Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dae3a98-a428-47cf-942e-c76eecde42aa/bd6124aa35f8981a0e6394e3c80d1dce56ce08f8.roa
File:                     bd6124aa35f8981a0e6394e3c80d1dce56ce08f8.roa (raw, json)
Hash identifier:          UEbOoHGNd74cIcpfTvowfKIidZpcTBDzs9Es6z02NpI=
Subject key identifier:   6B:02:EF:6D:6D:39:C0:AA:46:E3:95:84:41:48:24:D3:8E:F5:6E:F9
Certificate issuer:       /CN=618d81debd8e70398acd1f9298d63fe47bdc09ff
Certificate serial:       113FEC
Authority key identifier: B6:98:DB:EB:36:C6:DC:92:DA:A3:B7:29:1A:9C:7D:65:8C:62:77:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/618d81debd8e70398acd1f9298d63fe47bdc09ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1dae3a98-a428-47cf-942e-c76eecde42aa/bd6124aa35f8981a0e6394e3c80d1dce56ce08f8.roa
Signing time:             Mon 16 Jan 2023 14:34:51 +0000
ROA not before:           Sun 15 Jan 2023 14:34:43 +0000
ROA not after:            Thu 16 Jan 2025 14:34:43 +0000
asID:                     10778
IP address blocks:        200.2.192.0/18 maxlen: 24
                          200.14.80.0/24 maxlen: 24
                          200.29.0.0/19 maxlen: 24
                          200.29.64.0/19 maxlen: 24
                          2800:8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130476 (0x113fec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618d81debd8e70398acd1f9298d63fe47bdc09ff
        Validity
            Not Before: Jan 15 14:34:43 2023 GMT
            Not After : Jan 16 14:34:43 2025 GMT
        Subject: CN=bd6124aa35f8981a0e6394e3c80d1dce56ce08f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:e7:a1:0c:70:bd:08:02:af:90:7e:98:98:
                    aa:4c:73:f7:9c:15:74:b1:22:b8:e5:e6:5d:5f:d1:
                    b2:c9:88:db:29:63:fb:cf:a7:c1:1b:4b:7f:d3:ff:
                    ca:90:08:40:d5:88:a0:cd:ae:e2:28:44:57:6a:0b:
                    fb:4e:6a:e2:9c:e4:ab:e0:89:10:bf:cc:7a:8e:ae:
                    c8:cd:e5:42:f4:91:ce:c8:53:39:85:3a:e3:22:b0:
                    ed:40:28:92:dd:e8:dc:c0:3f:5e:d2:6b:c0:59:37:
                    40:87:5d:61:93:95:4d:ad:a0:68:0b:6f:9a:87:17:
                    be:af:ef:2e:e3:92:e1:88:fd:f0:40:ac:bd:d0:f0:
                    b6:7b:78:1b:86:50:4a:0c:9f:84:c0:ab:4d:dc:e8:
                    3d:11:7e:16:4b:46:26:22:52:a0:e6:ab:6c:17:ce:
                    c0:10:eb:c5:4e:c3:63:77:2d:b3:dd:a0:ef:2d:a2:
                    37:34:63:77:60:1f:21:11:db:7f:e9:c2:b8:a8:14:
                    6a:34:a6:88:82:91:f3:52:6d:5e:08:5f:e1:ac:95:
                    22:e0:a2:f8:93:2f:ca:87:91:2a:ca:5a:86:5a:9e:
                    89:e2:71:b9:96:cb:f6:5d:90:b2:d6:ae:e2:bb:e6:
                    cd:d6:1a:48:62:fe:05:27:84:9f:2c:d0:60:fb:41:
                    dd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:02:EF:6D:6D:39:C0:AA:46:E3:95:84:41:48:24:D3:8E:F5:6E:F9
            X509v3 Authority Key Identifier:
                keyid:B6:98:DB:EB:36:C6:DC:92:DA:A3:B7:29:1A:9C:7D:65:8C:62:77:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/618d81debd8e70398acd1f9298d63fe47bdc09ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dae3a98-a428-47cf-942e-c76eecde42aa/bd6124aa35f8981a0e6394e3c80d1dce56ce08f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1dae3a98-a428-47cf-942e-c76eecde42aa/618d81debd8e70398acd1f9298d63fe47bdc09ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.192.0/18
                  200.14.80.0/24
                  200.29.0.0/19
                  200.29.64.0/19
                IPv6:
                  2800:8::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:6c:a1:40:19:0a:6e:dc:6b:09:56:57:69:0a:50:04:f9:fa:
         de:76:9c:c1:51:ea:ee:67:d3:cf:b5:d1:a8:c7:d7:01:28:1f:
         2e:99:f0:c1:85:70:86:08:61:72:c1:47:4d:ba:34:44:73:d6:
         8f:74:6e:0b:33:ae:2b:40:20:77:78:1f:9d:93:60:f5:72:b7:
         9c:62:3c:5d:27:4f:58:a1:8d:3a:7d:5e:92:1a:27:53:82:d2:
         8b:de:bf:4e:98:1e:9b:2e:58:d1:b1:f5:5e:f4:be:d7:5b:57:
         b4:2e:54:09:b8:b9:8a:cd:82:dd:7c:f3:84:2b:c3:a5:06:0b:
         5f:9f:e3:6f:bf:a0:9c:22:76:76:88:fb:e9:8b:7e:c5:98:2b:
         5f:0e:44:c1:2b:73:23:5a:0b:3b:d4:00:85:31:af:b7:ff:4f:
         ed:7e:96:d9:7b:3f:5f:78:59:c9:f4:72:26:8b:cb:9b:58:fe:
         a9:da:e4:af:03:10:d2:26:1b:e0:68:80:e8:4b:19:5e:27:9b:
         7a:21:4b:c4:e8:23:03:2d:0d:3d:20:41:68:fe:31:0b:0a:b3:
         20:b2:f2:b5:0e:de:b3:4d:69:58:a8:71:f0:ed:0b:00:56:5b:
         f7:85:f6:72:0b:d8:d1:29:75:94:74:1a:ff:29:f9:79:24:ec:
         d7:b9:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----