Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/4f7785a5a25644c8c69193e9bc617c6ceb149a11.roa
File:                     4f7785a5a25644c8c69193e9bc617c6ceb149a11.roa (raw, json)
Hash identifier:          9RZtVDF+OxhGgE1zsUMve8W4iqsDxQddreLbLOrknzo=
Subject key identifier:   5F:19:8A:28:66:A2:63:1C:1C:C4:49:C0:A4:EC:0D:2B:0E:A5:70:67
Certificate issuer:       /CN=cdf3c4883ddca1519ed46106e0af85f1db80392f
Certificate serial:       11A66B
Authority key identifier: 46:C2:C8:A1:9E:E3:9F:CB:34:26:C6:F1:3E:6F:59:9A:F8:52:B7:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdf3c4883ddca1519ed46106e0af85f1db80392f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/4f7785a5a25644c8c69193e9bc617c6ceb149a11.roa
Signing time:             Sun 20 Aug 2023 08:30:01 +0000
ROA not before:           Sat 19 Aug 2023 08:30:01 +0000
ROA not after:            Mon 18 Aug 2025 08:30:01 +0000
asID:                     265831
IP address blocks:        200.114.88.0/21 maxlen: 24
                          2803:420::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156715 (0x11a66b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf3c4883ddca1519ed46106e0af85f1db80392f
        Validity
            Not Before: Aug 19 08:30:01 2023 GMT
            Not After : Aug 18 08:30:01 2025 GMT
        Subject: CN=4f7785a5a25644c8c69193e9bc617c6ceb149a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:e7:4d:de:ed:88:64:b3:85:2a:46:a9:25:
                    c6:e3:52:33:7a:5c:78:2f:5e:09:39:b5:2a:47:81:
                    a8:40:29:36:18:25:f8:5b:3b:78:b3:8a:fb:3c:7a:
                    16:c0:9d:9f:6a:54:86:76:c1:96:1c:13:29:b4:68:
                    a3:b7:a3:be:d9:56:88:ad:45:cb:9d:64:dd:49:f6:
                    bc:e3:83:a5:0e:ce:3e:25:e8:17:24:2b:6d:6a:f1:
                    21:53:36:da:1d:51:ec:12:e5:6d:42:1f:e0:84:2c:
                    96:c4:92:9c:3f:f3:05:86:f3:d6:3e:7e:48:53:46:
                    ee:57:17:8d:62:ff:d2:7e:18:4d:13:11:a9:77:e8:
                    30:8d:c2:17:83:65:4e:b3:7b:b2:85:44:f1:c4:0d:
                    19:08:2f:24:4c:42:b3:63:a8:32:30:81:42:df:3d:
                    20:20:5d:ea:0c:d7:df:09:dd:79:b9:f0:56:2e:d9:
                    4e:71:4b:b5:1e:81:77:74:ea:f7:a9:41:7f:f3:92:
                    72:4d:bf:92:6c:70:6d:01:a3:6f:5a:86:49:6e:c6:
                    d7:f5:8d:f4:91:90:bb:b0:9a:f4:cc:15:6b:c4:66:
                    8f:fc:5e:c4:4a:7d:ca:c3:74:b7:28:9d:b3:39:8f:
                    6e:88:52:32:3d:c3:1b:4b:ef:c9:a2:7f:39:46:53:
                    fd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:19:8A:28:66:A2:63:1C:1C:C4:49:C0:A4:EC:0D:2B:0E:A5:70:67
            X509v3 Authority Key Identifier:
                keyid:46:C2:C8:A1:9E:E3:9F:CB:34:26:C6:F1:3E:6F:59:9A:F8:52:B7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdf3c4883ddca1519ed46106e0af85f1db80392f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/4f7785a5a25644c8c69193e9bc617c6ceb149a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/cdf3c4883ddca1519ed46106e0af85f1db80392f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.88.0/21
                IPv6:
                  2803:420::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:94:12:8f:8f:e2:b6:cd:43:98:65:72:a0:f9:d5:7b:28:
         c5:0f:ae:f2:30:34:a9:09:0e:e5:e5:c2:5e:60:ae:a8:af:30:
         3d:42:83:55:32:bc:61:11:62:61:3d:28:74:d4:93:11:50:73:
         fd:3f:93:a7:fa:ad:ad:de:52:85:00:f8:fa:b7:e2:ad:98:17:
         2f:4e:b1:01:c5:75:6e:d8:6d:c1:74:4f:31:7b:94:ca:25:07:
         16:56:67:58:40:6e:e3:57:29:59:33:af:24:ab:9e:1a:f2:7b:
         85:43:ea:33:47:72:bd:dd:06:98:9a:2a:a2:be:e0:5f:84:fe:
         de:74:1b:bb:d6:62:29:63:f8:fe:4c:1f:1f:49:6a:c8:d5:74:
         57:d9:14:9c:a6:c2:e0:d4:b9:c5:3f:9e:33:75:ed:27:c3:b2:
         58:63:1e:82:23:c4:e9:c5:0c:50:28:ab:23:8d:ca:fa:8d:be:
         3d:4c:4d:d7:2a:6c:95:8e:de:6b:b4:a9:1b:dd:b0:ab:40:07:
         45:6c:c7:e8:7e:81:5d:4e:8e:8b:bf:68:d8:be:7a:27:bb:2a:
         67:4e:0c:62:37:b2:58:e4:23:3c:41:49:9c:3c:99:dd:cc:9c:
         8e:83:1d:34:3c:94:c8:1e:77:97:3f:67:96:37:42:56:6a:9d:
         ac:19:b0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----