Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/a654aa4d0dc44725ea8ec116fc8157e45f855547.roa
File:                     a654aa4d0dc44725ea8ec116fc8157e45f855547.roa (raw, json)
Hash identifier:          9Xs6OdnwaPTee87vUY9+tMpoMjVsrhwcRVD5Pw/jNFY=
Subject key identifier:   6F:E7:1C:FA:2A:62:62:2A:B3:06:F8:F7:47:E1:E1:E6:71:45:D9:DB
Certificate issuer:       /CN=d2a001ef37af8d12473454d1fe356899fdb03d21
Certificate serial:       0CF4E0
Authority key identifier: C6:63:B7:A2:62:10:3F:DA:A9:8C:41:B4:5F:2B:01:AC:24:12:3A:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2a001ef37af8d12473454d1fe356899fdb03d21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/a654aa4d0dc44725ea8ec116fc8157e45f855547.roa
Signing time:             Fri 22 Mar 2024 14:31:52 +0000
ROA not before:           Fri 22 Mar 2024 14:31:52 +0000
ROA not after:            Sun 22 Mar 2026 14:31:52 +0000
asID:                     19422
IP address blocks:        186.8.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849120 (0xcf4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a001ef37af8d12473454d1fe356899fdb03d21
        Validity
            Not Before: Mar 22 14:31:52 2024 GMT
            Not After : Mar 22 14:31:52 2026 GMT
        Subject: CN=a654aa4d0dc44725ea8ec116fc8157e45f855547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4c:c3:8c:1c:e6:14:2d:3b:8f:75:bf:12:d1:
                    6d:d0:ad:bb:c6:87:4f:7e:e9:71:12:fd:c9:30:3c:
                    04:df:9d:11:60:67:a0:7c:7c:81:0f:c0:de:50:da:
                    f1:0e:1f:5a:95:7e:90:0e:ad:ac:94:b9:92:55:e9:
                    24:5d:db:51:b2:69:f3:41:18:f3:03:91:a5:23:5c:
                    f3:78:cb:35:c0:cc:06:ee:92:e3:3a:24:0d:01:a7:
                    d9:9e:e3:5d:fa:30:23:a0:ac:01:b4:9a:05:cf:7b:
                    2b:ac:e8:cc:45:43:71:29:0f:f4:3a:a8:ad:4c:cd:
                    ef:44:d9:97:46:3a:c5:6b:6b:f7:5a:80:e6:b5:be:
                    e6:e0:77:c8:53:48:24:1c:9b:9f:7f:4d:9b:e0:c5:
                    a1:23:d6:b0:01:93:b8:f6:a1:90:19:e8:68:28:b1:
                    76:8a:2b:c5:82:d5:19:a4:61:ad:a1:be:71:92:79:
                    7d:5e:26:1b:5b:de:f4:3a:eb:ce:b9:f6:f6:d8:7e:
                    e7:09:01:59:dc:2c:a2:db:c4:a9:9d:4e:28:f8:b9:
                    59:3f:df:85:47:e8:b5:60:88:9e:51:ed:4c:40:b6:
                    37:a4:69:d7:98:ce:00:fd:93:df:5b:86:1b:13:03:
                    4c:ef:7c:c2:7f:32:eb:8e:5c:14:18:ed:c2:cd:5b:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E7:1C:FA:2A:62:62:2A:B3:06:F8:F7:47:E1:E1:E6:71:45:D9:DB
            X509v3 Authority Key Identifier:
                keyid:C6:63:B7:A2:62:10:3F:DA:A9:8C:41:B4:5F:2B:01:AC:24:12:3A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2a001ef37af8d12473454d1fe356899fdb03d21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/a654aa4d0dc44725ea8ec116fc8157e45f855547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/d2a001ef37af8d12473454d1fe356899fdb03d21.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.8.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:9f:df:52:75:7c:04:2b:56:7a:3b:da:b2:48:07:7a:6e:d2:
         dd:20:2e:df:c6:d5:e2:8e:f1:4b:21:27:ff:7d:58:eb:6b:02:
         1d:3c:a3:8e:0a:4e:83:a1:f8:0a:b7:5a:a4:c6:90:ca:8c:4c:
         21:dd:6d:1c:e8:3b:e7:26:ea:12:ce:96:33:15:46:1d:f6:b9:
         f9:c2:df:ec:b9:34:a0:88:18:fc:7a:68:63:a5:50:41:4c:e2:
         83:41:dc:cb:f6:91:22:aa:c8:b9:11:e8:7d:93:93:ac:f0:c6:
         df:5c:5e:eb:84:a3:4a:3e:f2:ba:91:39:88:52:76:73:8f:f6:
         ef:b9:83:86:b3:e2:bb:a6:26:4c:6c:b5:be:1b:e3:3b:18:23:
         64:9a:3b:b3:fc:93:d8:bb:0a:0c:93:65:26:47:d5:70:73:20:
         bf:d6:41:d8:0a:ed:17:0a:96:46:b8:20:e9:d3:a1:59:b1:cc:
         94:c7:e7:1a:8c:a2:1b:ee:de:c5:88:06:f4:0b:82:0c:06:23:
         de:ac:b8:87:49:f7:bf:20:f5:6b:48:7c:34:69:b0:31:3b:5c:
         b0:91:92:64:47:f2:c1:5f:5b:28:46:c9:5d:89:93:c3:ee:cd:
         2b:db:c3:8a:5e:04:eb:81:d2:81:1a:dd:38:f3:56:d7:e3:09:
         6c:b6:2f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----