Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/75c9f47bb1c6ad98a0fde0ba7b79fb9a2a628f26.roa
File:                     75c9f47bb1c6ad98a0fde0ba7b79fb9a2a628f26.roa (raw, json)
Hash identifier:          m8hsVbcSKM0lZleynZyjSE5KHrU0TL736ylCREQGDmA=
Subject key identifier:   01:3A:21:62:77:76:5A:04:7C:D4:9B:6B:D1:11:FF:1E:E6:3D:E7:B9
Certificate issuer:       /CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
Certificate serial:       11445F
Authority key identifier: 45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/75c9f47bb1c6ad98a0fde0ba7b79fb9a2a628f26.roa
Signing time:             Wed 31 Jan 2024 07:30:00 +0000
ROA not before:           Wed 31 Jan 2024 07:30:00 +0000
ROA not after:            Fri 30 Jan 2026 07:30:00 +0000
asID:                     264761
IP address blocks:        168.195.184.0/24 maxlen: 24
                          2803:a0c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131615 (0x11445f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
        Validity
            Not Before: Jan 31 07:30:00 2024 GMT
            Not After : Jan 30 07:30:00 2026 GMT
        Subject: CN=75c9f47bb1c6ad98a0fde0ba7b79fb9a2a628f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:be:b2:d9:5f:e2:d9:b3:8b:ad:3a:c8:1e:
                    11:a7:84:0a:0a:4f:14:34:aa:a6:f5:2d:a5:cd:98:
                    70:ee:bb:fe:70:83:aa:c2:15:73:7a:c9:55:18:3c:
                    13:00:85:8c:64:57:54:60:cd:b2:aa:42:cf:fb:9d:
                    d6:e6:2f:a6:7e:1a:76:4d:8b:1a:f4:e8:cd:98:9b:
                    18:7f:ae:0e:3f:97:80:4b:d2:7e:77:17:3a:aa:e0:
                    9d:73:47:b4:e6:ed:8d:ee:e6:37:13:9b:61:6c:fa:
                    e5:b0:86:ae:20:92:7e:67:ab:3f:ce:6c:cf:03:2c:
                    d2:56:b5:2e:79:54:ba:8a:18:71:f4:78:0d:e8:41:
                    e3:64:7a:d6:27:a0:12:40:80:f0:c6:0b:9a:4a:5e:
                    b4:55:bb:a6:9b:fe:37:0b:51:0c:43:98:71:b2:e5:
                    c6:a3:58:12:90:45:48:87:cf:5b:d0:f0:19:66:03:
                    f9:12:15:a3:b5:85:c2:b4:46:a6:09:5a:d8:63:9a:
                    7a:09:56:ed:be:e2:72:7a:93:7a:00:e1:26:31:f6:
                    38:c8:cf:5b:a9:2f:97:0f:47:cb:7d:1c:e2:fe:d8:
                    46:67:97:ab:56:40:f1:ee:fe:9b:7f:2d:91:88:7d:
                    06:44:98:b5:7a:05:ae:c6:31:95:3b:d3:a4:b4:e1:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3A:21:62:77:76:5A:04:7C:D4:9B:6B:D1:11:FF:1E:E6:3D:E7:B9
            X509v3 Authority Key Identifier:
                keyid:45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/75c9f47bb1c6ad98a0fde0ba7b79fb9a2a628f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/1ab4cfb08cddc1c4955a44753b824141fa054bf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.184.0/24
                IPv6:
                  2803:a0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:54:c5:21:45:bb:c0:a7:4e:72:d8:57:83:95:83:02:fb:
         5c:74:57:96:0f:e2:d8:52:26:c3:61:24:98:7a:34:6c:4a:0e:
         73:a7:85:20:c1:b8:7d:b3:80:de:45:c5:63:fd:26:2b:5b:c3:
         40:f8:cb:6a:54:6e:44:ea:0d:82:33:b3:b7:d6:a8:d6:20:f8:
         96:bc:e4:9d:a5:9f:15:9e:f6:84:74:98:0b:51:32:a6:73:62:
         44:a2:59:41:f4:ca:98:c1:45:d3:83:ec:7a:9a:84:14:e2:69:
         92:eb:57:11:b8:0c:3f:0d:d9:0f:0e:34:92:52:2b:be:53:f1:
         6d:26:a7:dd:3b:28:02:7a:60:70:a5:4f:01:23:7f:95:e7:70:
         45:ed:63:95:6d:73:c1:a4:e8:c5:67:2b:51:3a:6a:f4:bc:5a:
         9f:2c:d7:a7:8f:4f:6e:b6:fb:23:d4:47:e0:6e:23:bb:7d:67:
         38:95:b7:1f:78:e5:9d:c9:c8:c8:36:17:dd:92:32:77:d7:2a:
         95:e1:51:f4:cf:e4:72:16:f0:e0:71:e3:05:d5:25:48:b3:4e:
         ad:77:ff:d8:01:19:af:8d:74:23:63:3d:a0:35:48:0c:42:dd:
         9c:25:49:53:f5:d1:44:e2:3a:1d:99:3b:99:e3:51:e6:ac:c2:
         89:9b:1c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----