Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/2b95d78e76fef014c16b14967e58d31ae8858307.roa
File:                     2b95d78e76fef014c16b14967e58d31ae8858307.roa (raw, json)
Hash identifier:          NL2T7rX4AhS8cGEBdGavmSekv2rOTSupsdMHq8yBpdc=
Subject key identifier:   F7:BD:9A:8F:B2:E7:1A:E0:70:8F:23:B1:72:20:22:E1:12:E9:99:17
Certificate issuer:       /CN=a8e12cca2129bde3aeb4d1487df86eba9960d067
Certificate serial:       23CEF2
Authority key identifier: E9:2B:09:39:E8:2A:A8:A4:6C:8E:8F:E1:58:E9:0D:A2:33:D7:97:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8e12cca2129bde3aeb4d1487df86eba9960d067.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/2b95d78e76fef014c16b14967e58d31ae8858307.roa
Signing time:             Thu 30 Nov 2023 06:13:53 +0000
ROA not before:           Thu 30 Nov 2023 06:13:53 +0000
ROA not after:            Sun 30 Nov 2025 06:13:53 +0000
asID:                     265771
IP address blocks:        128.201.108.0/22 maxlen: 22
                          128.201.108.0/24 maxlen: 24
                          128.201.109.0/24 maxlen: 24
                          128.201.110.0/24 maxlen: 24
                          128.201.111.0/24 maxlen: 24
                          2803:d7c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2346738 (0x23cef2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e12cca2129bde3aeb4d1487df86eba9960d067
        Validity
            Not Before: Nov 30 06:13:53 2023 GMT
            Not After : Nov 30 06:13:53 2025 GMT
        Subject: CN=2b95d78e76fef014c16b14967e58d31ae8858307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:88:8c:b9:a5:bf:4e:32:04:db:e3:b5:47:d3:
                    78:50:9e:50:53:41:a6:5e:0f:e2:2d:ac:f7:e3:95:
                    01:5a:91:b9:74:a6:c9:32:47:c2:18:52:87:78:93:
                    75:9e:3e:ca:73:24:e2:e9:cc:62:cc:6d:47:7e:32:
                    ed:ce:5e:75:9d:b7:e6:20:e2:49:53:cc:67:b9:3f:
                    5c:43:69:99:55:07:79:ee:bd:37:f5:00:4c:3f:55:
                    0a:35:5c:d2:fe:77:f5:a8:f3:20:44:db:59:76:7e:
                    c6:b2:3a:7c:66:ec:21:88:ea:b1:e0:de:69:6e:14:
                    7e:17:78:14:52:d0:ee:c4:30:33:6e:03:0a:64:36:
                    8e:f2:dc:be:9f:d1:af:1a:f0:31:a7:18:6e:c6:36:
                    0b:0b:97:f5:fa:1e:29:f6:8d:3a:38:69:9a:ee:2d:
                    b5:d0:1c:6d:08:93:ca:71:3f:c6:c5:6f:01:26:71:
                    27:7f:9f:fe:88:6b:1e:56:9d:af:8f:0d:b5:77:4f:
                    cb:6b:08:66:5f:4b:00:97:92:aa:f1:ae:42:e5:05:
                    c3:e0:d1:12:c9:10:dc:7c:c6:af:2d:5c:ac:d1:79:
                    b5:0f:e2:8d:5c:ac:f0:80:a6:85:9f:c7:97:a4:b1:
                    4c:48:a2:e3:8f:97:00:15:84:31:f6:b9:02:ea:86:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BD:9A:8F:B2:E7:1A:E0:70:8F:23:B1:72:20:22:E1:12:E9:99:17
            X509v3 Authority Key Identifier:
                keyid:E9:2B:09:39:E8:2A:A8:A4:6C:8E:8F:E1:58:E9:0D:A2:33:D7:97:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8e12cca2129bde3aeb4d1487df86eba9960d067.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/2b95d78e76fef014c16b14967e58d31ae8858307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/a8e12cca2129bde3aeb4d1487df86eba9960d067.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.108.0/22
                IPv6:
                  2803:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:5e:00:1e:62:1f:12:90:e1:0e:07:ae:7a:6f:72:43:bc:96:
         54:ac:47:48:fc:ae:c4:cc:86:34:d1:4a:5a:20:25:7d:46:4d:
         18:b1:3d:21:5b:cd:2d:37:ad:30:67:b0:7d:e9:92:d0:f8:61:
         5f:e9:9a:08:b6:57:66:62:90:a2:a3:c2:2c:d6:29:02:a1:6b:
         df:f2:79:5f:9a:ad:c1:07:93:53:a7:d5:9d:12:24:64:4d:1d:
         ab:fd:a3:45:01:3a:0a:ba:0e:5e:55:2b:a9:ef:53:20:79:a6:
         3d:4f:92:9a:45:d6:ef:55:a8:2d:68:e6:03:c9:08:a1:45:5b:
         6b:c0:a2:55:95:57:08:a4:03:03:2b:16:dd:59:db:37:15:4b:
         8b:40:e9:a1:7e:1e:54:d4:ea:f4:95:7c:95:43:05:32:c3:82:
         75:ab:b0:6e:e8:fc:88:2c:a4:10:14:0b:c9:98:fe:6a:35:61:
         7e:cb:6c:e1:2d:7d:d7:f6:38:37:7a:e0:66:c3:6d:33:1a:70:
         e4:a8:14:67:97:ff:67:0f:7a:8a:d5:d4:d0:81:49:6f:d0:b1:
         69:0c:26:7f:10:da:45:fc:7e:93:48:cd:5c:98:d3:7e:de:12:
         46:50:fd:12:60:a0:89:fb:d5:c1:41:b7:e1:ee:b1:95:da:60:
         a7:64:15:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----