Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/48c91c7829fe55f47f70b1b7d6c8ed5465cc1f38.roa
File:                     48c91c7829fe55f47f70b1b7d6c8ed5465cc1f38.roa (raw, json)
Hash identifier:          X1Si9KvFvOovmL0G1I+88DLLFwMsbsyue35yfeQahPI=
Subject key identifier:   A5:43:EA:8C:F3:D8:9A:9A:9A:24:80:C7:F4:F9:6C:40:F9:A3:4D:0A
Certificate issuer:       /CN=385854f9fee954935903b58b4043860f6a590865
Certificate serial:       0DDF13
Authority key identifier: 4B:42:4D:D5:0A:E1:A8:BC:CA:D4:5C:03:13:07:A6:DF:87:F3:3B:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/385854f9fee954935903b58b4043860f6a590865.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/48c91c7829fe55f47f70b1b7d6c8ed5465cc1f38.roa
Signing time:             Mon 29 May 2023 14:32:48 +0000
ROA not before:           Sun 28 May 2023 14:32:47 +0000
ROA not after:            Thu 29 May 2025 14:32:47 +0000
asID:                     265587
IP address blocks:        201.150.116.0/22 maxlen: 24
                          2806:3bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909075 (0xddf13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385854f9fee954935903b58b4043860f6a590865
        Validity
            Not Before: May 28 14:32:47 2023 GMT
            Not After : May 29 14:32:47 2025 GMT
        Subject: CN=48c91c7829fe55f47f70b1b7d6c8ed5465cc1f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:ab:e0:86:46:16:f0:04:73:bf:a0:01:f9:
                    b4:a2:1b:1d:84:12:74:86:75:65:37:df:57:d5:f9:
                    df:4a:1b:7e:7d:b2:7e:02:d6:f2:80:d5:19:3d:36:
                    b3:1e:e5:55:8e:3f:ab:62:8f:49:58:de:96:9d:3f:
                    17:70:4b:ed:a7:3d:fa:eb:ff:7d:a5:d9:08:42:e6:
                    f5:c5:87:a9:f9:f9:f8:21:c8:d0:05:54:81:85:44:
                    73:b5:19:24:7e:aa:05:8a:6e:95:30:b8:a6:48:b4:
                    ab:7e:3a:14:c8:2f:c4:01:c8:06:28:a3:06:e6:59:
                    fa:77:bf:34:7a:97:55:be:56:dc:b4:8f:9d:0c:28:
                    ac:f6:42:ed:22:6c:1b:58:9d:c0:36:85:39:c4:5f:
                    e3:54:67:ea:3a:a1:5a:78:d7:97:4d:31:55:10:39:
                    64:6e:5a:99:84:2a:9e:fe:c0:69:4b:02:e4:e3:4b:
                    2f:c1:b1:23:82:35:6c:1b:f2:a6:9e:db:0a:1f:31:
                    bf:db:84:d2:6e:17:c5:10:a0:d1:6a:5c:00:ed:a8:
                    ef:26:44:4d:18:e1:ca:72:0e:46:3d:e5:bd:c6:90:
                    d1:27:5c:4e:9a:58:b2:36:75:f9:5d:e4:41:28:e5:
                    bb:65:8c:72:90:10:95:28:20:6b:81:e2:7e:25:3f:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:43:EA:8C:F3:D8:9A:9A:9A:24:80:C7:F4:F9:6C:40:F9:A3:4D:0A
            X509v3 Authority Key Identifier:
                keyid:4B:42:4D:D5:0A:E1:A8:BC:CA:D4:5C:03:13:07:A6:DF:87:F3:3B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/385854f9fee954935903b58b4043860f6a590865.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/48c91c7829fe55f47f70b1b7d6c8ed5465cc1f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/385854f9fee954935903b58b4043860f6a590865.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.116.0/22
                IPv6:
                  2806:3bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:4a:64:f7:ad:0d:6f:1d:15:e7:e2:30:50:c6:ed:a2:a4:46:
         50:8e:46:23:d8:88:37:96:5e:c7:ea:e3:56:62:4b:15:7d:62:
         a7:4c:e1:38:30:ce:0d:01:d1:00:66:4d:cf:16:e0:cd:29:a7:
         6f:32:74:68:46:5d:17:8b:b1:86:0b:cc:b5:5c:7c:c5:81:28:
         8d:cc:e1:84:16:09:2c:9f:98:84:b4:c9:e7:e4:39:c3:f6:b0:
         53:31:bb:d7:52:a9:70:30:ca:81:75:2a:b5:95:4c:d8:e4:ac:
         27:00:6f:09:5e:0b:72:f9:40:ed:5c:8c:08:fd:b0:89:78:c1:
         0d:b1:2e:ec:0e:60:e5:9f:ad:fd:86:e7:b9:56:31:fc:f8:0d:
         e9:d6:45:14:f9:1d:02:4b:a6:a7:3e:f0:42:05:fd:4d:83:f8:
         ee:82:06:45:61:48:22:27:45:f7:ad:fe:be:6c:ca:8d:77:19:
         be:9a:79:ba:f9:50:c8:b9:af:50:ef:d8:36:8f:df:5c:80:8e:
         4e:8f:f1:7a:4e:58:ed:73:f8:10:ef:11:56:75:db:e5:f4:95:
         f1:f2:96:c9:bc:0b:a9:c2:ea:c1:61:5f:d9:76:9a:a5:a2:0b:
         ec:e6:e2:f3:67:a7:17:be:a7:23:ba:67:10:ab:08:ad:2c:0d:
         e2:c3:e0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----