Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/da096c4f49c468d4f62ba04b46a5050ee994846e.roa
File:                     da096c4f49c468d4f62ba04b46a5050ee994846e.roa (raw, json)
Hash identifier:          /7uUS+VECARKh6E0/TQnFwy5Ri+xTWualEX+wRd2yrw=
Subject key identifier:   C6:04:A2:8F:64:90:D5:6C:A5:36:57:E8:CD:51:2A:18:CF:72:4A:6D
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       25AF67
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/da096c4f49c468d4f62ba04b46a5050ee994846e.roa
Signing time:             Mon 18 Sep 2023 11:04:19 +0000
ROA not before:           Sun 17 Sep 2023 11:04:11 +0000
ROA not after:            Thu 18 Sep 2025 11:04:11 +0000
asID:                     12956
IP address blocks:        181.199.208.0/20 maxlen: 24
                          168.195.56.0/22 maxlen: 24
                          190.98.128.0/18 maxlen: 24
                          2800:240::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2469735 (0x25af67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Sep 17 11:04:11 2023 GMT
            Not After : Sep 18 11:04:11 2025 GMT
        Subject: CN=da096c4f49c468d4f62ba04b46a5050ee994846e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:49:c6:2d:6d:ec:d3:f9:21:e3:66:d7:25:
                    42:96:8e:93:90:63:d8:bb:08:bd:e9:a5:86:78:aa:
                    e7:79:d3:9d:b3:59:47:2f:e8:15:1f:e3:d1:66:aa:
                    53:29:2c:84:7c:8a:07:75:5d:0d:81:a7:ce:dd:74:
                    60:9f:df:9b:b7:32:d4:5a:c9:d2:53:16:2f:e0:0c:
                    2b:b3:e2:c4:d6:69:80:63:f4:ca:e5:ab:94:ff:fd:
                    c6:49:bb:6a:9a:b0:1d:3b:09:5a:df:0f:de:2d:43:
                    f3:c7:59:37:1c:1c:d9:1d:bc:0b:dc:89:53:95:90:
                    cb:e6:7f:cf:e7:ef:5c:30:a2:7b:de:e5:d0:4d:46:
                    ae:f4:80:27:75:0b:31:42:a3:29:fc:0c:05:13:51:
                    7f:bd:06:e5:ad:51:41:e2:b9:88:f1:cc:53:c5:42:
                    aa:87:da:5f:7c:16:49:71:86:2a:a2:19:56:18:ca:
                    c6:59:38:99:8f:48:c6:00:9a:90:db:d9:da:94:0f:
                    6b:7a:90:91:a1:5a:e7:80:f9:43:57:7d:99:63:90:
                    95:e4:6b:01:9e:6a:af:c1:80:13:b1:19:3f:c1:6f:
                    e2:8a:07:da:3d:a6:a0:2b:55:43:16:63:27:b3:1b:
                    c3:d5:55:0a:07:3e:f0:ed:72:12:06:e7:eb:10:24:
                    ab:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:04:A2:8F:64:90:D5:6C:A5:36:57:E8:CD:51:2A:18:CF:72:4A:6D
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/da096c4f49c468d4f62ba04b46a5050ee994846e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.56.0/22
                  181.199.208.0/20
                  190.98.128.0/18
                IPv6:
                  2800:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:0f:1b:5a:01:fe:eb:b9:4a:d2:e7:aa:f7:f3:5b:a7:5d:d8:
         36:6a:d0:3a:20:4c:df:74:a2:4a:56:21:b9:af:d8:ff:64:a4:
         e6:f6:36:24:ba:38:58:7a:dc:c0:c0:af:30:4f:8f:18:b3:59:
         8b:e1:c1:42:8f:30:63:7c:cb:59:f7:ec:45:1d:60:ce:b9:19:
         4d:43:a8:9a:c1:ca:14:7a:0b:a5:06:27:50:45:44:e7:8b:36:
         e6:75:7a:93:e6:ce:b8:aa:34:a6:7f:c8:17:b9:4d:38:51:64:
         40:2b:76:fb:75:c2:89:f1:15:f4:1f:94:3a:ab:5e:04:64:9e:
         cc:04:53:00:d5:ea:88:aa:58:a9:87:05:9e:ab:e8:9e:12:0e:
         35:08:1f:23:3f:16:08:98:aa:2f:ba:41:9a:45:f8:44:4e:3d:
         19:a6:73:88:88:11:48:64:03:e5:77:40:d5:54:3d:ee:b0:e8:
         ec:d4:8a:eb:1c:18:f1:a9:fe:e0:09:6c:c6:eb:49:9d:55:25:
         39:b5:04:b7:62:bf:2a:49:2e:1f:10:12:ee:d5:fc:fe:da:cb:
         14:81:a6:7d:5b:f1:fd:5c:74:f6:e2:1b:66:7b:72:1e:c6:d0:
         89:4d:8c:8b:d6:38:2e:cf:0d:dc:f1:c5:ec:8c:35:69:60:51:
         aa:20:61:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----