Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c6f5a26638c1f7f6c6617eb728aa80faf7d11d43.roa
File:                     c6f5a26638c1f7f6c6617eb728aa80faf7d11d43.roa (raw, json)
Hash identifier:          eGN1EED4cab3UbHQNwjTrk4bDAdq/AHX7lha+Z9aY4E=
Subject key identifier:   7D:BD:DE:7E:63:76:1F:70:1E:F1:0F:2E:44:9D:BB:91:BF:62:AA:8B
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       1E593E
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c6f5a26638c1f7f6c6617eb728aa80faf7d11d43.roa
Signing time:             Mon 05 Dec 2022 05:21:54 +0000
ROA not before:           Mon 22 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     10697
IP address blocks:        200.50.160.0/23 maxlen: 23
                          200.50.160.0/24 maxlen: 24
                          200.50.161.0/24 maxlen: 24
                          200.50.164.0/24 maxlen: 24
                          200.50.168.0/24 maxlen: 24
                          200.50.173.0/24 maxlen: 24
                          2800:820::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988926 (0x1e593e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Mar 22 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=c6f5a26638c1f7f6c6617eb728aa80faf7d11d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:14:9b:bc:37:9f:5e:2f:ec:dc:8d:a4:b0:
                    b0:8a:b0:a5:80:51:56:73:df:7a:0f:5a:4b:42:8c:
                    9f:b4:4f:58:e3:3c:bc:7f:7a:77:5e:ab:9f:0b:db:
                    d6:14:62:00:bc:b0:09:9a:3e:12:b0:cc:39:01:08:
                    e4:0d:5e:b3:93:8f:ba:1c:cb:06:cc:ca:95:1f:3a:
                    03:fe:a6:aa:b9:eb:04:8b:de:3f:96:6e:13:d5:85:
                    ef:ce:d5:c2:c8:60:bb:3e:c5:87:e1:bd:be:89:c2:
                    39:5b:cf:2b:a3:75:f0:ab:2e:e1:33:6c:cc:aa:74:
                    2d:f3:a1:19:84:f9:bc:ad:80:7f:c2:e5:f9:ca:68:
                    f4:ad:56:4d:38:39:4f:09:1f:61:63:ea:bb:c1:d5:
                    6c:1e:5a:b2:f7:8b:54:80:a1:50:7b:2d:fc:e0:6a:
                    dc:6a:d6:67:76:e4:a8:ac:f7:87:f0:6f:a0:e5:5a:
                    1e:fb:87:4e:e3:48:e8:db:4d:d0:65:42:7b:9e:21:
                    a5:6f:d0:62:20:9a:e8:57:c8:09:f2:8c:ee:02:c2:
                    ae:77:80:43:23:b1:a8:f6:a6:97:3d:94:d6:aa:3d:
                    23:af:12:82:37:1a:b5:72:ce:f1:ba:80:86:3f:3b:
                    b5:dc:ae:d6:e0:bf:ff:be:37:33:e0:cd:4e:85:d1:
                    8d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BD:DE:7E:63:76:1F:70:1E:F1:0F:2E:44:9D:BB:91:BF:62:AA:8B
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c6f5a26638c1f7f6c6617eb728aa80faf7d11d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.160.0/23
                  200.50.164.0/24
                  200.50.168.0/24
                  200.50.173.0/24
                IPv6:
                  2800:820::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:ec:fc:bd:78:0c:5b:f6:64:54:de:a0:cb:ae:ce:7f:a6:f7:
         b4:7c:5f:cd:8c:47:8c:4d:70:45:54:4c:f3:fc:6b:bf:ed:dd:
         03:b5:5b:af:e5:fb:bc:6b:c1:71:6c:7a:66:fa:8c:57:bd:8d:
         d1:2a:19:5c:52:e5:f9:28:52:e0:f5:f5:86:a7:e7:fe:47:29:
         fb:7e:a3:ac:e2:ee:6b:f0:e7:8a:9c:d0:a9:41:bb:ef:1a:56:
         d7:53:d2:6f:a2:d3:d2:e4:dd:3a:d5:52:c1:79:e7:79:59:4d:
         f4:46:f6:63:8b:94:e7:54:f4:7c:bd:0b:05:2a:b6:c7:d8:f1:
         a6:d1:ce:29:f0:01:37:0d:d4:92:97:12:b3:40:30:dc:14:88:
         06:64:15:ba:b2:7f:6f:8b:c4:46:74:b5:9f:81:47:0d:0f:8b:
         be:41:69:c1:29:cc:c7:b4:47:45:6d:20:44:27:9a:9e:84:7d:
         ee:0f:69:0a:43:2f:16:02:21:bb:d8:5e:ea:99:c7:fc:40:55:
         89:9b:58:3b:27:f2:13:f7:d6:94:67:a8:a8:21:6e:ab:45:21:
         20:59:f3:43:7f:96:c2:e1:55:31:9f:2d:a7:b1:c5:e6:58:62:
         de:11:65:79:30:e9:33:2f:83:d8:59:c9:0b:ba:11:9e:f7:d5:
         45:03:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----