Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/a9c78d29ebbc57de504b90af0c163ca244a4dd50.roa
File:                     a9c78d29ebbc57de504b90af0c163ca244a4dd50.roa (raw, json)
Hash identifier:          5dvaHE9GbzGPv5vX4mPTjne5HeH0GB462sop5nnRnFU=
Subject key identifier:   A3:10:3F:8D:EC:2C:B8:FB:DB:D2:8B:67:8C:DC:EC:72:5F:B0:7B:05
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       17F3CA
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/a9c78d29ebbc57de504b90af0c163ca244a4dd50.roa
Signing time:             Thu 15 Jun 2023 12:19:35 +0000
ROA not before:           Wed 14 Jun 2023 12:19:35 +0000
ROA not after:            Sun 15 Jun 2025 12:19:35 +0000
asID:                     52289
IP address blocks:        200.93.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569738 (0x17f3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Jun 14 12:19:35 2023 GMT
            Not After : Jun 15 12:19:35 2025 GMT
        Subject: CN=a9c78d29ebbc57de504b90af0c163ca244a4dd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:49:5d:69:f1:4e:8e:1d:3d:67:15:c1:8f:
                    e9:a5:77:d3:37:37:31:8f:63:76:26:ff:50:bc:64:
                    23:bc:72:c0:92:c3:e5:f9:6d:4e:16:73:04:19:9a:
                    aa:64:f7:58:a1:16:74:fb:66:c3:6b:8e:b3:81:05:
                    01:36:b2:9a:60:6d:19:5d:ec:11:33:d0:b7:56:73:
                    c4:03:e3:a4:76:f8:76:57:ea:77:55:78:8d:1a:80:
                    a2:a3:54:56:1e:ec:d2:5d:8b:11:31:ee:88:da:10:
                    b6:8a:3b:58:e0:ca:fa:f4:b9:9f:e4:63:67:e9:d5:
                    c8:45:79:b2:5a:56:d2:cf:d2:7e:b9:33:e6:f7:ef:
                    b4:73:11:c1:9f:95:ab:ef:6b:56:07:59:f9:7a:b9:
                    b4:8e:08:7a:23:25:51:e2:65:ef:c5:53:e2:3e:db:
                    9b:04:95:90:1e:f5:77:0a:75:fb:35:5b:d8:19:6f:
                    1a:4d:35:33:dc:80:af:c6:7d:b4:c3:6d:05:47:05:
                    46:bd:cf:5a:3f:4f:4e:6c:5e:ef:ef:c9:14:ca:77:
                    40:a8:83:fa:fb:2e:af:5a:9c:bf:69:44:7f:e8:ba:
                    d3:79:c9:33:76:48:16:8e:8b:29:87:bb:25:7d:c5:
                    8d:b1:e1:8b:c1:af:06:38:69:38:83:7a:16:ea:ff:
                    b0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:10:3F:8D:EC:2C:B8:FB:DB:D2:8B:67:8C:DC:EC:72:5F:B0:7B:05
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/a9c78d29ebbc57de504b90af0c163ca244a4dd50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:4b:dc:b5:6f:00:6f:39:45:c3:76:32:b0:d3:e8:5d:c9:1f:
         ef:4f:f9:f0:52:a9:06:44:3f:26:1d:41:6f:d8:46:e6:d8:01:
         b6:d6:b6:47:cf:c5:46:fb:cf:24:ba:a1:8b:34:b1:70:43:92:
         fe:ac:b0:28:ad:39:c4:45:47:fd:52:0e:db:f3:5c:38:80:33:
         5b:f0:f2:bc:f7:bb:c7:97:5e:ca:f5:8d:83:6d:77:9a:ff:1a:
         4b:36:1b:26:92:d3:41:8e:96:b2:73:43:76:0b:68:ee:2a:61:
         b4:56:77:35:57:98:b6:f5:0d:71:e5:42:9d:e2:00:4f:28:de:
         5d:8d:83:2b:90:00:a3:77:e8:39:11:36:84:e6:4a:27:23:23:
         1b:f7:c5:79:3e:af:be:25:c1:2f:10:21:f0:61:55:ca:04:dc:
         3a:75:8d:5e:c2:da:e5:61:dc:af:7a:14:56:c9:c9:93:b0:75:
         15:2b:7a:cc:3e:ea:0d:bd:70:89:03:28:fd:1b:35:df:6e:dc:
         a9:d1:dd:ae:79:70:e7:0b:21:25:2d:2b:7b:95:71:83:ec:e9:
         0f:9d:5c:60:5a:90:2f:30:24:7d:a4:95:f0:b0:89:05:db:18:
         ba:d3:55:b5:5b:1f:57:06:20:42:ee:83:9d:81:4d:12:49:03:
         a2:6a:00:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----