7:e2:c0:cb:57:a9:bf:c4:55:93:25:3a:48:07:22:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F4:6C:58:52:84:D3:E9:D0:25:4E:95:4A:75:1C:F2:F9:E1:A4:B5
            X509v3 Authority Key Identifier:
                keyid:9A:2F:48:B1:87:04:85:99:98:9C:94:B5:F9:E6:F7:68:CD:30:F5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513aff20d0cdcc2d2629f1e5e517572eb944dba2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/fdbd01ac3ed3c40a6ef4b116a26e235a616a72c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/513aff20d0cdcc2d2629f1e5e517572eb944dba2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.212.0/22
                IPv6:
                  2801:15:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:96:bc:d9:05:a0:39:fa:96:e2:0e:d3:47:53:d5:67:d7:0c:
         36:c1:85:45:be:56:7b:07:1d:7b:02:66:5a:be:70:68:1b:48:
         3b:61:4b:09:b9:9b:84:ef:61:32:67:69:83:fb:e8:3c:77:57:
         e8:63:62:70:5f:a2:45:fc:db:fe:06:55:fb:d2:74:9f:a4:db:
         ef:96:c7:80:30:87:f9:9a:28:ce:60:38:33:be:e1:3f:ca:c8:
         99:fd:d3:31:5f:26:3e:7d:ef:43:cc:63:45:0a:b1:e5:8d:bd:
         a9:c2:cf:8e:63:cf:52:91:58:62:3c:fd:8e:e0:b3:cf:75:35:
         38:60:54:21:4f:5f:6b:42:90:34:80:f5:f3:ba:ba:d3:34:92:
         ff:b8:8b:ce:6b:88:fd:1e:87:71:5a:17:92:39:39:66:b9:90:
         c9:38:e6:ac:36:a7:9a:a2:71:2e:58:e8:c1:43:52:e1:a8:23:
         fe:dc:0e:25:c7:7c:d6:54:37:b5:16:ba:ac:00:bf:87:99:30:
         1a:6a:dd:42:b7:22:a4:23:f6:be:23:1e:7b:e1:b9:90:17:26:
         7e:1e:45:0b:70:af:65:bc:8c:28:16:57:4c:41:93:c0:f8:78:
         97:cb:fa:47:c9:29:c7:1d:c6:45:4a:2f:7d:ab:43:73:1e:20:
         a9:61:7c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----