Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/916a34e7b994719fe216845a54c46708e4fd020a.roa
File:                     916a34e7b994719fe216845a54c46708e4fd020a.roa (raw, json)
Hash identifier:          E9VC+MrOKizzio6Eq1KI04qq2ODvOlbmTHH6ZqMVvjI=
Subject key identifier:   37:32:DF:2E:E6:EF:BF:19:B6:17:17:14:1A:C2:82:36:CD:23:5B:34
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       21ED8E
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/916a34e7b994719fe216845a54c46708e4fd020a.roa
Signing time:             Tue 25 Apr 2023 15:04:37 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     23360
IP address blocks:        200.46.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223502 (0x21ed8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=916a34e7b994719fe216845a54c46708e4fd020a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:6d:d5:32:14:be:50:bb:41:1f:97:ce:02:
                    13:bc:d6:31:71:92:f8:8e:60:4e:3c:09:86:9b:87:
                    28:68:0c:81:03:fb:cf:95:c2:af:9d:82:0c:0f:9b:
                    40:f2:5e:82:80:01:9a:9a:97:ee:e4:c5:38:b6:5a:
                    4a:f7:fd:bb:75:2e:cd:aa:ba:f4:ba:d2:74:16:47:
                    31:52:b3:2a:ab:f6:20:20:11:6d:51:10:20:2e:d7:
                    d3:f2:6c:08:7f:9d:e8:70:2f:60:6d:ff:45:f4:01:
                    06:37:0b:b1:c8:7b:62:a9:ba:f7:26:2f:8e:b4:97:
                    f5:aa:3b:68:e5:8a:fd:2a:64:46:14:4a:7f:65:6c:
                    a7:54:25:b0:1c:a2:ce:69:b7:72:01:d6:31:33:3d:
                    df:59:8c:04:77:b5:d5:64:5e:81:12:0c:f4:e8:49:
                    2f:63:4d:cf:3a:ff:9d:38:f5:bf:ad:47:6a:68:3c:
                    ab:6d:53:be:9a:a5:76:05:12:91:ce:87:e4:c8:bd:
                    58:3d:85:41:30:19:d3:94:09:1b:4c:67:2d:8e:e7:
                    55:51:cf:7a:ac:6a:e3:84:73:e1:75:15:37:9c:db:
                    bf:35:62:8f:68:d7:10:89:62:6c:cb:e2:61:fa:96:
                    30:b0:54:ef:1e:97:7a:17:43:f0:ec:95:bd:77:c1:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:32:DF:2E:E6:EF:BF:19:B6:17:17:14:1A:C2:82:36:CD:23:5B:34
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/916a34e7b994719fe216845a54c46708e4fd020a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:e6:50:c2:7a:00:f4:4e:46:87:a2:cd:36:15:6b:c1:06:44:
         29:41:9b:fb:a2:ba:c9:47:f7:c8:93:67:cd:83:d7:3c:67:9c:
         e8:a6:fa:d2:b8:c8:3e:2b:ac:7c:bb:ed:be:1c:df:0b:c8:32:
         85:97:98:20:c7:69:72:e6:bf:64:49:75:28:cc:9e:c3:17:2a:
         ab:6d:9f:ab:49:71:cf:bf:ae:43:0d:b5:49:fb:4f:95:65:fc:
         fb:d9:b0:f2:85:ef:59:ce:1f:8c:64:98:77:a0:68:2c:d3:3a:
         6a:ad:8b:3f:1e:75:6f:6a:8e:14:71:97:c3:9f:38:70:47:6d:
         3f:ad:9a:dd:74:72:90:24:10:8f:bd:d3:8a:12:b6:73:16:f9:
         26:ad:77:fe:98:43:89:68:4c:98:d3:4f:e2:27:5c:de:42:36:
         b4:41:2f:35:dc:e4:ab:63:07:bd:5b:a4:bf:0e:f9:6a:04:f9:
         f3:95:14:9b:af:f8:9d:0d:2a:81:b0:80:04:54:2b:40:39:49:
         cd:c1:d4:78:93:97:ab:d4:87:cb:4a:b4:3d:8d:cf:59:2e:71:
         3a:ce:1f:a3:e5:e2:3c:98:1e:d2:95:12:2c:db:5b:26:8e:c1:
         6f:a7:6f:07:d9:69:5c:dc:8c:78:c6:67:ce:fd:ea:25:d0:c5:
         09:ae:ae:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----