Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10aab4dd-8377-4ee8-9f99-ae75f73a5a1a/7fbb5aaa00fbcd1747d579c0b388d8dd04925979.roa
File:                     7fbb5aaa00fbcd1747d579c0b388d8dd04925979.roa (raw, json)
Hash identifier:          Kq37haTKYap3f7DvMmPNAxPNiqGuN2h3z6wi/KNHpIQ=
Subject key identifier:   F3:8A:18:1F:FE:03:6B:47:E4:4D:0D:04:AF:FE:70:82:ED:FE:09:12
Certificate issuer:       /CN=e7deedf6cb85780b8d28b2401f2c846303209826
Certificate serial:       23A6B6
Authority key identifier: 8F:D0:0A:F6:A7:44:F0:31:D6:7C:A8:42:1A:7F:ED:B0:FA:7E:13:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7deedf6cb85780b8d28b2401f2c846303209826.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10aab4dd-8377-4ee8-9f99-ae75f73a5a1a/7fbb5aaa00fbcd1747d579c0b388d8dd04925979.roa
Signing time:             Mon 25 Sep 2023 15:33:48 +0000
ROA not before:           Sun 24 Sep 2023 15:33:47 +0000
ROA not after:            Thu 25 Sep 2025 15:33:47 +0000
asID:                     27808
IP address blocks:        200.0.65.0/24 maxlen: 32
                          2800:38::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2336438 (0x23a6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7deedf6cb85780b8d28b2401f2c846303209826
        Validity
            Not Before: Sep 24 15:33:47 2023 GMT
            Not After : Sep 25 15:33:47 2025 GMT
        Subject: CN=7fbb5aaa00fbcd1747d579c0b388d8dd04925979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8c:c4:b7:c0:7f:5b:c6:7e:8c:f7:5b:9f:76:
                    f3:c5:58:92:94:64:21:02:0a:44:a0:30:83:96:ef:
                    61:43:e5:8d:e9:ff:bc:17:31:51:25:aa:dd:9a:fa:
                    01:37:3e:4d:a6:ae:96:7f:54:07:5e:b9:50:52:81:
                    3d:2e:9d:99:98:30:fe:d9:3a:1b:12:6c:ff:84:ce:
                    23:d5:04:40:2a:9e:3e:b3:b5:85:a2:db:e2:66:73:
                    76:f6:bb:ce:35:1f:76:cd:61:3d:af:19:c5:10:67:
                    5b:74:52:64:5f:33:9a:5a:3c:83:65:29:3b:4c:c0:
                    c8:7d:c0:3b:9f:32:a5:39:0b:1a:8f:84:2e:69:dd:
                    40:64:ee:f1:a8:72:88:9f:eb:b4:32:bc:6c:e5:bb:
                    6e:44:11:c8:1a:c7:ae:25:cc:a1:65:a7:5a:a6:84:
                    cc:86:45:c2:7e:87:fd:f8:de:32:38:ae:f0:e4:4f:
                    71:e2:6e:a9:c9:a6:b7:4e:9a:5f:74:70:37:5c:45:
                    3a:1f:4b:71:a3:75:01:9a:64:53:dc:ab:c8:58:d0:
                    99:3e:37:3e:d3:2c:44:20:5b:71:bd:46:db:58:98:
                    18:08:04:c3:40:52:9c:ed:2c:ae:e0:5a:b3:a2:28:
                    8b:6f:22:3f:ac:47:54:ac:34:c4:f5:e4:85:d7:24:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8A:18:1F:FE:03:6B:47:E4:4D:0D:04:AF:FE:70:82:ED:FE:09:12
            X509v3 Authority Key Identifier:
                keyid:8F:D0:0A:F6:A7:44:F0:31:D6:7C:A8:42:1A:7F:ED:B0:FA:7E:13:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7deedf6cb85780b8d28b2401f2c846303209826.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10aab4dd-8377-4ee8-9f99-ae75f73a5a1a/7fbb5aaa00fbcd1747d579c0b388d8dd04925979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10aab4dd-8377-4ee8-9f99-ae75f73a5a1a/e7deedf6cb85780b8d28b2401f2c846303209826.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.65.0/24
                IPv6:
                  2800:38::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:07:66:ed:f1:da:d9:e8:fc:7d:10:7d:f4:ee:d0:88:45:08:
         64:18:72:05:49:91:2b:b0:e8:1f:36:08:e9:22:9b:80:54:e8:
         fa:0a:b6:b8:ad:75:5c:62:d0:df:7d:30:87:25:cf:ae:be:0b:
         47:2f:b4:54:a8:d0:c4:f6:6d:91:06:05:df:2c:94:f1:6b:c5:
         ef:cd:1e:d6:0d:ac:82:3b:8f:a0:35:b7:4b:d5:53:4b:5d:42:
         d2:a6:8d:ba:36:a4:cd:57:00:48:2c:3c:96:76:cf:fb:99:b2:
         37:5b:a6:41:a3:8d:0b:72:14:15:3e:51:c8:80:81:86:d7:58:
         69:d4:49:89:09:d7:17:68:86:07:d5:15:96:59:dd:3b:e0:b8:
         10:3a:5b:dc:a2:6a:28:a2:27:40:fb:9c:68:e3:bc:52:60:76:
         0e:52:e0:c7:64:fd:a7:fb:2e:12:a2:1e:dc:f8:61:52:48:9a:
         88:3c:46:fe:74:22:db:9e:5c:95:cf:e2:2b:e5:04:ea:04:d5:
         39:9e:e3:09:6e:d7:e7:44:0b:77:38:3d:f1:b1:3f:ee:ed:bb:
         70:e4:1c:68:18:ba:28:28:0a:0b:b9:6b:38:17:6c:28:8c:4e:
         1f:e0:39:15:53:c9:89:89:df:d8:a3:04:8a:f3:a4:7e:aa:65:
         f2:a0:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----