Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/fc2798064e4aca0b2ccca1a047c050868d993ada.roa
File:                     fc2798064e4aca0b2ccca1a047c050868d993ada.roa (raw, json)
Hash identifier:          lkRAShn91/uagOo0fvo8Z5WHbfbR/ltbcXODe4VUTdI=
Subject key identifier:   17:B0:05:2C:42:77:0A:FF:CF:AC:D5:E6:4B:BE:E5:13:F7:7C:24:0B
Certificate issuer:       /CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Certificate serial:       21DDD2
Authority key identifier: 2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/fc2798064e4aca0b2ccca1a047c050868d993ada.roa
Signing time:             Wed 19 Jul 2023 19:58:10 +0000
ROA not before:           Tue 18 Jul 2023 19:58:10 +0000
ROA not after:            Sat 19 Jul 2025 19:58:10 +0000
asID:                     13489
IP address blocks:        200.75.64.0/19 maxlen: 19
                          200.114.0.0/18 maxlen: 18
                          190.240.0.0/16 maxlen: 16
                          168.0.244.0/22 maxlen: 22
                          201.236.192.0/18 maxlen: 18
                          190.70.0.0/15 maxlen: 16
                          200.58.192.0/19 maxlen: 20
                          200.116.0.0/16 maxlen: 18
                          200.122.192.0/18 maxlen: 18
                          200.6.160.0/19 maxlen: 19
                          200.30.64.0/19 maxlen: 19
                          200.58.224.0/20 maxlen: 20
                          201.190.64.0/18 maxlen: 18
                          190.165.0.0/16 maxlen: 16
                          190.9.192.0/18 maxlen: 18
                          200.31.192.0/19 maxlen: 19
                          191.98.0.0/17 maxlen: 17
                          200.13.224.0/19 maxlen: 19
                          186.0.0.0/17 maxlen: 17
                          190.0.0.0/18 maxlen: 18
                          190.128.0.0/17 maxlen: 17
                          190.151.192.0/18 maxlen: 18
                          190.7.128.0/19 maxlen: 19
                          181.128.0.0/12 maxlen: 16
                          200.24.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2219474 (0x21ddd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
        Validity
            Not Before: Jul 18 19:58:10 2023 GMT
            Not After : Jul 19 19:58:10 2025 GMT
        Subject: CN=fc2798064e4aca0b2ccca1a047c050868d993ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:12:1f:6b:d9:d0:13:0f:01:1a:46:ab:c1:
                    73:32:47:85:3d:ef:57:93:8f:44:ea:08:9e:4f:02:
                    51:80:cd:5a:1d:75:01:8e:39:18:4c:8e:94:68:f7:
                    55:ab:f4:db:d4:b2:ff:67:cf:38:86:92:5a:2b:75:
                    a9:7b:4e:1d:b9:d3:b7:39:36:67:50:1d:af:50:3d:
                    f1:0c:6f:a7:c6:a0:fb:2c:8c:a2:53:62:f5:d2:af:
                    3e:f4:08:7d:d0:16:de:46:54:91:f3:1b:93:8d:00:
                    0c:31:91:32:1e:78:f5:2a:ab:c5:27:35:c9:9b:fb:
                    e9:4a:c7:cc:ba:7c:54:f8:ce:74:27:90:2c:38:6a:
                    49:65:a0:e7:9b:ae:ce:a2:69:b3:64:4a:09:89:70:
                    da:77:dd:a6:9f:18:37:6f:09:55:16:b9:4a:1c:34:
                    32:28:dd:26:9f:93:7e:f2:7d:2a:07:19:8d:24:ca:
                    62:84:2f:48:5f:bc:a2:7f:fa:30:0f:db:49:f9:20:
                    7f:7d:a0:e8:aa:08:1e:7b:c7:08:56:fe:c8:3e:c3:
                    57:2b:d0:2e:ef:ab:2d:ea:43:d5:59:ad:0f:99:91:
                    dd:a2:54:c0:c7:bc:33:e6:7e:7b:65:6c:69:b2:f8:
                    cf:2a:3e:d2:4d:aa:7a:10:52:6c:6c:a1:6b:45:b1:
                    46:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B0:05:2C:42:77:0A:FF:CF:AC:D5:E6:4B:BE:E5:13:F7:7C:24:0B
            X509v3 Authority Key Identifier:
                keyid:2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/fc2798064e4aca0b2ccca1a047c050868d993ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/1159fdc4276fa3bfc64df717e4ca0a75249cf188.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.244.0/22
                  181.128.0.0/12
                  186.0.0.0/17
                  190.0.0.0/18
                  190.7.128.0/19
                  190.9.192.0/18
                  190.70.0.0/15
                  190.128.0.0/17
                  190.151.192.0/18
                  190.165.0.0/16
                  190.240.0.0/16
                  191.98.0.0/17
                  200.6.160.0/19
                  200.13.224.0/19
                  200.24.32.0/19
                  200.30.64.0/19
                  200.31.192.0/19
                  200.58.192.0-200.58.239.255
                  200.75.64.0/19
                  200.114.0.0/18
                  200.116.0.0/16
                  200.122.192.0/18
                  201.190.64.0/18
                  201.236.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         17:1f:82:41:57:8c:f8:97:b2:a5:dc:ed:75:af:35:75:98:fe:
         aa:c6:5c:bf:18:d0:d3:78:58:19:84:ed:a2:8a:44:65:98:58:
         1d:b4:1e:e7:7b:4c:71:16:93:e5:5e:21:1c:66:74:6d:40:96:
         ad:bd:d4:62:ac:c7:5f:f5:36:07:10:cc:8f:8e:2e:59:6c:90:
         4a:eb:0f:e1:9b:d2:ca:4a:34:cf:9f:bc:35:16:eb:ec:f9:60:
         c3:dc:66:d6:86:e8:35:38:29:e6:b2:9b:47:f0:6a:f5:7e:ad:
         5f:6d:bf:44:70:dd:84:c4:63:78:d7:6e:41:31:42:0d:20:e1:
         23:8c:af:0e:f6:16:25:38:46:b2:37:7a:da:5f:71:ee:2d:4c:
         7d:1f:8c:16:3e:0f:4c:6c:a2:b9:da:d2:74:6b:4a:ea:19:f5:
         d4:f9:7f:5b:89:43:37:0c:2c:21:c7:a6:02:7e:e4:c9:e6:34:
         e6:3e:ca:c8:41:9b:9c:47:4e:0c:86:78:7c:e8:09:ce:1f:f5:
         aa:25:d6:7f:97:aa:da:f6:f8:b1:aa:43:6f:cb:85:a3:a1:7c:
         44:8b:4a:f9:f6:de:7a:e8:bf:79:7a:09:a4:83:56:53:86:52:
         93:ad:83:36:c7:d4:9e:9c:6e:1b:e4:08:e8:d1:c1:a7:cf:7e:
         11:71:31:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----