Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/ecc0c71cb0163dfeaa4b7205ff2ccee636a92222.roa
File:                     ecc0c71cb0163dfeaa4b7205ff2ccee636a92222.roa (raw, json)
Hash identifier:          h0cLqeP0QuxaHvsqUI99faaX79FLOot8/Mj+LlZCl/g=
Subject key identifier:   EE:84:D3:5F:0A:6C:C7:A5:6F:A1:2C:D6:5C:6D:E2:2F:EF:93:4D:AD
Certificate issuer:       /CN=cdf3c4883ddca1519ed46106e0af85f1db80392f
Certificate serial:       11A1CB
Authority key identifier: 46:C2:C8:A1:9E:E3:9F:CB:34:26:C6:F1:3E:6F:59:9A:F8:52:B7:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdf3c4883ddca1519ed46106e0af85f1db80392f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/ecc0c71cb0163dfeaa4b7205ff2ccee636a92222.roa
Signing time:             Sun 20 Aug 2023 08:30:00 +0000
ROA not before:           Sat 19 Aug 2023 08:30:00 +0000
ROA not after:            Mon 18 Aug 2025 08:30:00 +0000
asID:                     28120
IP address blocks:        200.114.88.0/21 maxlen: 24
                          2803:420::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155531 (0x11a1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf3c4883ddca1519ed46106e0af85f1db80392f
        Validity
            Not Before: Aug 19 08:30:00 2023 GMT
            Not After : Aug 18 08:30:00 2025 GMT
        Subject: CN=ecc0c71cb0163dfeaa4b7205ff2ccee636a92222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:bf:78:13:ee:b2:83:3b:9a:be:88:7b:8f:
                    7c:8e:40:20:6e:a6:ae:3a:2d:bb:d4:3d:85:9a:9b:
                    dd:ed:42:43:4d:6b:5d:66:48:32:1a:bf:a8:a0:20:
                    18:14:14:ac:d5:21:a6:eb:72:35:bd:f7:f6:f6:7e:
                    b8:73:f0:58:9d:da:94:e2:f1:e0:2e:41:62:1f:cb:
                    3d:33:72:e5:a9:c4:d9:59:75:a1:a1:e3:76:47:de:
                    65:96:50:35:b1:0d:60:54:cc:9e:1f:5a:45:51:2f:
                    e3:9d:d6:0c:ad:da:f9:ae:bb:6d:3e:62:54:19:9c:
                    96:b3:57:57:50:1f:7d:e6:66:08:28:59:e8:cc:73:
                    88:af:95:bb:5c:19:7f:e4:f0:f9:7f:f0:4a:52:cc:
                    4b:73:70:ac:94:65:60:8c:88:50:12:2d:3c:3f:18:
                    28:ac:ad:2d:c5:80:57:a0:b4:69:c7:c7:01:41:d8:
                    0e:76:26:39:a3:6b:26:65:b1:d3:61:63:27:47:2d:
                    dc:ed:0a:b6:35:1a:7e:e0:6a:c1:f1:68:4f:8e:9a:
                    33:1e:cb:35:1c:3a:32:68:d3:50:be:f6:8a:b4:0e:
                    16:da:3e:c8:d0:13:a8:35:76:d2:81:94:a7:8e:9b:
                    e6:0f:5f:c7:71:c9:3c:1a:4b:21:95:7e:b8:65:1e:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:84:D3:5F:0A:6C:C7:A5:6F:A1:2C:D6:5C:6D:E2:2F:EF:93:4D:AD
            X509v3 Authority Key Identifier:
                keyid:46:C2:C8:A1:9E:E3:9F:CB:34:26:C6:F1:3E:6F:59:9A:F8:52:B7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdf3c4883ddca1519ed46106e0af85f1db80392f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/ecc0c71cb0163dfeaa4b7205ff2ccee636a92222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/cdf3c4883ddca1519ed46106e0af85f1db80392f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.88.0/21
                IPv6:
                  2803:420::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:d9:68:aa:84:8f:01:e5:ef:fb:68:90:3b:b2:38:b8:e5:73:
         0d:7c:24:9b:1e:c1:52:48:26:70:3a:3a:3e:b1:87:dc:5d:a7:
         a0:25:ca:99:86:96:cd:d6:fd:59:32:c5:1d:64:58:18:f5:fd:
         52:8e:78:5d:22:21:61:ee:b8:e3:dd:cb:fb:a1:d1:a7:4c:64:
         7b:e1:f3:b7:a2:48:34:91:44:54:bb:bc:bc:38:7c:05:c0:d8:
         c5:95:fa:9c:c3:1a:bd:52:63:52:e2:f1:aa:a3:0b:28:6b:7e:
         fc:89:c5:fd:be:44:b0:d4:8c:cf:ec:8f:c1:26:7b:d4:49:c7:
         37:83:dd:ce:7f:db:49:c2:9a:c7:67:f9:55:c1:09:8a:1f:52:
         42:93:70:0c:d1:fa:a9:2d:11:35:29:ae:b7:bd:4c:9e:e0:fd:
         99:a8:2c:13:a4:b9:09:8d:5e:15:8a:af:01:d6:a0:f4:3c:f6:
         59:c3:a6:68:43:55:8f:c9:e4:0b:0c:68:ae:92:15:0f:f1:eb:
         6e:2b:31:aa:88:99:c3:4f:3c:16:b3:aa:e0:c5:d2:e3:3a:23:
         e2:1b:f6:da:38:ef:8c:db:23:1f:d3:72:db:18:0c:c9:5e:17:
         9d:bf:70:26:3a:62:a3:5a:c7:c3:15:d6:fe:79:76:50:62:28:
         a8:61:86:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----