Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/fbf6b4bec0506f1a9bb4be319b0a73681b2e52a9.roa
File:                     fbf6b4bec0506f1a9bb4be319b0a73681b2e52a9.roa (raw, json)
Hash identifier:          7Cr+RYZyS4UOKMbrY6tuzAfaRmxYFN3aCcA1rJSMZNE=
Subject key identifier:   C3:3A:04:02:68:2C:63:77:04:77:A3:61:97:DB:13:CA:47:01:EF:19
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       2239E1
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/fbf6b4bec0506f1a9bb4be319b0a73681b2e52a9.roa
Signing time:             Tue 25 Apr 2023 15:05:28 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     10476
IP address blocks:        200.108.44.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2243041 (0x2239e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=fbf6b4bec0506f1a9bb4be319b0a73681b2e52a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:96:90:3f:b2:c1:49:15:66:5f:0d:e6:8c:
                    bc:79:1d:a7:5b:17:b7:52:cc:da:65:75:9f:21:96:
                    bd:69:2f:4c:8e:07:7e:3f:59:25:8e:9a:b3:8b:d4:
                    8b:e8:e9:f7:b5:b8:84:7e:b9:ce:1c:55:a6:74:ae:
                    5b:b3:08:f0:87:f2:6d:26:11:7e:44:49:e9:0a:f7:
                    1a:11:9e:14:a9:55:48:e2:d9:bf:96:bd:78:24:09:
                    16:03:75:ed:e2:16:b4:cc:27:97:c9:7e:5a:a0:86:
                    9b:7b:d9:23:a0:1f:a2:d8:ed:37:a5:f5:99:6e:c6:
                    08:d2:3e:91:30:07:0e:c9:86:ac:e1:56:0c:3c:c6:
                    f4:68:73:ef:a2:2d:a0:be:70:d9:73:66:13:57:f3:
                    b1:4b:44:e0:70:f5:43:18:1c:31:6e:7f:13:33:54:
                    26:31:1d:c5:f5:78:c5:df:4a:74:54:52:f0:60:bd:
                    88:cd:05:0b:dc:3d:85:f3:98:85:67:ed:90:d5:4a:
                    06:aa:e0:c2:27:f6:0a:80:80:a0:d1:00:8c:bb:6c:
                    c9:6f:72:72:46:cb:e6:48:e4:f2:aa:13:71:20:5c:
                    0c:dc:b2:b0:e2:32:3f:39:b1:35:b1:f3:ed:a9:49:
                    98:53:dc:f6:25:74:02:32:77:71:82:1e:fd:8d:3d:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3A:04:02:68:2C:63:77:04:77:A3:61:97:DB:13:CA:47:01:EF:19
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/fbf6b4bec0506f1a9bb4be319b0a73681b2e52a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:ac:38:67:e1:48:c1:54:15:eb:f7:c4:47:5c:a2:af:88:fb:
         c7:c5:3f:73:e1:06:7c:f7:31:49:31:33:16:6d:e9:1e:4a:0e:
         0f:58:2c:e0:fc:86:8f:15:fd:1b:a5:40:5b:92:c4:7a:d2:3e:
         06:3d:ca:e6:75:b6:d5:6f:bc:f2:dc:b5:0a:19:10:7f:26:78:
         46:3a:c1:79:53:e1:fc:44:8e:22:0f:89:7a:66:27:bc:8b:7c:
         d8:40:45:d6:e9:22:5d:cd:ee:65:05:77:a7:fc:d1:8a:35:5b:
         61:28:48:b9:e3:8d:a6:03:cd:94:4c:c5:d3:76:ea:6b:37:a7:
         fb:a1:25:02:ed:75:30:e5:18:8f:3e:31:0f:5e:e4:c7:ac:1e:
         4c:3f:46:71:f7:9f:af:ba:8c:0e:19:f7:21:8b:4b:4a:96:c8:
         1a:c5:c9:61:98:7a:c9:17:b5:15:9f:3d:3a:1c:4f:91:bc:71:
         98:1c:10:6c:6e:35:02:c0:73:5c:75:9f:08:02:75:1f:c8:b9:
         03:15:06:5f:d9:ab:d7:34:30:67:a2:9e:27:ff:59:ac:2c:e8:
         84:6a:97:ad:2a:12:28:59:ab:94:cc:5e:8f:9d:02:74:58:ea:
         cf:c2:e1:4b:9c:42:23:e5:9a:04:3f:a1:c8:d1:34:a8:a7:8c:
         5f:2d:7c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----