Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cb73caf-f783-46f5-ae28-ba41c78b6122/d0bb2a7ca0aa9b41315a7b4b3b4d6d934353d06c.roa
File:                     d0bb2a7ca0aa9b41315a7b4b3b4d6d934353d06c.roa (raw, json)
Hash identifier:          R9QlIF/QEkxg2uGUhIBifOQGowP4LoqN6nCOOZB7efk=
Subject key identifier:   EC:35:BE:18:62:31:B9:67:17:FF:23:F1:A0:CA:46:3B:B4:26:13:90
Certificate issuer:       /CN=577ebac624b1c2d191b7182497a47ed595997c06
Certificate serial:       12E5
Authority key identifier: 22:AD:A8:C3:3F:81:4A:9D:6C:A2:D5:06:9D:E2:5B:29:86:45:8D:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/577ebac624b1c2d191b7182497a47ed595997c06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cb73caf-f783-46f5-ae28-ba41c78b6122/d0bb2a7ca0aa9b41315a7b4b3b4d6d934353d06c.roa
Signing time:             Sat 08 Oct 2022 13:34:20 +0000
ROA not before:           Sat 08 Oct 2022 13:23:18 +0000
ROA not after:            Tue 08 Oct 2024 13:23:18 +0000
asID:                     271815
IP address blocks:        200.219.52.0/22 maxlen: 24
                          2803:c5e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4837 (0x12e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577ebac624b1c2d191b7182497a47ed595997c06
        Validity
            Not Before: Oct  8 13:23:18 2022 GMT
            Not After : Oct  8 13:23:18 2024 GMT
        Subject: CN=d0bb2a7ca0aa9b41315a7b4b3b4d6d934353d06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:be:25:26:ba:0e:88:d3:21:22:74:b0:ac:89:
                    0d:25:2f:59:41:1c:ca:1e:4a:a2:4b:66:c4:ff:d6:
                    45:14:ab:59:48:31:68:11:35:84:bb:ec:bb:0c:78:
                    f1:46:77:e2:e2:30:83:86:f2:ae:5c:66:42:df:63:
                    d3:8a:ed:f1:fb:ce:2e:f2:37:09:7f:5c:4a:16:e4:
                    aa:e2:98:a6:f3:f5:b3:b0:97:e7:49:32:ee:7d:fb:
                    c2:e7:a5:1b:e3:f9:8c:71:d1:1f:0a:cd:6e:e5:fe:
                    a1:d4:7e:46:04:41:d3:e3:b6:0e:29:05:fb:d9:a0:
                    60:c4:82:40:28:4b:e8:b0:c9:15:e5:8b:6b:ab:a3:
                    46:31:83:a6:eb:be:01:52:1c:7c:ca:fe:c4:28:52:
                    41:a8:87:de:83:f1:7d:6c:76:65:6b:b3:5d:2d:66:
                    84:93:68:1d:ac:4d:76:8f:ef:46:c6:14:55:e0:fa:
                    cf:a3:6d:0a:47:cc:16:4c:84:c7:03:93:9f:9a:61:
                    9e:84:4c:81:94:18:5d:25:6f:3a:d0:c6:5f:4b:43:
                    e6:ad:3d:a2:76:7c:5c:30:ad:c6:78:2c:5d:d5:fa:
                    85:b7:90:03:66:9d:c2:71:d8:fb:b6:49:23:c1:a5:
                    2c:57:77:0d:01:08:77:2f:ef:29:7f:b7:c2:bc:97:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:35:BE:18:62:31:B9:67:17:FF:23:F1:A0:CA:46:3B:B4:26:13:90
            X509v3 Authority Key Identifier:
                keyid:22:AD:A8:C3:3F:81:4A:9D:6C:A2:D5:06:9D:E2:5B:29:86:45:8D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/577ebac624b1c2d191b7182497a47ed595997c06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73caf-f783-46f5-ae28-ba41c78b6122/d0bb2a7ca0aa9b41315a7b4b3b4d6d934353d06c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73caf-f783-46f5-ae28-ba41c78b6122/577ebac624b1c2d191b7182497a47ed595997c06.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.52.0/22
                IPv6:
                  2803:c5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:2f:c5:e9:1b:62:6f:43:56:b0:b3:74:90:d3:b7:55:3e:a9:
         a0:65:97:02:b0:4e:b0:55:b3:75:e2:17:f1:57:c1:6e:8b:e0:
         9c:d8:d7:46:8a:76:b3:d7:e1:1b:e7:90:a1:c8:c4:27:d7:9a:
         10:9b:0e:fb:1e:b9:07:53:7f:be:15:96:4a:ce:22:78:cb:23:
         0a:a4:f6:7e:ce:53:20:29:58:13:d2:0c:1d:f5:8b:75:a9:16:
         e2:a0:77:db:f3:1a:3f:15:64:2a:de:71:7d:6d:05:08:e4:10:
         0f:73:b0:dd:04:37:c9:c0:c9:69:ca:ed:87:38:56:7f:44:66:
         3a:9e:70:95:c5:55:7a:9b:12:4d:ac:24:7e:73:85:93:29:35:
         37:79:70:97:c7:68:bb:0a:ea:d2:39:f9:54:e1:32:f4:5a:83:
         a6:a9:8e:e2:3b:a7:09:ba:4c:df:82:aa:5a:ac:f1:c3:1b:2f:
         80:78:58:b0:61:bd:b7:9e:74:ef:f9:c0:86:f0:9c:6c:fa:87:
         f0:1f:a7:2a:51:07:89:46:b7:05:6f:39:63:d9:8c:15:25:26:
         ee:0f:3d:d5:98:72:b8:17:7b:43:0a:7d:6d:03:0d:d1:3c:98:
         dc:1d:b6:ed:34:bc:49:04:9d:1d:a3:48:1e:6e:ce:ae:ad:f0:
         6c:57:0b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----