Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/9f5a136491b877cbb1d349ce1ae347463ab61ceb.roa
File:                     9f5a136491b877cbb1d349ce1ae347463ab61ceb.roa (raw, json)
Hash identifier:          uvx+p7i0cyDwQw3xh/4vD9q5zM8p/iZFWsOYWvXsO2Q=
Subject key identifier:   BC:28:CF:D3:41:42:B1:29:9B:EB:EA:81:FF:AB:F6:6A:BE:90:EF:24
Certificate issuer:       /CN=6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c
Certificate serial:       15526A
Authority key identifier: 0E:C8:8E:FC:D0:A1:EA:3A:BE:3C:74:8C:C7:B4:DF:51:DA:07:17:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/9f5a136491b877cbb1d349ce1ae347463ab61ceb.roa
Signing time:             Mon 12 Jun 2023 16:04:23 +0000
ROA not before:           Sun 11 Jun 2023 16:04:22 +0000
ROA not after:            Thu 12 Jun 2025 16:04:22 +0000
asID:                     270065
IP address blocks:        200.114.64.0/20 maxlen: 24
                          2803:9e80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397354 (0x15526a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c
        Validity
            Not Before: Jun 11 16:04:22 2023 GMT
            Not After : Jun 12 16:04:22 2025 GMT
        Subject: CN=9f5a136491b877cbb1d349ce1ae347463ab61ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:67:c9:2e:0a:49:0d:eb:c8:71:45:f9:7c:02:
                    32:22:ee:00:c9:3e:1d:e0:10:13:65:65:87:d8:b8:
                    1f:8e:7d:69:4a:ee:5f:cb:c6:9b:28:3b:f1:22:eb:
                    34:39:35:84:d2:ff:27:6b:2d:2d:c6:39:5c:64:94:
                    ce:2a:15:18:4c:6e:18:c3:20:bf:42:0b:8c:4f:2f:
                    56:02:a0:11:c9:82:a4:8f:bd:a3:60:b5:15:6c:10:
                    5e:55:9e:15:6c:b8:0b:92:f8:11:cf:88:09:2a:66:
                    09:f5:3d:da:5b:19:c4:c8:a5:e7:b3:cd:9e:48:f1:
                    a7:fa:72:b4:e0:f7:80:d9:09:5e:3e:89:e3:17:20:
                    9a:9d:76:03:b1:91:04:30:79:29:51:c9:af:a8:40:
                    f7:d9:67:f9:c3:3b:e2:d0:5f:e0:b4:5d:04:65:f6:
                    3c:10:bb:81:f4:a4:3f:0e:5f:d1:0c:ed:2d:dc:e8:
                    08:ae:75:55:cc:7c:90:6b:41:4e:73:5c:b8:ea:a3:
                    3e:dc:43:6d:66:2b:6e:0b:a7:00:28:8c:1c:f4:24:
                    69:cb:42:de:48:5f:5e:2d:7d:49:9b:b4:2b:36:9f:
                    26:75:73:54:8d:7f:be:34:52:11:d7:3e:fd:76:78:
                    46:04:f7:b1:e9:9f:67:bc:82:d2:d9:d4:90:1c:2e:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:28:CF:D3:41:42:B1:29:9B:EB:EA:81:FF:AB:F6:6A:BE:90:EF:24
            X509v3 Authority Key Identifier:
                keyid:0E:C8:8E:FC:D0:A1:EA:3A:BE:3C:74:8C:C7:B4:DF:51:DA:07:17:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/9f5a136491b877cbb1d349ce1ae347463ab61ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.64.0/20
                IPv6:
                  2803:9e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:43:a3:ee:29:9a:0f:fe:5a:44:a2:69:a3:cf:75:42:c7:83:
         25:30:5d:71:0b:14:02:04:b2:c4:2b:f4:90:0e:65:cd:6d:8b:
         fc:0c:96:85:0f:07:e3:56:48:81:2c:5c:7b:55:8b:f6:c8:8c:
         9c:b2:ac:ea:31:69:42:68:ad:a8:67:b7:02:d3:a4:7d:b4:c9:
         c0:f9:93:e5:8a:f6:9f:60:23:6d:2a:2e:ac:e1:24:fd:99:04:
         2b:e0:83:a0:9b:4e:2d:6b:59:4f:50:df:2d:6b:7b:8a:4d:08:
         7f:34:25:db:d3:0c:25:ae:a9:c0:2c:ab:cc:39:a2:67:5a:83:
         45:79:c6:a0:a0:0f:ac:ff:75:46:44:d4:68:5d:82:7a:e2:f7:
         fd:75:b5:a0:5c:fd:d1:a1:c1:e5:c9:83:f7:b8:71:19:68:08:
         05:ea:78:1d:ed:6c:a7:4a:45:6f:21:d0:1f:fe:d6:2f:ed:7a:
         ad:07:c0:96:c3:ee:8a:bb:58:4f:be:13:58:1c:18:ad:87:6b:
         c9:f2:ab:4f:da:65:be:1d:bf:ed:b7:cc:14:f7:29:db:fe:9d:
         d1:4a:40:2a:23:8d:f5:17:3e:6b:17:a7:a7:f0:66:58:82:06:
         2a:a8:37:62:94:c9:e1:0d:84:07:48:f9:8d:23:8f:6d:bf:69:
         d6:2f:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----