Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10aab4dd-8377-4ee8-9f99-ae75f73a5a1a/ed0fd629cadd5fbf6af6e9dba7b199e0a3046971.roa
File:                     ed0fd629cadd5fbf6af6e9dba7b199e0a3046971.roa (raw, json)
Hash identifier:          J2kDOZcE155Ya0apiKXOtUnGJKvSMYU1C6cH+zCaNsU=
Subject key identifier:   F6:F9:BD:07:A3:4E:C0:D0:85:70:6F:23:5D:55:13:9C:20:D3:59:9C
Certificate issuer:       /CN=e7deedf6cb85780b8d28b2401f2c846303209826
Certificate serial:       23AE6F
Authority key identifier: 8F:D0:0A:F6:A7:44:F0:31:D6:7C:A8:42:1A:7F:ED:B0:FA:7E:13:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7deedf6cb85780b8d28b2401f2c846303209826.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10aab4dd-8377-4ee8-9f99-ae75f73a5a1a/ed0fd629cadd5fbf6af6e9dba7b199e0a3046971.roa
Signing time:             Mon 25 Sep 2023 16:15:22 +0000
ROA not before:           Sun 24 Sep 2023 16:15:22 +0000
ROA not after:            Thu 25 Sep 2025 16:15:22 +0000
asID:                     20312
IP address blocks:        200.0.65.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2338415 (0x23ae6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7deedf6cb85780b8d28b2401f2c846303209826
        Validity
            Not Before: Sep 24 16:15:22 2023 GMT
            Not After : Sep 25 16:15:22 2025 GMT
        Subject: CN=ed0fd629cadd5fbf6af6e9dba7b199e0a3046971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:ba:23:03:37:b5:18:a3:e1:8a:14:56:57:
                    43:d5:83:4e:38:91:b0:ff:c9:37:d6:ea:67:bf:0e:
                    4f:a2:17:96:7c:35:e0:28:d5:c8:cf:ea:8e:2d:ab:
                    af:26:52:ee:8b:55:79:7b:e8:39:55:ff:dd:d4:10:
                    77:94:07:28:9a:c4:ed:3e:55:4e:1b:70:ec:47:9c:
                    1a:25:66:a2:94:11:46:0f:b0:d5:ad:d8:37:3d:df:
                    59:5a:44:50:4d:bf:e8:14:a8:67:82:1a:48:6c:d6:
                    51:3f:82:9f:ec:e9:78:f7:78:07:99:e2:75:14:ce:
                    26:65:d7:d5:4f:10:13:f7:0f:42:2f:fe:c7:f0:36:
                    0c:67:c2:ef:5f:37:13:b3:40:36:fd:93:cd:0c:e6:
                    97:77:e0:0f:1d:4a:e8:76:f2:22:24:e2:31:8e:2d:
                    ce:bf:73:98:f3:d0:73:3b:64:ff:2c:cd:4c:7d:e3:
                    f0:8f:86:d3:f9:18:c4:77:ea:f0:06:08:cf:aa:d5:
                    70:aa:d5:7f:f5:cb:71:f6:8a:5f:b7:e0:57:7f:65:
                    f2:d8:ec:75:5a:82:f0:91:f4:39:76:28:9d:e5:28:
                    1a:cc:02:f1:70:94:55:d2:24:58:31:7b:ac:a8:90:
                    9d:c3:7b:c8:de:22:05:b4:9f:a2:ec:2c:b9:e1:1c:
                    cd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F9:BD:07:A3:4E:C0:D0:85:70:6F:23:5D:55:13:9C:20:D3:59:9C
            X509v3 Authority Key Identifier:
                keyid:8F:D0:0A:F6:A7:44:F0:31:D6:7C:A8:42:1A:7F:ED:B0:FA:7E:13:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7deedf6cb85780b8d28b2401f2c846303209826.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10aab4dd-8377-4ee8-9f99-ae75f73a5a1a/ed0fd629cadd5fbf6af6e9dba7b199e0a3046971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10aab4dd-8377-4ee8-9f99-ae75f73a5a1a/e7deedf6cb85780b8d28b2401f2c846303209826.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a0:62:0c:b6:99:77:77:94:45:7e:6f:1c:aa:85:39:01:81:
         c4:cd:b9:8d:f3:50:8c:60:94:f2:d9:43:49:e6:0d:6d:76:7c:
         85:41:2e:a7:50:12:cd:14:12:29:8a:35:c2:be:a2:fb:ae:b8:
         87:db:f7:55:4c:ac:3b:c6:9c:93:98:24:ab:c4:2e:1e:2a:9d:
         f4:21:2f:e3:cc:1f:b7:90:08:6b:38:58:77:bc:1d:61:ce:62:
         9a:1e:b5:1d:e8:37:60:0d:30:03:97:df:29:e4:e8:ea:a3:72:
         80:83:c0:ed:b3:84:0d:8e:d1:38:03:b2:45:b4:0e:f5:44:9d:
         eb:6c:ac:53:fe:95:83:ac:0a:28:d7:47:66:d1:67:bf:1c:f8:
         04:68:8e:5f:79:77:fb:04:3d:1a:d9:af:d2:d9:eb:1b:dc:08:
         1c:86:c0:95:57:c9:32:a8:7f:45:a5:d9:c6:f4:41:24:44:55:
         66:af:81:40:a0:52:c1:06:4b:65:26:c4:f1:21:0c:d3:24:99:
         ef:69:ba:1f:cb:35:5a:3c:92:2d:1a:6b:f3:c3:d3:d8:2f:0d:
         f0:c6:77:0f:8a:b0:05:70:2e:14:76:17:e8:59:48:1f:36:48:
         47:46:a3:74:0e:c0:3f:04:02:a6:52:0f:79:3f:c8:d2:04:34:
         2a:e0:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----