Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/cf348c713f39af6a20ca98619e6305572555c051.roa
File:                     cf348c713f39af6a20ca98619e6305572555c051.roa (raw, json)
Hash identifier:          CKwmy8Icp6hm09yj49nA/dHezj7jY4+F+YHbhmTeSFQ=
Subject key identifier:   FD:32:43:64:D3:F9:1E:A5:54:69:1C:05:56:FA:3A:8E:08:E2:94:D2
Certificate issuer:       /CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
Certificate serial:       179D13
Authority key identifier: 64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/cf348c713f39af6a20ca98619e6305572555c051.roa
Signing time:             Mon 12 Jun 2023 14:54:22 +0000
ROA not before:           Sun 11 Jun 2023 14:54:21 +0000
ROA not after:            Thu 12 Jun 2025 14:54:21 +0000
asID:                     28000
IP address blocks:        201.219.252.0/22 maxlen: 22
                          2800:700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547539 (0x179d13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
        Validity
            Not Before: Jun 11 14:54:21 2023 GMT
            Not After : Jun 12 14:54:21 2025 GMT
        Subject: CN=cf348c713f39af6a20ca98619e6305572555c051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:5d:70:e4:26:58:b1:bc:bc:a7:5c:50:a5:
                    e0:ed:a1:90:ca:3b:4f:45:57:16:01:51:61:bb:08:
                    26:bb:e2:70:b1:1d:ab:67:b4:01:94:03:e7:45:28:
                    b2:55:e4:e3:ea:fe:68:3b:c6:a2:d3:e6:dc:88:96:
                    c2:14:5e:70:c4:36:6d:93:ae:24:12:5c:2a:d2:c6:
                    42:91:53:ea:8a:a3:0b:d1:a7:e1:ae:26:2f:f9:a3:
                    56:04:2a:4c:92:c5:99:83:96:59:43:75:5e:3d:4d:
                    ce:06:8e:2a:41:d5:5c:08:c6:af:cf:30:c6:d5:0f:
                    4b:af:a7:d8:34:a8:40:f6:92:24:a7:dd:2d:46:d6:
                    d2:4b:96:3a:1e:c0:12:cf:f9:32:37:38:62:6c:08:
                    ce:cf:e2:08:7c:4c:80:cc:21:49:c3:eb:6e:98:be:
                    10:3a:c0:8e:06:20:89:02:db:ab:f5:ab:73:d7:c6:
                    4c:86:4f:80:1f:15:bf:c6:04:9a:e6:f1:1c:3b:62:
                    cc:fb:c4:e3:48:b7:26:14:45:11:eb:17:21:72:4b:
                    a3:ae:ee:ba:78:73:eb:f7:00:fc:34:ad:e5:0f:a0:
                    ba:ca:cc:f4:e6:42:f7:d1:39:f6:d8:ab:10:1e:96:
                    8f:a5:b0:7d:f3:32:05:50:7d:2e:14:98:fe:9f:7d:
                    bb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:32:43:64:D3:F9:1E:A5:54:69:1C:05:56:FA:3A:8E:08:E2:94:D2
            X509v3 Authority Key Identifier:
                keyid:64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/cf348c713f39af6a20ca98619e6305572555c051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/15ab7504ada349e4ed5816cfb2531293bf4331b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:10:ea:41:77:27:0b:b6:52:57:61:8c:fc:b9:dc:ea:50:76:
         ad:c0:df:69:1a:d2:9b:14:d9:40:03:c7:b3:ce:46:25:b5:92:
         d2:6c:35:51:4c:3c:e8:ed:18:f7:be:b3:ad:2e:84:8b:d3:c0:
         95:6d:12:b1:95:1e:28:73:f5:7b:00:1d:d8:60:54:1c:9e:51:
         e4:94:0f:a4:25:6c:8b:66:f7:8a:e6:2d:97:ed:8b:17:d4:01:
         20:dc:64:02:98:d0:c9:a6:7e:f9:7c:ba:e3:ee:e4:a0:90:9c:
         d5:3c:bc:66:fb:f1:88:f6:e1:63:26:65:ca:0a:05:cb:df:4f:
         3e:b7:db:e8:42:12:89:26:f7:aa:9c:64:28:59:e7:86:b0:6b:
         a3:d3:b2:88:fc:00:35:bb:4b:22:73:41:a7:dc:78:0a:59:09:
         1f:b4:42:76:4d:29:18:77:73:6d:1e:15:8c:26:9d:a3:a1:83:
         bf:24:50:52:de:2d:8c:8c:82:47:2c:08:b1:32:74:24:5a:0f:
         4b:27:45:fc:f0:db:bf:98:d7:38:bb:ed:64:dd:a3:b1:47:ea:
         85:09:40:f3:cd:4a:08:de:b6:ee:19:fc:48:78:b3:83:39:5c:
         4a:d0:0c:94:b4:f6:1d:b7:03:c6:ab:a3:52:60:36:10:c5:43:
         19:cd:60:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----