Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/25d8dd1d408754d923a35dd9113616f65f71dd9b.roa
File:                     25d8dd1d408754d923a35dd9113616f65f71dd9b.roa (raw, json)
Hash identifier:          3Etl4ee0VdxsXeXLCd9gW9OebrnGUT0GGipYgzDUmZg=
Subject key identifier:   C1:61:2B:4B:5B:D6:25:B7:4F:13:4F:BE:14:D9:F7:5D:D5:44:EA:D0
Certificate issuer:       /CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
Certificate serial:       27599A
Authority key identifier: 66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/25d8dd1d408754d923a35dd9113616f65f71dd9b.roa
Signing time:             Wed 31 Jan 2024 21:53:35 +0000
ROA not before:           Wed 31 Jan 2024 21:53:35 +0000
ROA not after:            Sat 31 Jan 2026 21:53:35 +0000
asID:                     27696
IP address blocks:        190.5.64.0/18 maxlen: 24
                          181.189.224.0/19 maxlen: 24
                          2803:7200::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2578842 (0x27599a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
        Validity
            Not Before: Jan 31 21:53:35 2024 GMT
            Not After : Jan 31 21:53:35 2026 GMT
        Subject: CN=25d8dd1d408754d923a35dd9113616f65f71dd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:a6:6c:9f:e6:4e:79:fe:11:6d:72:c4:b5:
                    b0:2e:7a:b0:e8:6e:ad:4a:d5:52:59:3e:e5:68:96:
                    d6:88:57:40:ba:90:53:ea:b0:8a:a7:a8:4a:03:0b:
                    1a:23:0f:ef:ab:cb:19:98:ff:af:75:fb:ba:4b:c9:
                    c6:5b:17:dd:f4:f6:97:f1:d0:33:8d:bb:0b:c3:33:
                    52:95:af:84:f0:f8:ce:fb:3c:02:04:3a:ef:2a:d5:
                    eb:2a:37:d4:c0:b7:c5:cd:58:20:4c:42:97:b1:ba:
                    0d:bf:c4:f0:6f:a0:42:ee:be:f6:21:ed:3d:30:3e:
                    ce:6a:b2:e5:43:c9:55:14:3c:1f:74:d9:12:1e:2e:
                    09:cf:80:ec:93:70:ec:56:5c:d4:5f:d4:75:bc:fc:
                    ee:55:1e:9b:47:b1:41:ac:f4:25:cf:fe:c1:a5:1b:
                    c0:a5:bf:a1:c8:56:93:a1:73:d7:52:9e:0b:fc:35:
                    7f:98:79:e6:66:69:6a:50:85:ed:83:fe:6d:39:22:
                    93:db:72:bb:12:70:d3:69:e0:cb:65:05:4b:6c:27:
                    5a:41:e2:35:41:2e:24:74:2c:0e:e6:c3:19:80:56:
                    c8:b9:26:d8:52:b6:0c:f6:06:9e:b8:74:f7:9b:df:
                    b4:28:bc:c8:ab:24:23:b1:5c:23:74:e9:60:ed:51:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:61:2B:4B:5B:D6:25:B7:4F:13:4F:BE:14:D9:F7:5D:D5:44:EA:D0
            X509v3 Authority Key Identifier:
                keyid:66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/25d8dd1d408754d923a35dd9113616f65f71dd9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/95f676acfc94ecb8278d82cca69a83a7b785bd05.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.224.0/19
                  190.5.64.0/18
                IPv6:
                  2803:7200::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:2a:24:9e:3d:ed:ab:56:cd:97:4b:33:23:52:c6:ec:46:92:
         33:41:91:1e:19:d6:a4:d3:42:84:a9:8a:be:1c:2c:68:90:e5:
         43:12:11:05:3d:ae:04:9e:a3:f3:5e:64:b5:43:53:50:1b:c1:
         0d:3a:4f:c2:b9:56:8b:ce:f3:f0:ae:0c:4e:28:16:01:ab:af:
         44:35:ec:f4:1d:fc:86:84:10:af:1e:f3:8c:a2:b6:59:7e:d9:
         4e:30:5f:65:7d:00:c3:21:05:f1:a3:24:42:ab:a9:2c:a3:de:
         5f:45:84:da:04:03:7a:2d:49:13:fe:2e:77:02:c8:75:ce:7e:
         d1:0c:ed:77:60:81:a0:cf:a6:13:ea:a6:c8:d2:18:74:08:a5:
         08:78:1a:9f:0c:47:a9:92:c5:ee:08:6e:e7:88:04:e5:17:91:
         5a:e4:e3:bc:6b:28:3b:86:ae:f9:4d:b9:ac:7d:cd:c4:dd:e9:
         d5:01:d6:5d:28:af:89:21:bd:35:9d:08:61:06:21:a8:7f:3c:
         93:ae:9e:2d:06:76:3e:db:33:29:fe:bb:01:98:e8:36:9c:7d:
         2f:73:77:26:71:37:ec:f9:91:0e:80:34:44:be:fa:f1:1e:49:
         8c:b8:bc:e6:6d:3c:b9:65:aa:c7:ee:8e:d9:e5:69:96:23:4e:
         83:9a:57:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----