Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/b8284472763f80e309360e4da77ad978bbf2bfef.roa
File:                     b8284472763f80e309360e4da77ad978bbf2bfef.roa (raw, json)
Hash identifier:          efisStzreaFJU5lJPwHlG/ESRyPDCz5LZKmuV9kqQ2g=
Subject key identifier:   60:73:86:C4:FC:62:82:F4:29:8E:3A:78:B5:32:92:6D:A4:FE:13:79
Certificate issuer:       /CN=76297e078144b7f66e2711a6f32f1a781bd74804
Certificate serial:       1197A5
Authority key identifier: 6C:72:C6:D0:F2:23:5B:DA:09:12:EE:68:8C:D6:59:92:B1:90:5B:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76297e078144b7f66e2711a6f32f1a781bd74804.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/b8284472763f80e309360e4da77ad978bbf2bfef.roa
Signing time:             Fri 31 Mar 2023 08:30:01 +0000
ROA not before:           Thu 30 Mar 2023 08:30:01 +0000
ROA not after:            Sat 29 Mar 2025 08:30:01 +0000
asID:                     271868
IP address blocks:        200.215.228.0/22 maxlen: 30
                          2803:8c10:40::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152933 (0x1197a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76297e078144b7f66e2711a6f32f1a781bd74804
        Validity
            Not Before: Mar 30 08:30:01 2023 GMT
            Not After : Mar 29 08:30:01 2025 GMT
        Subject: CN=b8284472763f80e309360e4da77ad978bbf2bfef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0f:24:20:e6:65:d4:07:e9:4e:4b:4e:1f:ff:
                    53:74:9b:f7:a4:60:25:b3:28:00:20:90:9f:6e:b2:
                    65:68:fb:70:50:a6:4d:af:d2:79:b9:aa:8c:68:2c:
                    15:27:c8:80:ee:17:bc:3e:fb:1a:ce:e5:5c:6a:5b:
                    87:da:69:9a:11:cd:f9:0e:04:5f:fa:4b:bb:4b:32:
                    0d:6b:c7:2f:f5:7a:6f:7b:2d:91:9f:dc:48:07:40:
                    cc:6d:97:50:8c:e1:3e:7a:3c:1c:c3:95:ee:b5:8b:
                    89:f3:96:74:96:c1:90:0f:e9:01:db:48:86:1f:18:
                    30:a4:5c:e2:5f:a5:63:0e:a5:4c:d5:dc:0a:87:ab:
                    cc:11:0f:3d:fa:62:5a:d9:3f:fe:41:4f:f6:d9:d3:
                    4c:24:4a:57:03:0c:e5:22:ec:dd:08:13:36:76:3c:
                    76:73:68:a8:58:66:a9:d7:52:40:4e:53:5a:d8:fb:
                    b4:c6:27:23:63:86:52:62:db:d8:00:4f:c3:6e:8b:
                    5b:e5:31:f8:c3:02:aa:b2:e3:c1:de:35:c9:eb:11:
                    5c:4a:7a:4b:01:46:89:e0:d6:78:7f:ec:dc:d4:69:
                    08:f4:01:2b:89:63:04:4a:6a:3d:1c:c2:73:f9:0c:
                    9f:34:4d:e0:b2:f2:3e:4f:cd:b7:8c:a3:b5:58:6d:
                    63:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:73:86:C4:FC:62:82:F4:29:8E:3A:78:B5:32:92:6D:A4:FE:13:79
            X509v3 Authority Key Identifier:
                keyid:6C:72:C6:D0:F2:23:5B:DA:09:12:EE:68:8C:D6:59:92:B1:90:5B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76297e078144b7f66e2711a6f32f1a781bd74804.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/b8284472763f80e309360e4da77ad978bbf2bfef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/76297e078144b7f66e2711a6f32f1a781bd74804.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.228.0/22
                IPv6:
                  2803:8c10:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         43:68:8d:2b:be:ae:02:ae:f8:47:72:4b:5e:43:ee:3b:78:6e:
         bf:bf:47:de:9f:6b:3d:e2:2a:81:69:24:fc:44:10:47:83:0a:
         c0:0c:4f:88:dc:cc:ed:73:c6:36:33:9e:60:13:c0:1c:37:f2:
         83:10:a1:8a:28:be:90:b6:2c:64:fa:a4:60:88:7c:34:2f:3b:
         57:93:63:5a:40:31:33:2a:c9:23:a5:82:74:b7:16:9d:56:52:
         7f:b8:c1:30:6e:ca:87:38:2f:51:57:d4:bc:84:ef:87:89:fb:
         8d:fa:63:5d:69:9c:e6:9e:1a:fd:cf:f3:8b:49:c7:af:ea:17:
         60:29:34:49:1e:f8:8c:86:dd:3c:06:3e:ef:3a:92:59:d6:3e:
         ff:f7:f7:45:f2:94:69:57:22:0f:83:81:c8:2a:9b:f8:66:7e:
         7a:98:93:fc:e9:bc:f1:8c:d1:16:d4:d8:ea:6f:c9:79:8a:cb:
         b4:9f:d4:33:64:bb:6e:ec:0e:1b:dd:2e:85:39:ce:9d:24:70:
         2f:75:e5:83:29:2b:54:d8:5c:82:14:f1:2c:05:a7:90:d7:d6:
         a0:2e:cb:df:80:fb:d4:4f:44:bb:20:dd:dd:db:f8:ed:fc:ce:
         b8:a9:29:ec:f3:39:c0:28:00:ad:be:61:a8:55:7b:11:bd:c1:
         46:49:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----