Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/4a3125aa1a0d9d4e5af612522395fb8b7d61750c.roa
File:                     4a3125aa1a0d9d4e5af612522395fb8b7d61750c.roa (raw, json)
Hash identifier:          5QQ0IZ9F3nJkhgDVAl2g9lvMS9ZzDb6p/Cgz5+ygZWo=
Subject key identifier:   49:19:0D:39:41:A3:9E:61:75:69:94:27:4B:43:2D:74:88:09:DE:EC
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       17FCCC
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/4a3125aa1a0d9d4e5af612522395fb8b7d61750c.roa
Signing time:             Thu 15 Jun 2023 12:19:37 +0000
ROA not before:           Wed 14 Jun 2023 12:19:35 +0000
ROA not after:            Sun 15 Jun 2025 12:19:35 +0000
asID:                     61447
IP address blocks:        200.93.247.0/24 maxlen: 24
                          2801:1b:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572044 (0x17fccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Jun 14 12:19:35 2023 GMT
            Not After : Jun 15 12:19:35 2025 GMT
        Subject: CN=4a3125aa1a0d9d4e5af612522395fb8b7d61750c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:68:06:e3:47:10:5f:62:d7:36:6f:f9:b7:
                    65:05:90:5f:27:0e:0a:14:1a:9e:e9:86:56:d2:7b:
                    61:ed:a5:c0:a6:e6:39:df:02:d6:84:20:85:c7:91:
                    0a:c3:64:e4:46:3c:1f:39:08:6d:17:d6:b3:00:ca:
                    d7:cf:26:9a:3c:81:cd:99:df:b8:0e:9b:99:6d:34:
                    2b:24:36:a0:5c:65:d4:67:68:73:3d:9e:53:53:b1:
                    8b:56:c7:e8:76:a4:6b:ea:95:37:59:98:3e:2c:3a:
                    f1:46:ac:bf:91:88:fc:85:19:ce:a9:3b:dd:4f:c7:
                    f7:03:8e:f3:68:a3:a0:8c:86:95:43:12:ca:3e:32:
                    25:3a:a6:58:21:f0:e6:1e:51:76:3f:6f:cc:2c:ee:
                    bb:fe:64:ca:1f:40:09:83:eb:10:46:33:fd:ac:ec:
                    6b:d8:bc:21:91:54:c2:e0:72:15:62:4c:bf:d7:bb:
                    e5:65:8c:c9:dd:10:63:7b:b1:1e:a8:16:05:a0:a8:
                    31:7b:e6:4a:6d:4c:08:89:dd:7f:00:ab:05:b6:47:
                    90:23:12:1d:0c:cf:f2:80:9e:ac:64:16:8e:06:95:
                    e9:f0:bb:f4:05:5f:b9:d7:41:90:c0:05:f2:f3:86:
                    e4:66:e9:57:ef:d8:91:73:7e:32:7b:81:55:9e:94:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:19:0D:39:41:A3:9E:61:75:69:94:27:4B:43:2D:74:88:09:DE:EC
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/4a3125aa1a0d9d4e5af612522395fb8b7d61750c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.247.0/24
                IPv6:
                  2801:1b:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:c3:e8:e1:f5:ac:72:a2:37:e5:1d:ba:83:ff:f1:0c:32:a7:
         01:74:82:f6:c9:b2:13:9d:0c:ee:3b:a5:a2:10:ce:8f:e0:ca:
         9d:01:83:a2:8f:7b:5b:2f:b6:64:71:7c:c7:c0:7b:17:d8:8c:
         11:62:4f:2d:8a:08:99:2d:7c:4f:51:e7:61:29:24:89:58:6c:
         2e:67:47:13:aa:a1:36:34:7f:5c:ee:1c:47:60:40:0c:28:9d:
         f1:0b:46:b9:c6:66:d3:4a:69:90:62:a2:04:bc:57:42:8d:52:
         cd:3d:9b:41:f3:b2:09:ea:c0:e9:b8:07:f1:f6:46:4c:40:be:
         37:d3:a0:e8:c9:7f:ab:7f:01:fc:b6:c4:2a:6c:cb:48:c5:9a:
         63:44:43:c7:fc:ae:d7:16:f5:11:d3:68:e1:f8:77:80:ea:58:
         ec:d2:70:ac:bb:60:10:4a:02:91:d3:32:e2:52:63:da:0d:68:
         d8:19:58:86:4c:fc:44:fb:70:fd:07:07:6f:b8:4c:0d:cf:f6:
         70:b5:76:55:ce:ec:db:8b:d8:bc:74:32:f8:3b:ec:f6:f3:e3:
         2e:35:9b:b3:41:eb:44:da:42:67:a8:42:e5:30:22:95:52:95:
         4e:84:27:5c:23:9e:bd:95:6a:7b:fb:b8:67:21:6d:9f:d8:3b:
         9e:c5:61:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----