Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2336ed08-4445-42f1-b8c0-2c7a1ee7d63a/cb95f25de097869cba4d9e69decc18158ca613d1.roa
File:                     cb95f25de097869cba4d9e69decc18158ca613d1.roa (raw, json)
Hash identifier:          5afEdesiI/EqOGL6Q34vHQ9vok82AqeX/bzq16YqiQc=
Subject key identifier:   61:BC:3B:64:61:72:2D:36:73:6C:25:A6:33:D3:E5:41:AF:B1:36:5A
Certificate issuer:       /CN=99659f34ad824f1fc52c8da9bfc527f79ed71cc8
Certificate serial:       014D
Authority key identifier: F7:AA:BF:2D:9E:09:EB:37:8C:62:B5:FF:86:49:97:39:DA:B6:83:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99659f34ad824f1fc52c8da9bfc527f79ed71cc8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2336ed08-4445-42f1-b8c0-2c7a1ee7d63a/cb95f25de097869cba4d9e69decc18158ca613d1.roa
Signing time:             Mon 01 Aug 2022 15:06:36 +0000
ROA not before:           Mon 01 Aug 2022 03:00:00 +0000
ROA not after:            Thu 01 Aug 2024 03:00:00 +0000
asID:                     269870
IP address blocks:        200.26.224.0/22 maxlen: 24
                          2803:54e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99659f34ad824f1fc52c8da9bfc527f79ed71cc8
        Validity
            Not Before: Aug  1 03:00:00 2022 GMT
            Not After : Aug  1 03:00:00 2024 GMT
        Subject: CN=cb95f25de097869cba4d9e69decc18158ca613d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:56:f6:14:14:b4:b3:72:04:5e:f8:6f:94:
                    d5:58:9d:04:7f:57:b5:14:96:6a:47:6e:64:d7:72:
                    fd:60:47:33:0b:80:77:fe:0f:26:5d:99:ef:4b:cb:
                    c9:71:e2:ba:1f:87:a3:94:94:7b:6c:f4:4a:c1:36:
                    ed:38:54:2b:cf:42:d7:05:a2:52:da:7d:4b:78:b8:
                    4e:82:01:c7:3a:37:ea:74:e5:2c:89:53:d8:75:d0:
                    f6:9d:6b:46:c1:87:8c:4e:4b:5f:77:93:64:63:5a:
                    a6:44:93:13:6b:cb:49:bc:b4:36:11:ed:79:11:09:
                    d6:8c:b7:c2:23:d7:33:b0:54:e3:13:cc:63:a2:52:
                    4a:9b:44:38:ac:48:b3:52:f4:af:4e:90:ae:de:ce:
                    fa:7f:3a:07:a2:77:9c:cb:33:f7:28:93:8d:9a:b4:
                    32:c4:7c:18:85:27:e8:77:30:f4:88:66:98:df:76:
                    d3:3e:ff:ee:01:c4:34:84:69:74:82:9e:4c:62:9f:
                    e1:78:fc:3a:86:eb:3f:c6:a7:9c:aa:71:fa:6e:7e:
                    ca:0f:3f:4e:bf:98:89:22:8c:30:93:41:50:e5:de:
                    dc:87:32:59:5d:cf:46:b1:4f:c3:b7:d7:80:5f:4f:
                    c7:d5:9d:5d:e4:69:72:55:84:f9:50:06:3d:7d:55:
                    33:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BC:3B:64:61:72:2D:36:73:6C:25:A6:33:D3:E5:41:AF:B1:36:5A
            X509v3 Authority Key Identifier:
                keyid:F7:AA:BF:2D:9E:09:EB:37:8C:62:B5:FF:86:49:97:39:DA:B6:83:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99659f34ad824f1fc52c8da9bfc527f79ed71cc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2336ed08-4445-42f1-b8c0-2c7a1ee7d63a/cb95f25de097869cba4d9e69decc18158ca613d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2336ed08-4445-42f1-b8c0-2c7a1ee7d63a/99659f34ad824f1fc52c8da9bfc527f79ed71cc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.224.0/22
                IPv6:
                  2803:54e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:3b:0c:f5:05:38:82:4b:12:c2:7d:38:2a:60:0b:0a:42:20:
         f7:8e:93:94:91:bd:8f:cd:d7:d3:4d:60:1e:f2:e2:6b:55:61:
         f1:3f:98:c9:a6:e7:f8:64:b3:e7:ef:00:9c:4a:e2:bc:e1:3c:
         0f:25:a9:1b:07:cc:e1:3d:38:06:d7:1a:74:4a:a1:bd:48:41:
         17:f1:3a:e1:00:68:4a:be:ad:77:fc:6c:23:2f:39:a9:9b:2c:
         47:d7:bd:3f:a6:35:39:b2:13:ec:8a:fa:f9:e1:a8:02:12:91:
         cf:e8:a5:b3:5e:18:66:31:cc:4d:7b:c6:35:ab:e6:28:9c:bf:
         95:30:1f:cf:bc:be:81:fc:74:8b:00:b4:a4:a9:3b:3e:c9:5d:
         1e:43:27:a9:67:3a:e6:b9:5f:4b:d5:28:0f:85:0f:2c:ff:a2:
         d4:89:0c:93:45:ec:09:26:41:36:29:f5:85:bd:7d:3c:fd:67:
         db:18:0b:28:f2:af:eb:8b:66:fd:57:de:6e:b5:e6:ec:b5:58:
         7e:ee:c8:27:2f:00:ad:ee:55:a0:05:e5:63:90:95:b1:8f:3d:
         f6:91:bd:ba:12:b8:0d:3b:cd:4e:81:25:c1:a7:4e:74:63:a0:
         83:bc:2d:de:92:41:86:d3:3c:74:cd:3f:31:99:83:a0:cb:ae:
         bc:2d:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----