Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be177ad9-6073-4d5d-8783-4c9a57d11a43/59f9980e64339df44e04def5f254c516b285fad3.roa
File:                     59f9980e64339df44e04def5f254c516b285fad3.roa (raw, json)
Hash identifier:          sCNzKgIKmJIzjwL5fKCXgFVhSxQtY0KUMgfLoM0VfNQ=
Subject key identifier:   B6:D9:21:B0:FA:71:20:FB:06:7F:2D:54:A4:A4:7E:ED:5D:C2:26:4B
Certificate issuer:       /CN=8b35289194208004e4cde6c265343d055a0a80df
Certificate serial:       11A1C3
Authority key identifier: C1:E5:79:C1:BF:76:78:FF:44:79:07:B6:7A:9E:61:43:07:BC:37:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b35289194208004e4cde6c265343d055a0a80df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be177ad9-6073-4d5d-8783-4c9a57d11a43/59f9980e64339df44e04def5f254c516b285fad3.roa
Signing time:             Fri 19 Jan 2024 07:30:11 +0000
ROA not before:           Fri 19 Jan 2024 07:30:11 +0000
ROA not after:            Sun 18 Jan 2026 07:30:11 +0000
asID:                     272034
IP address blocks:        181.233.76.0/22 maxlen: 24
                          2803:f510::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155523 (0x11a1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b35289194208004e4cde6c265343d055a0a80df
        Validity
            Not Before: Jan 19 07:30:11 2024 GMT
            Not After : Jan 18 07:30:11 2026 GMT
        Subject: CN=59f9980e64339df44e04def5f254c516b285fad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ea:1b:c0:d9:6e:e2:a1:da:2c:f0:26:a2:47:
                    2f:e5:4a:c5:06:f9:dd:21:8c:dd:24:a9:1e:6a:12:
                    b7:19:a5:c3:dd:b0:ab:a3:4a:32:ae:20:40:8e:5e:
                    06:ea:1c:fb:4b:93:5d:53:cc:be:86:07:03:cd:f1:
                    a2:85:d0:32:2a:01:de:fe:c6:b2:44:e6:cf:58:a0:
                    a0:80:db:19:68:ff:87:da:61:74:38:a7:34:66:8f:
                    d0:a5:53:ff:c3:e0:2b:fc:b1:5d:9a:30:10:86:26:
                    7c:34:e2:70:fc:56:69:ab:cb:fc:5e:e3:5a:f8:11:
                    92:92:ab:4c:75:93:85:28:71:17:38:56:f8:81:64:
                    d3:77:18:13:63:d9:ee:2e:f2:9d:52:8e:01:57:40:
                    fb:c8:64:3d:0f:d9:d0:9a:50:8f:49:bc:8e:91:a8:
                    af:9e:a4:a5:71:f1:f5:fd:6f:47:21:7b:c8:4e:00:
                    21:0e:23:9c:66:91:94:bb:e7:c4:c0:6f:9f:2e:52:
                    27:79:94:f0:9e:55:a5:05:84:0c:c5:83:97:05:d5:
                    44:51:cb:df:fa:59:5a:c5:0f:66:b6:e6:6e:b3:38:
                    d6:a7:26:fc:64:f1:5d:32:29:85:a3:5f:2e:42:ca:
                    9e:71:44:f5:bf:86:df:b7:d9:08:29:bf:65:82:74:
                    1c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D9:21:B0:FA:71:20:FB:06:7F:2D:54:A4:A4:7E:ED:5D:C2:26:4B
            X509v3 Authority Key Identifier:
                keyid:C1:E5:79:C1:BF:76:78:FF:44:79:07:B6:7A:9E:61:43:07:BC:37:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b35289194208004e4cde6c265343d055a0a80df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be177ad9-6073-4d5d-8783-4c9a57d11a43/59f9980e64339df44e04def5f254c516b285fad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be177ad9-6073-4d5d-8783-4c9a57d11a43/8b35289194208004e4cde6c265343d055a0a80df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.76.0/22
                IPv6:
                  2803:f510::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:cc:db:e4:47:15:dd:05:e0:03:3d:5c:df:3f:67:c9:e2:c1:
         53:49:00:73:00:93:4d:49:0b:33:2f:a2:61:82:30:ee:21:73:
         d3:5b:47:8f:d4:87:af:d4:10:42:68:56:e4:b0:62:b0:7f:28:
         14:ff:cc:5c:0f:97:5c:78:f6:e8:8f:ef:8d:40:0a:ba:77:eb:
         1c:2b:3e:66:46:c9:36:3f:8d:df:26:59:3b:88:31:65:82:e6:
         eb:e4:87:ee:3a:b4:80:03:c3:ac:63:2f:ed:14:0c:bb:fc:5f:
         cd:9a:08:eb:f6:26:1c:71:aa:0f:c4:ae:9e:93:2c:b3:06:3b:
         fe:78:48:ac:87:94:6b:9d:44:a0:fe:e3:bf:96:76:d8:ce:af:
         a4:ec:12:45:91:d8:be:bf:5a:b4:f7:b2:8f:00:60:3b:35:21:
         74:15:f6:21:6f:37:54:75:1f:ac:01:80:ea:f4:04:27:c6:58:
         c3:17:a1:1f:d7:98:d1:66:57:30:fd:69:bd:9a:b2:f0:f0:a4:
         b0:3b:ca:d5:ba:ef:ef:5b:38:72:f0:6c:7f:6e:c9:94:c4:06:
         a6:6c:d7:06:97:cb:c2:2c:32:e0:62:22:b9:2d:ce:93:0a:37:
         94:b0:aa:31:35:ab:11:08:50:56:ba:7b:73:c6:22:6f:22:da:
         13:b3:ef:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----