Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4bc988c-e0a1-4ab0-83e8-a9ae652f1e08/3c82dd4dbef2708469ef58e9cc8ca5ca6456d7f7.roa
File:                     3c82dd4dbef2708469ef58e9cc8ca5ca6456d7f7.roa (raw, json)
Hash identifier:          Nn3HgZ4hRRRXiQIs4G7Ee5eUarpMaK5D3IBzYThswgM=
Subject key identifier:   5F:BA:F1:10:CC:39:87:EC:56:29:E1:58:88:FE:55:E9:39:B0:31:74
Certificate issuer:       /CN=82098e6d1b0275171ebaa1bab499d421893df411
Certificate serial:       1A6A87
Authority key identifier: EA:3F:12:FB:AF:1C:C3:6B:F8:BA:F8:E6:D3:24:41:2C:9C:26:87:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82098e6d1b0275171ebaa1bab499d421893df411.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4bc988c-e0a1-4ab0-83e8-a9ae652f1e08/3c82dd4dbef2708469ef58e9cc8ca5ca6456d7f7.roa
Signing time:             Sat 02 Dec 2023 07:30:03 +0000
ROA not before:           Sat 02 Dec 2023 07:30:03 +0000
ROA not after:            Mon 01 Dec 2025 07:30:03 +0000
asID:                     265727
IP address blocks:        160.238.136.0/22 maxlen: 24
                          2803:d5c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731207 (0x1a6a87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82098e6d1b0275171ebaa1bab499d421893df411
        Validity
            Not Before: Dec  2 07:30:03 2023 GMT
            Not After : Dec  1 07:30:03 2025 GMT
        Subject: CN=3c82dd4dbef2708469ef58e9cc8ca5ca6456d7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:28:05:77:fb:db:75:8a:f1:96:fd:c8:b7:
                    66:be:aa:21:6a:16:62:be:ee:a9:27:b7:97:dc:00:
                    43:d7:43:68:08:21:fc:4a:ad:49:03:e0:ea:58:e7:
                    a3:fe:68:1e:0f:7c:9d:a4:14:41:0b:ce:21:51:b1:
                    f0:4a:d4:52:78:ea:6d:84:f6:30:7f:37:f3:18:eb:
                    70:cd:88:3d:72:1e:fc:49:41:93:92:c5:7b:16:0c:
                    0b:03:8e:d0:48:8d:3d:3d:f4:dc:5d:33:47:4d:5b:
                    25:78:67:71:d2:88:ba:b4:ce:f1:0d:1a:71:28:96:
                    0b:01:88:d8:01:ef:a8:d2:b0:f6:13:99:2f:d9:c6:
                    cf:22:d1:68:8d:9e:b3:e4:d7:e4:81:8a:45:e8:cb:
                    fc:f6:be:7d:6c:18:99:8f:ab:0f:b2:e9:b9:7c:43:
                    8b:c9:d9:31:78:ec:44:b2:a5:c2:fa:f0:86:66:1b:
                    41:c5:64:51:c3:ed:37:e3:d0:b4:5a:a9:25:0f:bb:
                    85:ca:8e:12:0b:8b:ad:48:61:29:60:f3:d0:9b:c3:
                    92:69:3a:0b:36:19:92:57:55:4e:c0:14:4f:c7:93:
                    83:2a:7f:5f:6b:a0:c7:cf:8a:e6:76:db:d9:da:9f:
                    08:a8:d7:99:7f:b8:60:d9:21:c9:1d:82:72:5a:df:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BA:F1:10:CC:39:87:EC:56:29:E1:58:88:FE:55:E9:39:B0:31:74
            X509v3 Authority Key Identifier:
                keyid:EA:3F:12:FB:AF:1C:C3:6B:F8:BA:F8:E6:D3:24:41:2C:9C:26:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82098e6d1b0275171ebaa1bab499d421893df411.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4bc988c-e0a1-4ab0-83e8-a9ae652f1e08/3c82dd4dbef2708469ef58e9cc8ca5ca6456d7f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4bc988c-e0a1-4ab0-83e8-a9ae652f1e08/82098e6d1b0275171ebaa1bab499d421893df411.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.136.0/22
                IPv6:
                  2803:d5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:d2:05:3c:84:26:9b:db:6b:c5:d8:8b:7e:6c:c7:6c:56:a3:
         80:e1:a8:01:1c:62:98:fb:2e:c3:87:6b:65:66:2a:c7:6b:d9:
         68:05:7e:f5:c6:41:0f:70:aa:35:ab:74:d9:4c:2a:16:30:15:
         44:02:18:50:85:07:6b:93:04:3a:cc:03:87:3a:95:52:2a:44:
         c0:bf:0e:70:78:53:3f:c5:45:a8:ff:9d:f1:e3:e7:ff:d5:2d:
         e0:0c:20:34:e6:cb:7b:26:72:d7:4c:2c:e8:a5:04:66:95:7c:
         86:6f:8a:c1:c4:39:d3:7d:b5:de:b2:ee:0b:18:29:9f:5c:37:
         7a:c7:ff:0b:a3:86:49:15:4d:94:75:4a:2e:4f:ee:f6:a6:13:
         54:05:ee:1b:5f:5e:80:16:48:e4:b2:2b:e8:71:72:cb:fe:0c:
         07:46:cb:d4:1f:ea:08:ab:7c:5f:e0:db:5c:43:ab:c9:f1:01:
         48:3c:32:df:84:05:01:9f:ed:6d:26:2f:5e:b9:d0:b0:0c:e4:
         02:c8:13:6f:f7:21:a8:b1:02:68:6d:c6:b3:71:0d:a2:0d:0f:
         02:65:85:7a:48:5a:98:cb:b1:8c:94:46:ba:26:c0:b2:69:44:
         e5:db:89:cf:6e:dc:94:01:61:d5:e3:9a:e6:de:94:04:29:85:
         be:6c:a6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----