Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/448cfc3614fc0c6d3377591b62208166fd2cffe3.roa
File:                     448cfc3614fc0c6d3377591b62208166fd2cffe3.roa (raw, json)
Hash identifier:          jlpldlG/daNGLlGiSWdW6Qief/T1N05kR4+A/fNehNw=
Subject key identifier:   DD:B7:6C:03:5C:AB:BC:42:B2:67:84:31:E9:3C:41:CA:0B:E7:2F:6D
Certificate issuer:       /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial:       13D8EE
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/448cfc3614fc0c6d3377591b62208166fd2cffe3.roa
Signing time:             Thu 28 Sep 2023 20:52:53 +0000
ROA not before:           Wed 27 Sep 2023 20:52:51 +0000
ROA not after:            Sun 28 Sep 2025 20:52:51 +0000
asID:                     23243
IP address blocks:        200.12.32.0/23 maxlen: 24
                          200.12.34.0/24 maxlen: 24
                          200.12.47.0/24 maxlen: 24
                          200.12.49.0/24 maxlen: 24
                          200.12.51.0/24 maxlen: 24
                          200.12.61.0/24 maxlen: 24
                          200.12.62.0/23 maxlen: 24
                          45.229.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300718 (0x13d8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
        Validity
            Not Before: Sep 27 20:52:51 2023 GMT
            Not After : Sep 28 20:52:51 2025 GMT
        Subject: CN=448cfc3614fc0c6d3377591b62208166fd2cffe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:07:b2:bd:cb:71:3d:26:92:9d:cf:b0:57:
                    94:f4:42:47:75:03:83:fa:b9:40:82:38:43:dd:8f:
                    2e:bf:de:8d:fd:40:6d:19:29:03:d4:6e:00:fa:f3:
                    a0:fd:e6:de:48:1a:ba:62:b3:3b:e6:14:fc:f6:31:
                    f4:18:06:39:a1:31:15:86:a9:8f:d0:6e:8e:f1:5e:
                    b8:b2:a3:2d:bf:59:5c:96:d4:79:40:c4:16:5e:a2:
                    90:72:46:df:1f:8b:90:9e:05:36:2f:6e:ec:e8:03:
                    80:aa:63:a3:f2:dc:9c:94:bc:59:2a:97:35:0f:e6:
                    b0:87:fd:f7:67:ed:51:da:14:55:8a:1f:d8:04:3e:
                    81:ee:bc:b2:74:44:ad:15:df:5b:81:97:e7:31:d1:
                    2d:ce:df:e8:f1:8e:79:bd:a7:fb:51:6a:b9:19:24:
                    15:ec:d8:2f:48:68:10:54:aa:87:dd:7b:26:15:f8:
                    1b:a2:48:c2:f5:2e:80:b3:fc:00:30:eb:9a:3e:c4:
                    6d:e4:6d:ad:23:df:c3:45:bb:52:7d:7e:ac:cb:66:
                    01:1f:a0:6d:1b:4c:80:3c:76:52:3d:c2:97:6f:c0:
                    05:0f:cc:0c:d7:43:04:3d:4c:94:e1:fc:a7:01:38:
                    3e:7d:63:fc:37:e1:6e:d1:9e:d1:cd:18:93:93:54:
                    3e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B7:6C:03:5C:AB:BC:42:B2:67:84:31:E9:3C:41:CA:0B:E7:2F:6D
            X509v3 Authority Key Identifier:
                keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/448cfc3614fc0c6d3377591b62208166fd2cffe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.42.0/24
                  200.12.32.0-200.12.34.255
                  200.12.47.0/24
                  200.12.49.0/24
                  200.12.51.0/24
                  200.12.61.0-200.12.63.255

    Signature Algorithm: sha256WithRSAEncryption
         58:6b:75:33:00:6f:a8:e4:70:06:8d:a7:a5:55:3a:41:3e:50:
         8d:2f:0e:7b:8d:75:b1:fb:65:d1:f0:12:f4:88:6a:32:af:71:
         ed:03:b8:40:f5:e0:af:22:2a:08:26:58:19:dc:25:b3:b2:5a:
         08:55:f2:04:96:6e:ab:e4:df:85:74:51:63:84:88:74:68:32:
         68:97:c8:56:25:d4:a2:19:93:54:56:35:6d:6b:d8:91:91:0d:
         aa:26:6d:fb:dc:99:2a:c6:61:a7:4a:c8:eb:21:67:13:3b:c4:
         cd:09:8d:5d:2f:4c:83:26:b7:ed:bb:8c:af:9d:c9:b1:65:45:
         f1:10:f0:53:47:8b:d8:51:23:75:0e:f0:6a:67:95:8c:04:73:
         12:66:78:22:33:ab:26:70:9e:ed:bc:df:aa:29:2f:54:ce:b4:
         b4:67:73:5f:74:0c:85:ae:ae:60:a8:71:47:1a:a5:d9:db:a1:
         a2:16:a8:b7:3f:0a:03:75:62:b1:66:36:71:ae:ce:ef:44:56:
         a0:43:87:46:e0:22:2b:03:bb:48:07:c6:e8:0a:5c:de:d5:17:
         2a:a6:2a:e5:5b:26:57:35:7b:23:8f:8e:bd:fe:f9:12:8c:0f:
         27:cb:29:49:7a:22:eb:1e:bf:92:37:dd:52:48:c4:a7:41:c1:
         17:2a:4b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----