Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4eb3ba4-f011-4aba-b5dd-92a77eda488b/ffaa0c2f63fb0cc0440829adbe1c8176fff9693f.roa
File:                     ffaa0c2f63fb0cc0440829adbe1c8176fff9693f.roa (raw, json)
Hash identifier:          vg/n9/5pHs8bPq6kCnqM9XkEKJjVP2GcrBoCdFqVqMI=
Subject key identifier:   1C:00:91:A5:B0:10:AB:6A:A5:BA:0B:E5:D1:A1:B6:1A:7E:60:12:49
Certificate issuer:       /CN=4d7b9b266f8b94197f3505ae01f142ff41997214
Certificate serial:       11D5DF
Authority key identifier: 37:44:F6:E0:CE:DF:EF:AF:4E:FD:EF:07:21:22:E5:C3:B8:7C:2D:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7b9b266f8b94197f3505ae01f142ff41997214.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4eb3ba4-f011-4aba-b5dd-92a77eda488b/ffaa0c2f63fb0cc0440829adbe1c8176fff9693f.roa
Signing time:             Mon 12 Feb 2024 07:30:00 +0000
ROA not before:           Mon 12 Feb 2024 07:30:00 +0000
ROA not after:            Wed 11 Feb 2026 07:30:00 +0000
asID:                     271808
IP address blocks:        190.123.76.0/22 maxlen: 24
                          2803:3010::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168863 (0x11d5df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7b9b266f8b94197f3505ae01f142ff41997214
        Validity
            Not Before: Feb 12 07:30:00 2024 GMT
            Not After : Feb 11 07:30:00 2026 GMT
        Subject: CN=ffaa0c2f63fb0cc0440829adbe1c8176fff9693f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:86:d6:81:86:29:a6:df:41:2f:28:1d:5c:
                    11:7c:bd:8a:b9:1e:09:2d:2d:c5:29:b0:45:05:5c:
                    08:1c:d2:1a:f3:ac:ef:e6:8d:7b:ab:c7:5c:74:8b:
                    76:59:6a:9e:47:d2:61:9e:82:dc:26:cc:ef:f9:d4:
                    7d:d5:b8:80:aa:d1:fd:2c:57:63:75:1a:6b:fd:65:
                    59:4a:f3:e4:fe:c9:0e:a3:4f:7e:c6:7e:85:d1:43:
                    69:64:36:8f:60:b9:89:29:06:00:b6:bf:8d:92:6d:
                    b0:99:02:f9:bf:33:c7:98:fd:3e:95:79:bd:7c:ae:
                    88:0c:6c:ad:20:6a:d4:07:e2:e5:8a:b2:84:b0:bb:
                    df:a8:07:68:d9:c2:17:82:19:f0:3d:55:04:a2:cf:
                    f3:71:54:33:b4:28:70:12:7a:21:30:b4:ae:aa:6d:
                    b1:23:7a:8c:67:a2:c9:24:26:86:92:33:ce:11:73:
                    f9:00:eb:16:af:46:bf:79:00:5d:8b:dc:45:5b:0f:
                    56:00:ee:d7:08:d4:79:ca:2f:0d:8a:cc:cd:5b:89:
                    4a:a9:4f:6c:ae:1e:45:2d:1e:83:43:f6:00:ec:54:
                    39:0a:26:15:5e:b2:30:05:65:e4:3a:7b:d0:98:11:
                    97:c3:42:60:06:76:e0:af:00:2b:9a:94:89:37:ac:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:00:91:A5:B0:10:AB:6A:A5:BA:0B:E5:D1:A1:B6:1A:7E:60:12:49
            X509v3 Authority Key Identifier:
                keyid:37:44:F6:E0:CE:DF:EF:AF:4E:FD:EF:07:21:22:E5:C3:B8:7C:2D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7b9b266f8b94197f3505ae01f142ff41997214.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4eb3ba4-f011-4aba-b5dd-92a77eda488b/ffaa0c2f63fb0cc0440829adbe1c8176fff9693f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4eb3ba4-f011-4aba-b5dd-92a77eda488b/4d7b9b266f8b94197f3505ae01f142ff41997214.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.76.0/22
                IPv6:
                  2803:3010::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:48:cf:f1:ad:5e:a8:77:94:72:aa:ff:5b:77:ce:27:a2:03:
         0d:dc:9f:75:e0:c3:50:9b:29:88:35:f7:fb:83:cb:4b:1b:76:
         5d:3c:30:f5:20:2b:f7:c2:bd:fa:c2:43:75:92:e2:4f:99:8c:
         bd:4b:9c:1f:8c:28:8a:23:97:94:b3:39:0b:50:d3:22:bf:c1:
         a8:ea:ef:fa:18:62:28:cd:3b:bd:5b:b9:4d:05:70:b7:f3:fc:
         1d:a6:21:d3:55:bd:94:ff:02:07:1d:50:fc:d4:ea:37:80:a3:
         03:73:ab:b3:e3:9d:47:ea:af:e2:6b:96:18:de:dc:bf:06:1b:
         ef:89:e9:47:33:1f:e1:56:b5:e6:ef:7a:a6:83:89:24:90:16:
         40:c8:83:12:96:0c:83:6d:66:38:b0:b2:50:48:a0:66:12:b0:
         6e:f3:3f:79:80:d9:50:08:f7:0d:35:ee:4e:e4:8a:26:b1:cc:
         7a:1f:72:07:e1:f2:24:62:92:80:b2:27:74:fd:e1:9a:8b:a9:
         00:6b:25:32:7b:23:34:b7:68:68:57:84:14:11:71:b5:97:ef:
         d6:51:0e:75:3a:bf:4a:aa:38:58:ac:81:84:2f:d9:88:17:2b:
         b6:81:56:4a:58:43:e6:28:16:db:21:cb:9f:58:e7:f3:03:ad:
         0a:27:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----