Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/9fd1a3f9779845d685fd74358ab866e45c845ef4.roa
File:                     9fd1a3f9779845d685fd74358ab866e45c845ef4.roa (raw, json)
Hash identifier:          v4S5/cyk24IB01ThK6YSMtlKYwWqEHxONlD01KmjDNU=
Subject key identifier:   AA:FB:DB:44:D3:3F:D5:5C:56:17:5F:27:77:59:56:A1:B0:F4:99:61
Certificate issuer:       /CN=0c9d15f0b793ce01d9a5e1070b5047a9e1264605
Certificate serial:       20EFEE
Authority key identifier: 0A:D2:99:50:58:AC:0F:87:83:2C:1C:9E:40:2B:35:E8:38:B8:BB:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/9fd1a3f9779845d685fd74358ab866e45c845ef4.roa
Signing time:             Wed 01 Nov 2023 12:32:56 +0000
ROA not before:           Wed 01 Nov 2023 12:32:56 +0000
ROA not after:            Sat 01 Nov 2025 12:32:56 +0000
asID:                     61463
IP address blocks:        200.34.171.0/24 maxlen: 24
                          2801:0:3c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158574 (0x20efee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9d15f0b793ce01d9a5e1070b5047a9e1264605
        Validity
            Not Before: Nov  1 12:32:56 2023 GMT
            Not After : Nov  1 12:32:56 2025 GMT
        Subject: CN=9fd1a3f9779845d685fd74358ab866e45c845ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:d3:fe:f2:10:fa:24:97:50:05:5d:2e:d9:
                    ab:ad:f3:ba:cc:0b:80:70:dd:56:cd:82:d0:7e:f8:
                    b6:a4:b4:e7:11:47:f8:2d:7c:9f:e9:79:14:a3:3c:
                    43:6b:51:7d:d8:a7:3b:ca:1c:bc:42:2e:04:f7:be:
                    74:91:80:21:cd:b6:ff:ae:3a:0b:7b:f5:a9:b8:f1:
                    73:f3:be:d2:c4:85:26:36:c4:41:3f:33:0c:f8:b5:
                    f7:98:9c:b2:6e:1a:4e:23:ee:31:18:2e:02:fb:e1:
                    67:7e:8b:a5:ad:51:ba:c9:19:8d:37:18:ea:aa:34:
                    53:87:89:e6:82:a2:2f:2b:39:0d:08:c5:d5:d1:e6:
                    4c:c2:80:14:df:60:a6:7f:c0:97:cb:40:fe:47:d3:
                    ff:d9:02:7d:a6:f5:c7:70:67:13:41:2d:5f:42:ac:
                    74:06:03:80:d4:4b:c9:a3:98:04:61:f8:e5:9e:77:
                    72:20:e9:68:39:c0:cf:b2:af:42:7c:3e:7f:2e:03:
                    70:50:6d:e2:e0:df:24:c4:18:da:50:17:39:34:66:
                    45:ab:5c:15:12:e8:72:39:c9:95:b6:89:8c:dc:63:
                    a2:8c:78:7f:2c:c2:60:28:56:c0:c0:97:09:3e:23:
                    e0:1d:fe:e5:f6:76:01:a7:8c:b1:32:4c:5a:51:80:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FB:DB:44:D3:3F:D5:5C:56:17:5F:27:77:59:56:A1:B0:F4:99:61
            X509v3 Authority Key Identifier:
                keyid:0A:D2:99:50:58:AC:0F:87:83:2C:1C:9E:40:2B:35:E8:38:B8:BB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/9fd1a3f9779845d685fd74358ab866e45c845ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.171.0/24
                IPv6:
                  2801:0:3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:93:1b:f2:cd:99:ec:e1:d0:62:30:bc:d6:19:f7:8e:35:af:
         fa:c1:c8:4e:50:5a:97:be:48:0b:fb:ae:db:d9:72:66:cf:f9:
         1b:6b:36:67:3c:e9:62:45:94:66:c4:ce:ea:5d:ce:93:09:92:
         55:25:7a:6d:75:e8:ed:15:27:30:e2:35:7d:f8:5a:37:d1:bd:
         52:d1:7a:09:11:14:24:4e:78:f7:23:9f:18:f7:ba:3a:1b:ce:
         cc:54:9e:ae:7d:1a:2d:32:95:91:fa:f4:1e:3f:9c:ab:06:a8:
         2a:fa:6c:f1:2c:17:9d:15:01:fa:9b:41:67:ab:1c:69:d6:9c:
         df:9c:60:25:31:d8:9c:fc:fc:7c:27:83:5f:dc:0d:78:97:13:
         dc:c2:fc:85:06:39:3e:8c:0f:ab:21:a0:e8:1e:43:2d:de:74:
         36:db:38:47:ca:a2:8f:7f:45:a3:1a:ed:71:ec:8e:7c:b6:93:
         3f:23:3a:15:a1:a7:ae:87:bb:f2:bb:7e:51:a2:43:83:a3:a6:
         0a:cb:95:92:0d:72:4c:5c:a3:0c:d9:7e:ef:3b:87:f7:c2:7b:
         19:67:cf:c0:60:30:dc:7e:cd:e1:2d:68:9c:18:a4:fd:59:d1:
         f5:59:a6:30:72:66:90:8f:7e:01:b8:f3:6d:87:03:04:b6:77:
         92:27:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----