Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce3e918b-55e7-477c-95fd-b3920f231e2f/24ca7b7133fb5b3558570f85c6da9b2efbaf22cc.roa
File:                     24ca7b7133fb5b3558570f85c6da9b2efbaf22cc.roa (raw, json)
Hash identifier:          LXPgCbVELKdQXLdVIomqpTYq6TY3DhSQ4Vs5wylUQ1s=
Subject key identifier:   40:5A:57:A6:C0:EB:F1:19:12:64:4C:9F:3C:98:D9:3C:01:FA:F5:C4
Certificate issuer:       /CN=4f67c92421f26cdc0c2acdd73ccec146d8ab511c
Certificate serial:       258881
Authority key identifier: 00:B0:67:6D:F0:2A:44:31:F3:68:0E:02:60:D9:2C:26:43:68:18:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f67c92421f26cdc0c2acdd73ccec146d8ab511c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce3e918b-55e7-477c-95fd-b3920f231e2f/24ca7b7133fb5b3558570f85c6da9b2efbaf22cc.roa
Signing time:             Tue 19 Dec 2023 15:10:59 +0000
ROA not before:           Tue 19 Dec 2023 15:10:59 +0000
ROA not after:            Fri 19 Dec 2025 15:10:59 +0000
asID:                     266811
IP address blocks:        160.20.246.0/24 maxlen: 24
                          2803:58a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459777 (0x258881)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f67c92421f26cdc0c2acdd73ccec146d8ab511c
        Validity
            Not Before: Dec 19 15:10:59 2023 GMT
            Not After : Dec 19 15:10:59 2025 GMT
        Subject: CN=24ca7b7133fb5b3558570f85c6da9b2efbaf22cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:02:16:a1:4f:83:b5:70:ac:6f:39:87:5d:74:
                    9d:af:1b:3d:95:3a:2e:23:9f:91:66:3a:d8:d7:92:
                    9b:d2:0d:e9:3f:09:9f:48:1f:8f:d4:45:e9:e9:94:
                    fa:6a:0c:1e:85:7d:4b:d0:90:fa:0e:1d:e6:23:cd:
                    48:0a:d7:a8:22:d6:e4:e7:9c:c6:11:08:15:ff:be:
                    79:07:72:c1:52:23:2c:6f:04:72:c3:2f:4c:68:a6:
                    35:0c:18:a7:f3:8a:4a:e8:ce:b2:40:62:ae:40:b9:
                    03:14:57:fe:78:29:a6:22:c3:b3:6f:09:35:61:f0:
                    fe:9d:5f:61:8e:c4:dd:55:ca:9f:d4:38:61:49:71:
                    89:48:fa:d1:94:06:98:c5:d5:3d:f0:2b:60:23:45:
                    4a:8b:af:fd:1c:de:7d:67:32:da:b6:d3:a6:50:6c:
                    b7:61:f1:6d:e6:c6:39:76:5d:70:06:7a:47:77:99:
                    cd:30:c8:9d:48:87:32:92:da:48:1e:b3:2a:cc:a9:
                    59:fb:4b:4c:20:2d:3e:e1:09:c9:bc:f9:68:09:7c:
                    5c:e0:e6:1a:cc:6e:3a:06:1a:29:54:21:a4:03:c1:
                    82:9c:40:97:56:92:2f:5d:9d:62:3e:53:f5:4f:2d:
                    7a:3b:1d:f8:20:b7:a6:1c:d2:db:30:1d:6e:20:87:
                    16:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5A:57:A6:C0:EB:F1:19:12:64:4C:9F:3C:98:D9:3C:01:FA:F5:C4
            X509v3 Authority Key Identifier:
                keyid:00:B0:67:6D:F0:2A:44:31:F3:68:0E:02:60:D9:2C:26:43:68:18:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f67c92421f26cdc0c2acdd73ccec146d8ab511c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce3e918b-55e7-477c-95fd-b3920f231e2f/24ca7b7133fb5b3558570f85c6da9b2efbaf22cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce3e918b-55e7-477c-95fd-b3920f231e2f/4f67c92421f26cdc0c2acdd73ccec146d8ab511c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.246.0/24
                IPv6:
                  2803:58a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:c1:ad:ff:b7:5e:0b:36:f9:7f:65:42:fc:b3:1c:b8:fa:
         fa:64:62:27:ff:92:e4:0f:05:8a:5e:b5:af:dd:41:02:63:d6:
         70:5f:fb:ed:3a:86:d4:53:80:7c:cb:20:0c:ab:65:3a:76:90:
         c5:4f:4a:d0:04:29:0f:89:fd:3e:2c:31:11:d6:b3:0a:a7:2b:
         65:19:5e:ed:ac:6d:ed:b6:72:90:99:b2:88:70:ee:c5:a9:23:
         c1:a9:5c:fe:60:2e:ac:20:f0:1c:93:96:58:30:a1:f9:c7:3e:
         1c:f2:60:b9:da:9c:84:7f:7b:85:a3:9b:32:0e:73:9f:df:c4:
         fc:31:d7:f2:cd:10:0e:df:55:c6:8e:b6:6c:dc:74:6d:96:fb:
         ec:47:81:82:09:56:af:0a:e7:2e:1b:0f:8c:e7:c7:42:4c:cc:
         0a:42:1d:0e:2b:03:b2:e2:df:d3:1c:7f:1e:5c:7b:85:6a:3f:
         09:c4:92:c9:23:17:7d:a3:f0:b6:5b:e9:76:f2:51:4e:25:4b:
         4f:53:0e:ed:32:a3:20:1c:92:26:d8:1c:70:86:17:dc:57:20:
         5f:d2:18:29:9b:5a:41:48:62:3b:69:fb:b2:77:a4:41:6c:00:
         0a:4f:13:00:05:34:d4:0a:f0:c4:95:5d:34:83:df:b2:d6:d5:
         b4:9d:78:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----