Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/41d39b5c03bb45fed31ce6eaad3279b66b421a38.roa
File:                     41d39b5c03bb45fed31ce6eaad3279b66b421a38.roa (raw, json)
Hash identifier:          fepDlahR9t+4L7nfa2teJRsaAcLZRNJpkQ1BGHedPUs=
Subject key identifier:   1D:D3:8C:7F:F7:CF:39:DF:57:41:26:DC:C1:EE:AD:DD:15:08:C3:6B
Certificate issuer:       /CN=07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4
Certificate serial:       157B55
Authority key identifier: F5:94:27:0F:83:2E:B2:05:83:30:E3:F6:46:2B:43:F0:6A:5B:3B:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/41d39b5c03bb45fed31ce6eaad3279b66b421a38.roa
Signing time:             Wed 26 Apr 2023 17:26:17 +0000
ROA not before:           Tue 25 Apr 2023 17:26:17 +0000
ROA not after:            Sat 26 Apr 2025 17:26:17 +0000
asID:                     271791
IP address blocks:        201.221.112.0/22 maxlen: 24
                          2803:bfe0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407829 (0x157b55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4
        Validity
            Not Before: Apr 25 17:26:17 2023 GMT
            Not After : Apr 26 17:26:17 2025 GMT
        Subject: CN=41d39b5c03bb45fed31ce6eaad3279b66b421a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bc:8d:1e:e0:e0:13:74:99:f6:e3:59:0a:90:
                    d7:d3:8a:ec:a0:c7:3e:ca:04:f4:44:a4:d7:e4:04:
                    fc:51:75:ae:d3:04:c0:06:62:52:29:ad:55:97:fb:
                    c6:a7:af:d0:00:56:8a:30:aa:28:df:b5:58:69:64:
                    00:78:57:0b:56:a9:5e:b9:98:cc:5b:e3:6c:e9:44:
                    da:eb:50:65:7d:3d:e1:47:22:92:fe:63:f9:8c:dd:
                    40:3e:21:8b:de:7e:eb:93:12:ac:b0:5b:d4:67:3f:
                    4c:83:58:27:1b:67:31:2c:41:4b:e8:c9:2c:eb:9c:
                    44:9c:cd:1f:d7:e6:ba:e6:86:c5:37:32:85:65:1d:
                    f0:d4:51:dc:73:2f:30:ff:87:67:f3:ca:36:d8:5a:
                    f6:fb:d9:44:9e:eb:9a:05:33:13:25:bf:b9:cc:85:
                    a4:04:e2:e7:b0:c2:e5:26:7e:56:0d:50:d7:1f:bc:
                    fa:2a:4d:3b:94:aa:f1:34:fe:b2:4e:05:6d:16:7b:
                    e2:27:a7:b6:64:da:d4:78:52:ec:b1:87:b3:81:73:
                    3e:0a:58:b3:49:1e:03:69:ed:06:03:13:2d:8d:46:
                    9d:bf:b5:ac:1b:8d:04:c9:d7:b2:91:d1:51:39:0d:
                    5d:8f:fe:59:52:eb:22:c8:ba:c2:7a:72:6c:64:ea:
                    49:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D3:8C:7F:F7:CF:39:DF:57:41:26:DC:C1:EE:AD:DD:15:08:C3:6B
            X509v3 Authority Key Identifier:
                keyid:F5:94:27:0F:83:2E:B2:05:83:30:E3:F6:46:2B:43:F0:6A:5B:3B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/41d39b5c03bb45fed31ce6eaad3279b66b421a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.112.0/22
                IPv6:
                  2803:bfe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:70:53:13:23:74:45:de:45:d0:88:de:7f:96:87:4a:1e:80:
         b6:ab:eb:a7:bf:2c:ee:14:b6:83:c2:47:f5:f3:51:19:fe:aa:
         d0:ed:42:93:d7:29:a0:67:81:7b:1a:e4:65:8e:a7:f3:a5:cf:
         64:b7:11:f8:b6:32:96:a8:f9:59:78:67:6c:48:4f:14:cf:b8:
         f4:d1:a0:f3:a1:33:4b:e2:01:5a:96:7c:7e:52:78:2c:12:c2:
         a3:53:b4:42:38:f8:c5:c2:6a:ac:6b:8a:f1:d4:1a:50:28:a0:
         82:5f:0d:b3:3b:94:d5:bb:e8:00:33:e7:70:31:bf:9e:ea:d2:
         90:7e:fc:fd:c8:c8:d6:d6:0b:93:4e:27:2a:4c:bc:df:27:1a:
         d2:a2:48:11:0f:a5:20:64:85:5b:28:a0:0e:9f:a8:d4:a1:2a:
         eb:af:ef:a5:23:b6:39:5a:3e:de:a2:c1:e8:6d:22:58:bb:86:
         17:6d:d7:6b:eb:ca:c5:9e:4c:1e:86:19:58:6c:89:3e:91:7d:
         ea:b4:63:7d:c8:2c:95:7e:e9:cb:8a:35:7e:6a:be:d4:52:a6:
         5f:2b:46:56:ef:f8:65:f9:3f:6b:bd:cf:60:8f:ea:41:e7:92:
         d3:17:47:3d:66:20:f8:3e:90:13:83:cd:8f:89:de:33:95:d3:
         5b:29:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----