Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8ec912c-89fc-42b1-9033-65a6cb69345d/1aadf30060fafa34cce29aa4782546d78aca3d5f.roa
File:                     1aadf30060fafa34cce29aa4782546d78aca3d5f.roa (raw, json)
Hash identifier:          yjpLpW8FMyT856E8H/bptK43/GJ/pUm7mPRjt96CtHg=
Subject key identifier:   3C:81:DE:EB:B0:4E:01:44:84:8F:F1:B4:0D:6F:1F:5B:3D:58:1A:3F
Certificate issuer:       /CN=62b5c642468784bc32a5ea7e640836c3bbe109dc
Certificate serial:       127EA6
Authority key identifier: 9D:0B:05:35:55:63:24:EB:16:92:9B:75:7C:AA:35:59:B1:1B:E6:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62b5c642468784bc32a5ea7e640836c3bbe109dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d8ec912c-89fc-42b1-9033-65a6cb69345d/1aadf30060fafa34cce29aa4782546d78aca3d5f.roa
Signing time:             Thu 30 Nov 2023 07:30:00 +0000
ROA not before:           Thu 30 Nov 2023 07:30:00 +0000
ROA not after:            Sat 29 Nov 2025 07:30:00 +0000
asID:                     263712
IP address blocks:        131.255.248.0/22 maxlen: 22
                          2803:c780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212070 (0x127ea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62b5c642468784bc32a5ea7e640836c3bbe109dc
        Validity
            Not Before: Nov 30 07:30:00 2023 GMT
            Not After : Nov 29 07:30:00 2025 GMT
        Subject: CN=1aadf30060fafa34cce29aa4782546d78aca3d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:81:e2:de:2d:ca:bc:59:b2:b0:f0:93:eb:
                    39:53:d9:7a:db:74:60:b1:58:49:d6:84:42:ab:ac:
                    83:44:a3:29:46:11:dc:40:37:07:c1:cc:a3:cf:1d:
                    fc:1a:63:f7:a3:1c:aa:3f:c0:83:77:ba:ca:3b:78:
                    bc:4c:6f:ec:49:42:3f:06:65:08:e2:76:70:0d:7f:
                    29:a0:2b:2b:99:78:7f:f4:d1:1c:b8:69:b8:c1:ac:
                    68:6f:44:22:22:a4:a6:64:49:99:65:6c:0f:76:97:
                    9e:f0:14:0f:e4:eb:8d:3d:cf:95:10:1b:d9:d4:73:
                    a8:d6:ff:49:a4:85:58:c0:74:0e:fa:46:61:2c:98:
                    6d:dd:44:92:98:aa:6c:b1:ac:b2:cd:68:2b:83:60:
                    73:df:6e:22:f0:87:db:2c:25:7a:21:03:2c:50:f1:
                    69:4e:ae:da:10:c1:55:5f:21:fb:d1:0a:13:99:ef:
                    12:93:3d:1b:7c:e2:0d:89:93:5f:42:82:80:31:4d:
                    15:a0:c6:e0:12:0f:22:fb:0e:a4:50:68:84:5d:ec:
                    71:10:7a:96:e7:28:7a:25:6f:7a:d4:a0:91:ba:60:
                    bf:8b:58:60:8e:d0:e0:ba:55:87:57:6d:8e:75:56:
                    31:a1:13:73:f8:d1:2c:c1:4a:11:b5:eb:4a:41:8a:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:81:DE:EB:B0:4E:01:44:84:8F:F1:B4:0D:6F:1F:5B:3D:58:1A:3F
            X509v3 Authority Key Identifier:
                keyid:9D:0B:05:35:55:63:24:EB:16:92:9B:75:7C:AA:35:59:B1:1B:E6:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62b5c642468784bc32a5ea7e640836c3bbe109dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8ec912c-89fc-42b1-9033-65a6cb69345d/1aadf30060fafa34cce29aa4782546d78aca3d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d8ec912c-89fc-42b1-9033-65a6cb69345d/62b5c642468784bc32a5ea7e640836c3bbe109dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.248.0/22
                IPv6:
                  2803:c780::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:25:96:1a:27:60:90:c1:7a:50:3c:4e:b2:05:a6:9d:0a:
         d9:fc:67:a5:46:67:b5:eb:c5:3e:29:7d:7c:d4:54:ae:de:de:
         65:62:4b:38:a7:79:40:b2:6d:16:3f:38:3c:ea:81:ea:3e:3a:
         2e:74:f9:78:06:c4:33:b4:82:73:c6:32:b8:58:91:45:32:0b:
         a4:6b:32:b0:06:5e:57:91:c6:03:f6:eb:ea:87:69:7b:69:24:
         43:2f:38:e5:6d:19:33:a4:ae:18:7f:64:2c:ec:51:eb:72:3f:
         e4:ac:2c:f6:6d:3a:de:32:84:90:0b:89:cf:03:98:14:0e:b2:
         e2:ca:e0:5a:67:6b:a6:ce:33:4b:59:7e:15:0c:63:ff:03:3a:
         f4:72:b5:de:91:6d:69:a7:7c:e4:31:a3:af:b3:d5:4c:64:1a:
         57:3e:03:2a:9d:fe:4c:43:d2:e2:53:9a:8c:94:e8:0d:03:19:
         08:48:d7:48:fe:a5:98:b9:54:05:d5:b1:82:ea:1f:01:75:3c:
         d1:27:a5:44:3c:26:b0:11:60:9a:60:2b:f7:a1:83:2b:c0:3d:
         80:9a:7e:d8:72:1c:0b:ec:7a:2a:76:19:10:fa:46:ae:e9:3b:
         a4:88:a1:7c:71:d8:7a:23:a9:4e:cc:3a:77:f2:11:a6:35:36:
         08:73:78:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----