Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/4f3f64ec30932c6cae8935167e973563bd8fb5bc.roa
File:                     4f3f64ec30932c6cae8935167e973563bd8fb5bc.roa (raw, json)
Hash identifier:          6mFkCzTfhcPsekaIea2Nybt2wFEMwzabKVvC7C3yCxM=
Subject key identifier:   99:66:97:DB:6D:25:87:96:AA:A7:2E:B2:0B:A7:A2:DF:02:B7:1B:FB
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       22017B
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/4f3f64ec30932c6cae8935167e973563bd8fb5bc.roa
Signing time:             Tue 25 Apr 2023 15:04:43 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     27860
IP address blocks:        201.218.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2228603 (0x22017b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=4f3f64ec30932c6cae8935167e973563bd8fb5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:a6:d7:8a:52:dc:82:35:29:bf:3b:e1:09:
                    0c:44:6a:d5:8e:9a:c5:cb:26:f6:91:1e:aa:ae:36:
                    fa:2c:18:35:4c:b0:23:70:d7:e5:a6:2d:63:83:ca:
                    d6:4d:42:6a:83:90:ec:5f:18:bb:3b:f3:59:54:96:
                    78:8e:f9:3c:5a:2d:c8:df:9e:28:10:19:8a:bd:0b:
                    16:6b:8b:98:dc:c0:2d:05:f8:55:ab:39:d6:b9:a3:
                    bb:05:e7:b7:96:8d:e9:ba:85:ea:3a:b0:fa:f5:c2:
                    ef:e9:2b:80:f7:97:8f:d1:01:be:4b:75:a8:d9:c4:
                    d0:b4:e7:31:a7:0e:a7:c4:f5:2c:dc:ee:11:3d:f5:
                    64:e6:f9:8f:36:47:b6:98:a8:38:55:00:c6:a7:42:
                    ad:48:2c:0b:2d:79:03:24:a6:41:af:34:06:ce:87:
                    4e:67:b3:ee:fb:c0:36:c0:2d:79:70:a7:cb:18:a9:
                    93:4d:f3:fe:ea:23:57:03:dd:80:97:d3:0a:ff:5a:
                    9f:19:b9:86:b3:28:96:f5:48:79:09:e6:30:91:dc:
                    8f:c7:5d:02:bd:64:15:4e:8e:7b:6b:61:eb:f8:d3:
                    22:dc:dc:2d:30:3b:c6:a8:b6:32:87:b1:6c:6b:41:
                    4b:57:46:e4:69:1b:02:29:51:b6:7d:fc:b2:ad:a1:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:66:97:DB:6D:25:87:96:AA:A7:2E:B2:0B:A7:A2:DF:02:B7:1B:FB
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/4f3f64ec30932c6cae8935167e973563bd8fb5bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:6d:47:c6:96:9d:b3:b5:4b:09:36:cc:46:89:9c:a5:b6:cb:
         a6:fa:73:99:bd:f8:b3:ad:b6:30:7c:ee:33:9a:a5:11:f6:bc:
         80:f0:34:bd:d5:5c:04:e5:93:b0:07:b8:79:7f:fb:bf:84:d1:
         2a:46:bf:01:06:cc:0e:11:77:86:04:99:3c:f0:f0:5b:12:f9:
         f8:10:12:04:93:1c:d0:2a:15:64:c1:2b:55:fc:aa:34:12:55:
         41:46:a5:a7:c7:e6:db:9b:31:ee:c3:0f:a1:e5:c6:33:ec:1a:
         69:b4:88:45:a2:18:40:45:79:4f:60:ce:4b:c4:45:85:f6:4c:
         28:5e:88:c0:ab:90:a6:b9:66:4a:49:50:db:ef:f1:06:c6:21:
         a3:3b:a2:c3:36:9d:2c:80:6b:75:b7:72:70:5a:25:59:46:24:
         fc:88:7f:14:66:e3:83:8f:37:1b:6e:49:7c:ad:4b:55:79:ef:
         94:ce:79:42:29:2b:26:cd:dc:81:a5:58:b1:bf:9c:e7:fc:bb:
         a7:19:2c:52:50:95:3f:c2:1e:f3:e3:5e:7e:9a:2d:e9:fe:c2:
         a6:b5:95:5f:49:2a:95:e1:37:4e:dd:53:b2:b1:89:e5:bd:97:
         30:4c:f4:3e:90:77:b7:8b:e6:93:81:d4:28:c9:80:88:10:ce:
         84:ea:17:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----