Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d737c8e5-cb41-4fb2-b6cc-3ca701e3900d/42002b1159ea8dbc834bba462fa95cc74ee86bc0.roa
File:                     42002b1159ea8dbc834bba462fa95cc74ee86bc0.roa (raw, json)
Hash identifier:          4NfFlyCyLT9c4PsfZW44ICvUKDTfypZsqoPddJXFGkQ=
Subject key identifier:   D0:E8:DD:34:46:EB:8C:DC:41:2C:57:0C:B5:98:16:2D:81:51:F3:3A
Certificate issuer:       /CN=291eabb216c39d9d6cc2d1dc5a50ad142670df98
Certificate serial:       12ADC0
Authority key identifier: 76:83:39:AA:60:E0:A5:33:3C:70:15:93:6C:55:82:64:03:14:EC:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/291eabb216c39d9d6cc2d1dc5a50ad142670df98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d737c8e5-cb41-4fb2-b6cc-3ca701e3900d/42002b1159ea8dbc834bba462fa95cc74ee86bc0.roa
Signing time:             Sat 20 May 2023 08:30:00 +0000
ROA not before:           Fri 19 May 2023 08:30:00 +0000
ROA not after:            Sun 18 May 2025 08:30:00 +0000
asID:                     52468
IP address blocks:        131.255.16.0/24 maxlen: 24
                          2803:2410::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1224128 (0x12adc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291eabb216c39d9d6cc2d1dc5a50ad142670df98
        Validity
            Not Before: May 19 08:30:00 2023 GMT
            Not After : May 18 08:30:00 2025 GMT
        Subject: CN=42002b1159ea8dbc834bba462fa95cc74ee86bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:95:9c:a7:bf:87:e2:de:44:b7:bf:be:68:04:
                    d7:10:f2:a5:a3:ef:57:25:ba:a1:1a:98:bc:1c:df:
                    ea:87:7d:58:e9:72:13:56:42:3f:11:f4:99:51:73:
                    70:68:b8:29:b8:71:bd:92:96:8b:26:54:40:74:d8:
                    c2:19:32:f0:e3:2b:af:d8:cc:f1:3c:b4:71:fb:a2:
                    29:dd:fb:61:12:d4:76:c3:73:b6:87:24:cf:b3:51:
                    a8:54:6b:23:a8:fd:eb:8c:2a:c4:b6:98:e5:4f:41:
                    9d:43:f1:be:8e:95:48:ad:b8:e5:54:78:f5:a9:09:
                    41:91:cf:7c:2d:2f:de:91:f4:79:89:ef:0d:c3:0a:
                    06:95:dd:23:b0:e1:2c:18:0f:26:a2:60:c2:fa:a1:
                    67:0f:33:df:de:92:9f:cf:41:0b:ea:7a:b7:5d:ab:
                    9c:5a:c9:ce:87:c7:5f:36:3c:79:54:7e:6a:e3:f0:
                    60:c3:46:12:90:1d:fd:c2:19:0e:f7:62:cf:45:71:
                    2a:9c:1d:1e:a1:4c:ee:76:9e:7d:3b:2f:23:74:52:
                    de:7e:aa:bd:48:4f:19:c3:19:17:0f:da:35:1b:d8:
                    52:01:c2:4b:2a:3f:70:f0:48:d7:41:ca:5c:47:7c:
                    09:a1:18:8a:dc:ce:d7:ac:46:76:cd:35:a6:f2:a5:
                    0e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E8:DD:34:46:EB:8C:DC:41:2C:57:0C:B5:98:16:2D:81:51:F3:3A
            X509v3 Authority Key Identifier:
                keyid:76:83:39:AA:60:E0:A5:33:3C:70:15:93:6C:55:82:64:03:14:EC:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/291eabb216c39d9d6cc2d1dc5a50ad142670df98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d737c8e5-cb41-4fb2-b6cc-3ca701e3900d/42002b1159ea8dbc834bba462fa95cc74ee86bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d737c8e5-cb41-4fb2-b6cc-3ca701e3900d/291eabb216c39d9d6cc2d1dc5a50ad142670df98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.16.0/24
                IPv6:
                  2803:2410::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:89:ce:4b:36:6b:b4:4d:e0:13:39:14:f7:a8:94:ee:42:f1:
         a7:c4:06:73:8b:72:07:5d:24:fb:43:05:47:2b:6c:a0:96:3d:
         26:a0:77:33:dc:b9:f5:ca:20:e9:08:7a:b2:d4:c7:e4:0c:3a:
         15:04:33:5b:f8:de:7e:15:eb:e5:3a:6b:9b:7b:9a:a4:bf:2d:
         f2:05:e1:4e:30:35:f5:d1:27:ac:0d:1a:7c:ee:16:38:68:ca:
         7c:c0:61:1c:11:1e:93:cd:be:18:f8:2a:6f:57:c9:8d:08:ab:
         bf:4f:c7:29:a0:ec:8c:57:2b:36:8e:13:bb:b8:f5:18:03:e7:
         ca:76:8d:8d:db:ff:21:3b:a7:93:f2:64:ae:54:fa:e6:52:5d:
         00:99:b6:f7:a5:27:ca:10:e4:fb:bd:70:7e:87:1d:48:56:bb:
         57:0a:ca:2c:40:29:5d:61:05:ba:f0:1a:24:04:c6:d3:54:1d:
         38:64:32:0f:76:3b:91:3b:68:bc:4d:6f:aa:c1:3e:b6:fc:56:
         f3:e8:ad:ed:58:8f:7c:b8:f2:4a:fe:be:bb:82:f8:75:a6:fb:
         ec:18:90:55:10:42:55:f4:ae:b8:ea:fb:ef:8e:d9:9c:b7:92:
         17:08:1a:1d:a8:c2:48:3e:84:f7:7a:1f:77:20:20:1b:34:b6:
         62:91:4f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----