Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/72cb0e81155574ff2c47cac1c5f0d6c4685ec997.roa
File:                     72cb0e81155574ff2c47cac1c5f0d6c4685ec997.roa (raw, json)
Hash identifier:          h3vmdYJnUvJWYBbgLOVYrkoL2ArIJ5nHoVPQ/uhrWsc=
Subject key identifier:   34:F1:4C:D4:43:49:D9:5E:48:23:BA:9A:C5:B2:31:26:B5:56:F9:3E
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       22048D
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/72cb0e81155574ff2c47cac1c5f0d6c4685ec997.roa
Signing time:             Tue 25 Apr 2023 15:04:44 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     27802
IP address blocks:        200.46.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229389 (0x22048d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=72cb0e81155574ff2c47cac1c5f0d6c4685ec997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:11:18:c3:ad:e7:9b:01:11:c8:16:f6:8b:
                    0a:bd:43:f7:1e:6d:d2:3e:d2:1f:21:64:b5:f2:07:
                    ab:45:08:b2:96:0f:fd:62:03:7a:ea:7d:8c:56:ac:
                    3a:57:8a:55:5a:b5:d3:d4:b0:73:fb:13:f9:6e:45:
                    bc:5b:9d:bf:32:86:56:2d:d3:95:7f:88:8d:dd:c1:
                    20:6a:af:bc:c7:22:93:22:b1:b9:8f:31:6d:6e:8f:
                    3a:6d:75:fc:f6:23:df:ad:8f:bd:50:58:dd:b4:da:
                    e4:4f:7b:65:6a:f0:ab:1a:9d:84:b3:e4:b6:82:5c:
                    f0:22:f1:3b:17:bc:2c:03:a7:3a:df:0d:a2:e0:0f:
                    ad:84:68:ee:4b:4b:bb:e0:b7:07:e1:7c:aa:9b:46:
                    18:f9:05:c8:ea:de:3f:20:06:19:70:23:36:cb:39:
                    f1:c0:39:7b:ad:18:dc:28:fb:90:5d:3d:3f:58:a6:
                    4d:29:74:45:19:5d:a2:82:d3:d2:bf:75:67:6d:07:
                    93:0d:ca:9d:e6:ad:40:e8:ec:b4:c5:fe:2b:75:c2:
                    fd:15:f2:df:b1:88:82:8f:99:3b:4a:1a:90:68:f8:
                    3a:4e:6c:b5:2b:bb:d3:43:b9:e0:74:56:f1:04:77:
                    9e:3e:b2:85:5d:99:9f:29:8b:05:91:10:b0:16:65:
                    f8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F1:4C:D4:43:49:D9:5E:48:23:BA:9A:C5:B2:31:26:B5:56:F9:3E
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/72cb0e81155574ff2c47cac1c5f0d6c4685ec997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:91:56:4a:c1:f9:0d:50:21:32:dc:1a:65:3d:90:df:54:86:
         93:41:22:ca:8a:b4:68:2c:10:f8:87:66:ba:b0:82:1f:a8:c0:
         b0:de:a6:34:c0:29:f9:2c:10:02:b4:82:f8:8d:1e:fe:ca:8f:
         8d:ef:79:c1:d9:19:c8:7c:fc:d8:96:b0:df:bc:d0:4e:3f:e2:
         24:3e:87:49:ac:cc:40:83:f4:21:99:8e:6f:a1:2f:e0:b9:63:
         4f:41:05:c2:cb:d5:1e:1a:41:00:fc:63:88:f4:e7:24:e3:fe:
         e4:a2:1e:f2:96:36:3b:35:a8:e7:94:32:3c:9c:7d:88:00:a6:
         1c:5c:fb:63:60:a8:f0:2f:af:f7:29:71:79:56:1b:7d:f4:81:
         e9:f1:68:e2:ea:ea:97:74:4f:f1:65:97:d1:59:07:35:dd:ae:
         7a:37:46:c2:b4:ed:53:e9:ce:75:b0:11:76:20:68:20:79:c9:
         0e:9d:0f:2b:48:29:37:63:e4:1f:e8:34:fa:d4:0c:db:f6:6c:
         7c:75:e0:0c:bd:79:e9:bc:a1:27:aa:c4:ff:39:c3:ff:4d:48:
         1c:77:48:db:84:d9:63:4c:06:18:6c:e0:e0:52:b4:a4:9a:c7:
         e0:ba:f9:88:2c:31:e9:dd:ea:52:6c:01:5f:b5:00:a4:39:05:
         21:ad:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----