Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfcce1d0-8954-4346-b347-fa8ce822a0f3/cbf0e4aba8eb6170b263e852235049231931d60a.roa
File:                     cbf0e4aba8eb6170b263e852235049231931d60a.roa (raw, json)
Hash identifier:          rog4F0ChwNPw4gbAdJu1SwvmflOP4sjRHeirhHsEOCA=
Subject key identifier:   A0:F3:40:E9:3A:70:52:47:D0:E4:7D:3E:A7:35:09:19:42:C2:2D:96
Certificate issuer:       /CN=103ab3fbf103137277c0aa7e23a1e3bf01fe959c
Certificate serial:       221CD8
Authority key identifier: E7:88:37:0C:03:91:22:EA:B2:F3:D9:F0:75:19:C5:41:51:04:02:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103ab3fbf103137277c0aa7e23a1e3bf01fe959c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfcce1d0-8954-4346-b347-fa8ce822a0f3/cbf0e4aba8eb6170b263e852235049231931d60a.roa
Signing time:             Tue 09 Apr 2024 21:04:59 +0000
ROA not before:           Tue 09 Apr 2024 21:04:59 +0000
ROA not after:            Thu 09 Apr 2026 21:04:59 +0000
asID:                     270012
IP address blocks:        200.39.148.0/23 maxlen: 24
                          2803:c9e0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235608 (0x221cd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103ab3fbf103137277c0aa7e23a1e3bf01fe959c
        Validity
            Not Before: Apr  9 21:04:59 2024 GMT
            Not After : Apr  9 21:04:59 2026 GMT
        Subject: CN=cbf0e4aba8eb6170b263e852235049231931d60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:26:cf:b2:c7:3f:3f:7b:4c:84:3e:86:0f:
                    5d:02:4a:35:c5:f5:bc:02:e2:b5:1a:18:7e:11:30:
                    15:c0:a9:02:67:1b:68:08:74:ab:18:c4:b6:b3:98:
                    e6:3f:10:8a:c5:11:c4:7e:78:a6:99:b6:77:9a:f3:
                    5d:0b:50:10:2d:16:63:ba:c9:4a:2d:e5:97:32:2e:
                    f7:61:f8:38:4d:d8:ec:3d:a9:b4:a4:ec:a9:f4:2e:
                    b9:3b:23:32:53:51:7c:d3:48:28:05:fa:c7:1b:c0:
                    92:47:d1:66:fa:d6:7b:08:bb:ff:b8:7a:d8:a4:c2:
                    76:2c:e7:93:21:93:bf:17:96:59:18:86:5b:bd:89:
                    0b:e0:16:ef:c8:70:ce:a1:51:2a:3c:3c:88:68:a4:
                    a1:e9:cd:72:11:72:6c:4f:e0:63:e0:c8:fd:ed:47:
                    07:b0:60:c9:9a:93:da:a3:16:08:f5:b5:95:53:bf:
                    d9:aa:b0:00:8b:e0:d5:4f:a7:fa:25:29:55:a9:e1:
                    d7:5a:74:a8:80:88:10:a6:65:f4:90:92:d0:ea:a4:
                    54:58:57:5b:7a:67:d0:ef:41:43:6f:c3:b9:c3:75:
                    25:9f:d3:a7:c9:75:7f:fb:a5:b3:3b:69:04:99:b0:
                    c1:19:89:2e:9b:51:4e:a9:c6:a6:8e:89:cf:bf:3b:
                    ec:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F3:40:E9:3A:70:52:47:D0:E4:7D:3E:A7:35:09:19:42:C2:2D:96
            X509v3 Authority Key Identifier:
                keyid:E7:88:37:0C:03:91:22:EA:B2:F3:D9:F0:75:19:C5:41:51:04:02:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103ab3fbf103137277c0aa7e23a1e3bf01fe959c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfcce1d0-8954-4346-b347-fa8ce822a0f3/cbf0e4aba8eb6170b263e852235049231931d60a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfcce1d0-8954-4346-b347-fa8ce822a0f3/103ab3fbf103137277c0aa7e23a1e3bf01fe959c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.148.0/23
                IPv6:
                  2803:c9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:69:01:94:65:58:70:9c:4f:63:8f:24:15:20:27:fe:95:44:
         2c:0c:ec:87:80:19:0b:15:13:b4:17:b1:8b:44:63:89:ae:0d:
         33:f7:7d:73:ea:d7:ba:f5:f0:02:0d:b9:fe:bd:fc:93:98:8d:
         1c:af:90:05:1a:fa:eb:a1:3b:3b:6a:90:89:68:59:64:f5:a6:
         20:7b:73:4d:ef:11:0e:58:5b:98:55:1a:38:58:25:0b:0c:f5:
         f7:f9:77:87:ff:5a:49:be:a5:14:3f:ff:8a:9c:77:1a:07:07:
         59:d6:6f:86:64:53:1e:71:4a:5c:d1:64:71:ac:60:16:36:ca:
         28:87:eb:4b:07:42:6c:07:18:1e:1f:1e:ec:94:31:24:9c:ee:
         4c:4b:88:eb:06:05:f2:73:8c:7e:6c:20:17:bd:e6:84:e4:63:
         d2:ef:da:9f:01:1b:06:e3:55:9e:d3:69:99:c0:ac:4e:0c:04:
         09:5b:8d:c5:35:5b:33:fd:47:8c:40:70:39:31:70:12:33:2b:
         58:35:b0:33:81:e5:f9:ca:8c:24:28:da:55:3e:77:97:c8:66:
         cf:b8:24:4d:36:ef:08:8a:db:ce:91:98:66:b8:c8:e6:d7:cf:
         44:cf:63:33:92:5c:9b:cd:4f:db:0b:aa:76:18:91:5c:49:a9:
         9e:f0:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----