Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/b9d33d253dc90498a01c5248bff36370508dffa8.roa
File:                     b9d33d253dc90498a01c5248bff36370508dffa8.roa (raw, json)
Hash identifier:          GDnA55Ew6yQALTBzsuyFTtq5fc7pGNjDYp6xf41q4KU=
Subject key identifier:   89:E9:C4:B3:35:D0:8F:D1:64:9A:CA:80:E2:4D:07:A6:DA:3D:95:64
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       2211C0
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/b9d33d253dc90498a01c5248bff36370508dffa8.roa
Signing time:             Tue 25 Apr 2023 15:04:50 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     21599
IP address blocks:        201.218.192.0/18 maxlen: 24
                          190.5.224.0/19 maxlen: 24
                          200.90.128.0/20 maxlen: 24
                          190.122.160.0/20 maxlen: 24
                          200.46.0.0/16 maxlen: 24
                          200.115.128.0/19 maxlen: 24
                          2803:600::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2232768 (0x2211c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=b9d33d253dc90498a01c5248bff36370508dffa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:de:7b:45:54:84:9d:6b:ba:38:f7:cc:c0:
                    0e:f3:ee:27:cf:ee:52:1c:8f:56:d2:86:4e:f4:ca:
                    49:9e:30:71:cc:6c:9b:1e:57:3c:37:30:76:08:c4:
                    9b:9b:3b:fd:af:ef:34:ab:75:aa:f1:20:a3:04:c7:
                    bc:ed:60:f4:11:ff:ec:eb:f1:ba:1f:25:e9:98:bc:
                    6b:4d:c8:35:9b:3a:fb:0e:9f:5c:d7:3b:6e:3c:a6:
                    74:20:84:0e:38:8a:b3:30:b9:78:32:f4:9d:52:29:
                    70:f2:1a:e3:ff:ae:53:7d:d2:5a:68:32:76:06:22:
                    2d:8e:60:5c:fd:9b:d7:1f:c7:e8:21:2c:86:9d:bf:
                    3b:34:c7:81:1e:58:df:31:e7:1c:ac:59:89:af:2e:
                    4e:41:ad:ac:6a:2a:33:e2:15:06:e2:e5:f3:03:f5:
                    4b:fa:45:c8:7c:57:99:5d:c5:04:5a:15:20:5c:ec:
                    a3:e1:41:b7:92:13:0f:b1:0a:79:31:85:2e:58:ab:
                    1a:d6:f6:e1:ca:55:97:61:a1:41:37:de:81:60:88:
                    62:8a:cf:a9:ef:bc:ac:c5:7c:13:80:41:c0:7c:2a:
                    41:e8:f2:39:d7:15:84:2c:eb:a9:fd:a1:ff:66:5e:
                    94:01:76:32:b8:c1:76:e8:2b:1d:ef:62:f2:c6:98:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E9:C4:B3:35:D0:8F:D1:64:9A:CA:80:E2:4D:07:A6:DA:3D:95:64
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/b9d33d253dc90498a01c5248bff36370508dffa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.224.0/19
                  190.122.160.0/20
                  200.46.0.0/16
                  200.90.128.0/20
                  200.115.128.0/19
                  201.218.192.0/18
                IPv6:
                  2803:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:81:e3:9b:c6:54:13:d9:7c:ce:dc:e6:61:2a:47:13:92:38:
         61:fb:32:2f:9c:60:10:49:f1:91:45:bd:50:7d:26:02:8c:64:
         0b:b4:d9:8e:60:cc:57:16:92:4a:e1:df:9a:7b:e5:cb:c1:05:
         d1:33:1c:11:4c:a1:bb:01:94:9a:76:c2:e7:76:2b:73:4d:66:
         18:60:a7:a6:fb:48:c8:76:40:09:bc:52:12:82:d2:27:a0:ad:
         38:b6:0d:bb:c4:cf:38:91:bb:26:04:4f:d3:be:e4:8b:ed:00:
         d8:be:bd:cb:c3:05:a0:4d:af:b9:97:fb:8b:f9:fd:10:29:fd:
         0f:38:fd:22:bb:13:90:e4:ca:47:07:1c:6b:bc:8e:e6:f5:5e:
         5c:3b:fa:9c:6e:f7:14:4e:29:9c:4c:ea:83:43:f4:62:c7:c1:
         f4:6d:99:34:16:23:a4:e2:40:b9:68:16:b2:e0:ba:51:46:cd:
         b7:19:c7:2f:55:ce:1e:a0:41:9b:9d:be:5a:41:f8:b4:e9:bf:
         02:ae:e0:40:98:18:3f:f7:8e:6e:ff:7b:53:cc:d4:19:36:ac:
         ce:35:0f:67:f7:55:92:56:74:69:f5:dc:4a:85:5a:37:ea:ab:
         fc:c1:50:99:68:9c:17:36:e7:ff:67:24:5e:43:6f:a0:94:a3:
         61:aa:20:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----