Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/4963813154cb30c76dd46f9bef1243d69158a11f.roa
File:                     4963813154cb30c76dd46f9bef1243d69158a11f.roa (raw, json)
Hash identifier:          nd43ChRsoQgYPmsJ79EPbJK23U3hRTICSL/XPHJE3v4=
Subject key identifier:   2A:FE:B3:AD:3D:97:83:55:91:3C:00:D5:98:7E:1C:65:2D:D1:42:FA
Certificate issuer:       /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial:       1D37A6
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/4963813154cb30c76dd46f9bef1243d69158a11f.roa
Signing time:             Tue 19 Dec 2023 19:04:52 +0000
ROA not before:           Tue 19 Dec 2023 19:04:51 +0000
ROA not after:            Fri 19 Dec 2025 19:04:51 +0000
asID:                     264845
IP address blocks:        201.219.252.0/23 maxlen: 23
                          201.219.254.0/23 maxlen: 24
                          2800:700::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914790 (0x1d37a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
        Validity
            Not Before: Dec 19 19:04:51 2023 GMT
            Not After : Dec 19 19:04:51 2025 GMT
        Subject: CN=4963813154cb30c76dd46f9bef1243d69158a11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:57:67:48:6f:6e:16:57:e4:96:3d:3a:04:08:
                    42:7d:7b:8e:bf:ca:dc:e6:32:76:83:3d:5e:09:34:
                    45:f7:27:ac:79:58:00:49:6f:3a:2a:35:3b:d0:bc:
                    e7:96:c0:b4:22:2f:0b:16:45:8c:49:e6:da:ca:4a:
                    4b:96:dd:93:2b:c7:23:72:40:2a:7a:bb:ef:d2:e9:
                    be:e3:6c:f1:c3:b6:3e:5a:93:fb:d8:f6:cb:53:d6:
                    78:2b:ac:8f:02:b0:36:f0:68:2e:c0:68:41:02:cc:
                    8b:c6:2b:b3:93:7b:ee:55:37:d0:f2:e4:a8:13:2b:
                    6f:66:86:f0:1c:27:7f:53:2a:75:33:fc:ab:27:5e:
                    2e:a7:b1:b0:90:a7:98:fc:bb:d7:5a:b2:1f:08:1f:
                    da:71:db:03:cc:b5:da:15:70:7d:80:69:0a:e1:5c:
                    8a:56:e5:1e:0d:c5:27:94:ac:5d:7d:27:60:5f:22:
                    c4:b4:a2:56:65:a1:fb:18:9f:30:65:b8:83:53:95:
                    ef:2c:0f:76:95:4b:29:e4:69:83:ff:14:7d:70:ca:
                    88:74:cd:78:b6:ca:9b:c5:4e:cd:eb:fc:4e:2b:bb:
                    9a:bd:32:e8:05:d8:ef:0a:7b:69:35:b5:79:a5:c6:
                    6f:94:b8:9a:0d:2e:0f:59:a3:19:fd:74:e0:fc:a6:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FE:B3:AD:3D:97:83:55:91:3C:00:D5:98:7E:1C:65:2D:D1:42:FA
            X509v3 Authority Key Identifier:
                keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/4963813154cb30c76dd46f9bef1243d69158a11f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:28:ee:d2:91:bb:b9:36:bf:c5:88:b8:71:d7:01:e7:f8:c3:
         eb:ac:74:5f:e4:c6:51:2f:15:cc:51:72:71:8e:69:27:10:32:
         f5:21:ac:82:c8:3f:1d:81:57:76:16:c8:cc:54:6c:73:c9:70:
         a9:f1:36:79:6f:6e:ca:e2:3c:76:3a:67:9b:cd:16:5f:6f:30:
         43:ca:8b:4f:d8:6a:2e:56:54:1a:7d:6a:f6:22:39:f9:1e:15:
         5d:8d:53:5a:04:58:10:93:9b:e9:99:75:2c:c0:92:ce:9a:44:
         e5:81:ae:2a:a8:64:81:ba:1d:52:8a:da:99:0c:f1:a2:bf:97:
         a2:21:12:2b:ab:1f:f2:ed:e2:56:44:1c:36:4a:aa:8e:1f:c9:
         78:de:b7:46:98:4d:11:30:00:66:74:97:d1:96:71:4d:bc:19:
         5e:9c:21:e8:05:b3:da:52:a6:56:c3:0a:4e:32:8d:46:e4:d3:
         56:63:73:e6:ab:4e:d7:e8:9e:6c:df:26:55:8a:c1:55:b6:bd:
         19:88:32:6b:1b:95:3e:af:da:c0:db:39:ab:ac:8d:68:36:3b:
         83:7a:8b:ce:0a:e2:13:36:e1:4f:9d:d7:92:0a:5e:20:03:7f:
         6f:95:db:8e:38:7c:01:88:27:0a:f9:ab:e5:0f:3a:1e:f4:b8:
         03:cd:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----