Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e33382e3136302e302f31392d3139203d3e203133353739.roa
File:                     3230302e33382e3136302e302f31392d3139203d3e203133353739.roa (raw, json)
Hash identifier:          zwfg1oPAsXT1/O1k2FV1hH0+dQvF2CSCLHcdAkW4Q4k=
Subject key identifier:   43:E6:3E:D7:71:59:99:3B:DA:41:D5:F0:1A:8E:1D:4C:C1:C7:EB:6D
Certificate issuer:       /CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
Certificate serial:       0F5614606D1F10C8BE61DB9882239C3D59FD8568
Authority key identifier: C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e33382e3136302e302f31392d3139203d3e203133353739.roa
Signing time:             Tue 30 Jul 2024 16:50:03 +0000
ROA not before:           Tue 30 Jul 2024 16:45:03 +0000
ROA not after:            Tue 29 Jul 2025 16:50:03 +0000
asID:                     13579
IP address blocks:        200.38.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:56:14:60:6d:1f:10:c8:be:61:db:98:82:23:9c:3d:59:fd:85:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
        Validity
            Not Before: Jul 30 16:45:03 2024 GMT
            Not After : Jul 29 16:50:03 2025 GMT
        Subject: CN=43E63ED77159993BDA41D5F01A8E1D4CC1C7EB6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:56:87:dd:db:6a:ac:b8:ba:f1:4b:32:19:
                    f1:09:b9:27:b0:eb:d1:7d:69:c0:55:8b:ef:42:ae:
                    90:71:03:c3:69:b3:b2:41:0f:ce:f9:da:80:10:c4:
                    80:e2:17:56:f3:87:f0:e8:ed:f3:b3:9f:a2:62:8f:
                    b5:60:a9:01:7f:1b:d1:bc:20:6f:ec:ea:df:98:ee:
                    41:b1:97:db:2f:a3:b7:86:cc:65:10:99:dd:54:64:
                    ef:eb:28:11:cd:5b:99:61:a7:0a:b0:ba:7b:f3:ac:
                    c5:1d:10:5b:c4:44:dc:2f:fb:3c:f4:7c:b1:e2:1b:
                    47:58:13:a0:4e:d6:e6:45:7a:c0:f9:8d:ab:05:f5:
                    87:49:a7:e6:65:c6:75:1b:50:4d:ba:50:dd:a0:b6:
                    35:38:7c:db:39:4a:95:44:6e:15:a0:9c:09:1d:5b:
                    9e:93:b2:5d:98:e2:7c:2a:87:7c:82:9d:e6:b1:0c:
                    58:cb:0e:35:a5:eb:39:91:ec:df:9c:45:79:59:6e:
                    4e:50:69:5c:24:87:ea:5f:fd:e1:a9:ef:80:00:63:
                    40:b1:af:c9:e4:29:74:81:3a:2e:00:59:56:77:15:
                    9c:d2:48:fd:de:0a:b6:6c:fd:aa:86:c0:a8:49:e2:
                    8a:ec:92:75:7f:4d:d2:ff:57:a3:8b:6f:73:ab:2c:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E6:3E:D7:71:59:99:3B:DA:41:D5:F0:1A:8E:1D:4C:C1:C7:EB:6D
            X509v3 Authority Key Identifier:
                keyid:C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e33382e3136302e302f31392d3139203d3e203133353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.38.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:dd:21:af:d1:06:28:e6:85:b8:85:88:5a:c3:db:fc:ed:22:
         37:7c:b9:3f:08:2a:b9:8f:43:1b:1b:70:96:13:54:57:6e:66:
         2c:3d:a6:7f:61:51:25:4d:91:0f:8d:f8:88:ed:b0:4a:bd:3a:
         31:39:02:f9:e4:45:45:ab:bd:d5:40:a6:4e:b9:20:25:7a:d2:
         9d:ed:69:1e:57:c1:65:c5:cd:c6:a0:48:4a:eb:1f:69:52:54:
         f0:0f:cc:23:fe:21:d0:e8:aa:29:d0:27:13:fc:b8:36:e9:a7:
         35:6b:b5:ff:34:91:04:66:06:da:7c:85:da:23:60:f9:10:15:
         fb:62:b6:ce:f7:86:35:ab:f6:4f:1f:32:bb:e4:92:56:85:3a:
         8e:f6:86:61:9c:00:39:6e:ad:fd:d2:15:1c:bd:a1:43:f2:b5:
         d2:06:9a:30:e1:81:ca:60:fc:41:c2:ac:e2:6e:11:37:5a:b8:
         9b:5b:0d:44:8f:95:d6:80:96:ab:a2:62:b2:b2:73:23:38:ad:
         73:0d:ff:46:fb:c5:87:1a:ce:2b:91:97:e7:05:d6:77:93:eb:
         97:a9:e5:c2:08:0e:ca:54:e8:5b:f8:51:c2:b3:38:aa:c3:df:
         8a:e7:05:0b:0b:e5:15:6f:0f:40:09:ab:ac:57:f2:4a:f2:e6:
         86:df:47:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----