Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/59141d0401d84e44cea9e72dc58dffbb8a43736d.roa
File:                     59141d0401d84e44cea9e72dc58dffbb8a43736d.roa (raw, json)
Hash identifier:          MJd7oKjqxLN8XzjN83I7Dg81zvmwL/Rq/u/93WiNXP0=
Subject key identifier:   7D:AB:66:97:58:DA:B5:65:BA:59:F7:9D:8A:E1:F8:59:DA:8F:69:71
Certificate issuer:       /CN=e69db0dddc072dab05b76f666b2b150d51ad28d1
Certificate serial:       247E95
Authority key identifier: B3:E7:FA:2E:50:D1:99:E0:6D:83:A0:5F:4E:58:DE:04:B3:40:88:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e69db0dddc072dab05b76f666b2b150d51ad28d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/59141d0401d84e44cea9e72dc58dffbb8a43736d.roa
Signing time:             Wed 25 Oct 2023 05:48:53 +0000
ROA not before:           Wed 25 Oct 2023 05:48:52 +0000
ROA not after:            Sat 25 Oct 2025 05:48:52 +0000
asID:                     264635
IP address blocks:        132.255.208.0/22 maxlen: 24
                          167.249.20.0/22 maxlen: 24
                          2803:6780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391701 (0x247e95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69db0dddc072dab05b76f666b2b150d51ad28d1
        Validity
            Not Before: Oct 25 05:48:52 2023 GMT
            Not After : Oct 25 05:48:52 2025 GMT
        Subject: CN=59141d0401d84e44cea9e72dc58dffbb8a43736d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f0:e7:bb:3d:dc:57:c7:bb:43:f2:b9:41:ea:
                    b1:0a:fc:91:3e:36:e6:c1:57:62:01:05:a9:a1:e5:
                    b5:d4:b8:07:89:43:b0:27:c9:32:44:c1:c2:97:a9:
                    2c:bf:6f:c8:b9:d7:b5:97:f5:e7:27:d2:39:00:7a:
                    bd:19:83:47:9a:90:a9:04:c4:ba:4b:78:3e:28:68:
                    3e:bc:19:4f:11:05:b9:ee:22:85:e9:60:70:30:18:
                    38:2c:10:57:40:3c:a5:64:9f:00:11:6b:1b:7c:8e:
                    eb:8b:e4:2e:20:4c:fb:7b:82:85:dc:9e:44:08:4d:
                    c4:8b:40:67:3c:5a:51:0e:89:a0:3c:59:ed:96:33:
                    a1:e8:97:92:f3:de:17:3b:b7:c4:26:45:5b:b2:d4:
                    15:9d:28:40:7b:0d:5b:a1:d3:5c:25:a2:b1:ef:29:
                    7c:2b:2c:a6:21:e3:18:07:f7:16:e3:fe:87:28:b3:
                    47:25:32:96:ba:fd:23:e7:78:72:91:07:ba:a2:e5:
                    24:b3:c5:cd:85:17:75:68:9f:bb:d7:49:c8:d9:70:
                    06:d3:f8:13:be:88:ce:0c:0f:c6:3a:e9:f4:b6:9e:
                    ce:8a:cb:79:f2:e5:4a:d4:c4:2f:7f:bd:26:a9:43:
                    49:17:b8:ba:1d:7a:57:df:cb:81:ee:07:61:af:47:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AB:66:97:58:DA:B5:65:BA:59:F7:9D:8A:E1:F8:59:DA:8F:69:71
            X509v3 Authority Key Identifier:
                keyid:B3:E7:FA:2E:50:D1:99:E0:6D:83:A0:5F:4E:58:DE:04:B3:40:88:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e69db0dddc072dab05b76f666b2b150d51ad28d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/59141d0401d84e44cea9e72dc58dffbb8a43736d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/e69db0dddc072dab05b76f666b2b150d51ad28d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.208.0/22
                  167.249.20.0/22
                IPv6:
                  2803:6780::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:8a:d3:76:7b:13:57:9b:e6:66:f3:a5:b1:ce:b3:40:59:b8:
         91:73:99:29:de:b1:e8:15:bd:c4:de:35:18:c0:1d:16:ab:41:
         d5:aa:12:b5:e5:d9:d9:0f:57:64:b4:2e:54:2b:05:42:20:96:
         47:e1:3a:81:28:02:f5:9f:8e:ae:6b:83:85:ec:d6:c3:36:67:
         ee:72:17:98:71:d8:4c:a1:6a:00:f2:45:ad:67:bf:58:dd:a4:
         bd:de:42:ef:b0:4d:5e:8f:59:5a:e2:3f:07:64:aa:ee:3f:63:
         15:1b:22:a4:fd:c3:87:f7:08:40:9d:fd:bc:1d:50:03:3e:cf:
         56:33:1c:de:a4:cb:02:f0:a3:0f:c3:e2:f0:e7:23:b4:02:59:
         93:d5:29:bb:ac:26:6c:27:3c:8e:a2:46:ad:26:51:ee:d4:00:
         c7:ed:cb:3a:20:74:ee:e7:96:18:ed:21:77:92:ac:89:f8:c4:
         0d:15:2e:d4:f0:b1:b1:89:1b:83:cb:62:d8:fd:b1:59:28:a2:
         0b:4d:ef:7f:c1:2f:4f:fb:5b:16:d7:73:4a:7a:49:f5:c4:d3:
         f7:35:1d:53:dd:f5:0c:42:a3:2d:26:50:03:38:f5:6e:58:ae:
         b7:df:02:93:79:94:e3:db:1b:64:38:b8:5e:7b:3b:2a:88:76:
         19:d9:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----