Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d05da62c-e2ac-4d90-ab0b-db90a1ab2555/7c13e2840c9cf5f159a6ab0af442a8879baf9782.roa
File:                     7c13e2840c9cf5f159a6ab0af442a8879baf9782.roa (raw, json)
Hash identifier:          1NdsKzxmvvC3gEoGW6ypwZkiMrge0OMr2C3ESSZ3Ioc=
Subject key identifier:   C3:E2:1D:27:A7:E2:42:7D:9A:71:05:AD:E3:DC:FE:80:1F:18:6F:88
Certificate issuer:       /CN=1ef479d2e99493bf75084a7da68717b455912f4c
Certificate serial:       2494FB
Authority key identifier: 7D:2F:65:BE:E0:34:8A:F8:EF:69:75:87:F3:E2:06:FA:0F:EE:64:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ef479d2e99493bf75084a7da68717b455912f4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d05da62c-e2ac-4d90-ab0b-db90a1ab2555/7c13e2840c9cf5f159a6ab0af442a8879baf9782.roa
Signing time:             Sun 29 Oct 2023 15:53:48 +0000
ROA not before:           Sun 29 Oct 2023 15:53:48 +0000
ROA not after:            Wed 29 Oct 2025 15:53:48 +0000
asID:                     52342
IP address blocks:        186.148.212.0/22 maxlen: 24
                          2800:9b0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397435 (0x2494fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef479d2e99493bf75084a7da68717b455912f4c
        Validity
            Not Before: Oct 29 15:53:48 2023 GMT
            Not After : Oct 29 15:53:48 2025 GMT
        Subject: CN=7c13e2840c9cf5f159a6ab0af442a8879baf9782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:88:33:a6:88:b7:4b:74:0d:ca:ea:9c:ff:76:
                    6c:2f:4c:10:33:88:c7:62:e0:96:40:1d:5b:cd:cd:
                    d8:2a:e0:b7:80:03:7e:a5:c1:c4:31:3c:7a:92:4d:
                    8d:bb:00:ff:7d:c4:71:30:4c:d9:39:69:0a:7b:b8:
                    80:74:73:fd:5d:d9:af:c7:3e:2d:28:11:0c:c9:5c:
                    43:b0:2b:4c:05:4c:72:63:e8:9a:02:b5:28:bd:a0:
                    72:f0:a8:0e:65:97:99:be:fb:2e:48:e8:cc:45:7d:
                    b9:7a:84:bd:33:8f:36:ef:a9:fa:98:87:86:4a:11:
                    e5:8b:6c:18:70:84:67:54:ad:c9:05:14:ad:1a:64:
                    4d:46:03:4d:82:bd:47:83:94:eb:ee:ff:f4:2a:33:
                    ec:04:3e:dd:b2:d3:89:78:25:80:87:58:d9:10:f7:
                    1c:61:f7:74:ec:79:bd:88:12:c9:14:8b:26:4b:2a:
                    6e:c8:7d:b3:7d:53:d7:0b:23:d2:35:e1:94:13:9a:
                    bb:6b:ab:83:3f:ad:62:0d:cf:2c:85:37:79:26:96:
                    aa:c4:9a:2d:a1:7f:c9:1e:64:95:e2:a4:5e:be:2c:
                    cd:20:16:5c:ed:9d:db:28:88:14:35:53:71:78:37:
                    e9:73:7b:28:aa:58:fc:fa:56:6b:7c:f0:3b:d3:b8:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E2:1D:27:A7:E2:42:7D:9A:71:05:AD:E3:DC:FE:80:1F:18:6F:88
            X509v3 Authority Key Identifier:
                keyid:7D:2F:65:BE:E0:34:8A:F8:EF:69:75:87:F3:E2:06:FA:0F:EE:64:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ef479d2e99493bf75084a7da68717b455912f4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d05da62c-e2ac-4d90-ab0b-db90a1ab2555/7c13e2840c9cf5f159a6ab0af442a8879baf9782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d05da62c-e2ac-4d90-ab0b-db90a1ab2555/1ef479d2e99493bf75084a7da68717b455912f4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.212.0/22
                IPv6:
                  2800:9b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:5d:c6:37:b1:95:0f:75:2d:f8:3f:50:42:e1:73:ff:2d:
         f4:2a:42:c9:5e:98:17:8a:95:b1:6e:50:ca:96:77:15:34:85:
         23:6f:9b:56:05:09:85:5c:77:ed:f9:81:62:08:e0:75:a0:a9:
         af:48:3f:80:34:5b:1d:fc:b6:96:52:30:26:1d:3e:09:ef:2a:
         ec:28:7d:b1:28:db:26:ce:3c:39:79:77:cf:af:16:97:f7:51:
         59:98:96:4a:17:8c:9e:98:bb:91:d2:3c:3a:2c:be:6b:6a:66:
         17:d5:0f:18:75:08:34:cc:8e:77:3b:30:a9:b6:32:5d:5e:e3:
         10:d1:67:27:7a:7f:ab:4b:71:54:ed:fb:75:5d:66:7b:a6:ef:
         ad:18:e9:50:b6:4a:cd:9e:b6:42:d7:7e:45:40:51:6b:d4:7b:
         54:70:bd:1f:92:86:44:79:69:ff:1b:2c:d2:26:8f:39:a1:76:
         9b:59:f5:23:36:cb:68:43:d0:f6:c3:38:ee:40:f1:79:9c:d4:
         09:92:c6:13:ca:c0:ee:e8:3a:23:d2:84:9f:57:40:cb:f3:e2:
         7d:aa:2e:15:d5:c5:e1:0c:0c:dc:ba:2d:f8:c5:f8:ce:b0:f5:
         07:b8:97:d0:a4:8b:10:20:60:e6:e8:59:64:47:d9:c5:db:28:
         c2:57:d9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----