Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/acfb3320aeecd5d6d8b1b1ca0fc598a4ee738495.roa
File:                     acfb3320aeecd5d6d8b1b1ca0fc598a4ee738495.roa (raw, json)
Hash identifier:          yx50mDRNSijjY2X3rMzrqiV/ghK5aUjkABri/A1beLc=
Subject key identifier:   C3:7C:D4:F3:D4:DC:C5:61:A7:59:7E:2E:8F:04:20:19:83:68:C1:AA
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       2248EE
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/acfb3320aeecd5d6d8b1b1ca0fc598a4ee738495.roa
Signing time:             Tue 25 Apr 2023 15:05:42 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     14709
IP address blocks:        138.186.88.0/22 maxlen: 24
                          190.57.32.0/20 maxlen: 24
                          200.108.32.0/19 maxlen: 24
                          2800:ce0::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2246894 (0x2248ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=acfb3320aeecd5d6d8b1b1ca0fc598a4ee738495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4c:88:69:92:23:99:03:39:ca:e7:ac:26:98:
                    1c:00:da:71:58:2b:10:98:ee:c5:b4:6b:c0:b0:62:
                    c1:d2:46:4e:20:ee:03:3c:c8:1d:c3:ca:aa:c5:ef:
                    e0:6e:c6:c4:8b:7e:d7:71:e6:65:68:6d:25:98:b4:
                    b8:95:5e:92:54:8a:7e:e9:f8:fb:8f:88:0b:49:46:
                    a0:5c:38:0b:ee:84:d7:65:2f:8a:45:6b:1f:d6:2a:
                    cc:e8:07:a6:da:e6:4d:7b:d6:b2:a2:80:55:c5:5b:
                    95:16:05:df:fd:30:06:42:23:22:cb:9d:1a:45:f4:
                    4b:38:f5:74:15:12:49:4e:c4:a2:3b:6a:b2:02:83:
                    31:1f:8f:31:2f:5e:43:4a:b1:f0:8f:21:21:4d:57:
                    44:8c:d1:3f:d7:4c:94:8e:6b:d3:19:44:98:ef:b6:
                    8b:98:86:42:07:1b:bf:ed:0c:f5:b4:7c:bd:e2:ec:
                    6a:2f:77:18:01:8c:c4:03:e3:b8:ee:5c:8b:07:68:
                    82:18:df:a8:00:84:cb:4d:aa:77:d4:9e:13:45:dd:
                    de:03:ec:d6:af:13:9e:d0:41:ef:24:0c:53:5b:97:
                    9e:93:e1:c0:ee:ed:a7:23:fa:fe:fd:e4:95:21:40:
                    50:37:09:ae:54:a5:03:3e:17:50:31:d8:42:5c:58:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:D4:F3:D4:DC:C5:61:A7:59:7E:2E:8F:04:20:19:83:68:C1:AA
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/acfb3320aeecd5d6d8b1b1ca0fc598a4ee738495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.88.0/22
                  190.57.32.0/20
                  200.108.32.0/19
                IPv6:
                  2800:ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:ff:7e:99:72:ea:9d:15:21:83:5d:0b:01:c9:6b:ce:af:04:
         a7:81:f1:76:9e:83:5c:ad:22:c9:07:c8:4f:a7:6b:ab:69:f7:
         fc:a8:a0:fd:a8:77:32:93:e4:d9:79:5f:b0:31:dc:04:e5:e1:
         24:67:7a:ae:70:dd:8c:71:96:f7:15:73:95:a7:fd:02:2f:79:
         3d:89:70:5d:af:41:23:d5:37:ce:2c:08:e4:e8:04:8a:e6:da:
         06:9d:c4:ee:14:d5:be:6a:6a:35:fc:fc:c8:5c:a0:ef:b1:22:
         79:b4:7d:42:4f:b1:18:05:f6:09:ff:ca:76:53:ca:8d:f5:f3:
         19:4b:b0:6c:0d:68:d4:0a:25:00:94:1f:20:5b:ab:dd:2e:8f:
         a0:6b:06:cc:a5:01:80:14:d7:77:e8:fc:e7:79:81:81:1c:76:
         71:a3:1f:71:84:00:14:66:c3:05:fd:58:43:05:cf:0b:76:af:
         1e:7d:cf:be:27:c6:ef:60:a2:e6:23:24:59:3c:26:f6:cb:09:
         77:09:1b:e5:46:0c:d3:96:a2:3f:9f:34:ce:0d:be:64:08:52:
         e9:7c:64:da:59:b4:b3:40:70:ee:43:30:df:53:bd:88:49:f3:
         c7:74:de:14:31:c6:54:aa:4e:8a:5a:18:1f:ff:07:85:5c:05:
         56:38:48:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----