Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/215878ca6f08174080186fe11b26a1f8336e36a9.roa
File:                     215878ca6f08174080186fe11b26a1f8336e36a9.roa (raw, json)
Hash identifier:          g7dMbQJfnCl5X5Dpmco4qiPr+Sz4+iJR1iXGFPyEXtQ=
Subject key identifier:   40:8A:B1:9E:3F:BB:93:54:DF:BD:26:24:70:75:A7:57:FD:FA:48:C1
Certificate issuer:       /CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
Certificate serial:       2443F7
Authority key identifier: CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/215878ca6f08174080186fe11b26a1f8336e36a9.roa
Signing time:             Fri 22 Sep 2023 23:04:47 +0000
ROA not before:           Thu 21 Sep 2023 23:04:47 +0000
ROA not after:            Mon 22 Sep 2025 23:04:47 +0000
asID:                     14754
IP address blocks:        201.247.0.0/17 maxlen: 24
                          201.247.0.0/20 maxlen: 20
                          201.247.0.0/16 maxlen: 24
                          179.5.0.0/16 maxlen: 24
                          190.62.0.0/16 maxlen: 24
                          190.86.0.0/15 maxlen: 24
                          201.247.192.0/20 maxlen: 20
                          201.247.192.0/18 maxlen: 24
                          2800:b20::/30 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2376695 (0x2443f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
        Validity
            Not Before: Sep 21 23:04:47 2023 GMT
            Not After : Sep 22 23:04:47 2025 GMT
        Subject: CN=215878ca6f08174080186fe11b26a1f8336e36a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:e8:fe:47:34:c3:d2:0d:ad:5e:ff:34:d3:
                    fb:3b:31:d1:56:99:38:4c:ce:f6:13:16:43:47:80:
                    8b:a8:77:eb:df:b9:ee:20:ca:db:2a:1a:e8:a1:2e:
                    d3:1c:c3:d7:78:4a:aa:cd:2d:85:2a:f1:5e:e8:b5:
                    e9:af:bf:8e:0e:d9:64:f7:a1:da:6d:32:cd:6e:87:
                    e9:bd:07:c0:70:1d:f7:d4:10:b5:41:51:a6:19:0b:
                    7f:eb:17:3f:69:45:6d:10:28:b3:63:85:a4:86:23:
                    f5:a6:34:b5:b7:7e:06:ca:26:c3:8b:a6:e5:5d:ca:
                    77:ce:49:b9:4a:2e:c0:46:9d:4a:19:e9:5d:12:ab:
                    f2:72:aa:de:d0:de:db:93:da:6d:a7:8a:b5:8c:ce:
                    60:a1:44:93:f9:75:a1:4e:71:0b:4c:30:44:77:10:
                    06:f6:55:c6:a1:da:81:20:9c:5b:43:26:49:07:22:
                    fe:05:93:bf:18:d0:e6:97:28:ed:88:33:2f:ef:14:
                    d1:b4:32:cf:e7:4a:ff:0e:14:4f:59:e9:5a:26:33:
                    1b:e3:9a:ab:ab:d5:c0:ae:fc:e5:72:f1:86:a2:6d:
                    fd:92:b3:f3:f7:ea:50:28:d7:60:27:ba:09:9d:78:
                    27:a6:28:69:63:f2:ef:dd:bb:de:9c:2a:9b:f8:70:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8A:B1:9E:3F:BB:93:54:DF:BD:26:24:70:75:A7:57:FD:FA:48:C1
            X509v3 Authority Key Identifier:
                keyid:CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/215878ca6f08174080186fe11b26a1f8336e36a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.5.0.0/16
                  190.62.0.0/16
                  190.86.0.0/15
                  201.247.0.0/16
                IPv6:
                  2800:b20::/30

    Signature Algorithm: sha256WithRSAEncryption
         c4:3a:91:a4:f0:82:3d:53:d8:00:c6:e9:09:0b:3e:07:91:75:
         17:6b:7f:52:fd:a5:40:64:be:4c:c1:1d:32:dc:58:6b:70:c7:
         c6:53:a2:45:64:86:ba:d5:d1:3c:7f:a9:a6:11:de:92:29:9a:
         75:09:f6:c0:2a:2e:1c:2e:e4:53:9e:ef:58:4a:cd:2f:82:11:
         28:ab:5d:16:56:0c:cb:3e:84:27:5a:23:28:f4:7d:d2:78:28:
         55:f8:51:9c:18:67:33:c7:82:64:ea:f4:0f:6b:11:a8:8a:d3:
         6a:11:72:b3:ad:29:6c:3d:48:cd:99:7b:44:d7:8f:c9:75:eb:
         af:26:11:d9:d2:62:5a:eb:5b:12:53:2e:40:46:01:cd:4a:f4:
         03:ce:fe:51:55:31:78:0d:eb:af:5a:c1:f3:5f:f9:d7:4f:61:
         47:21:ce:93:01:29:b5:9b:02:ce:34:21:b7:44:36:e6:b4:f6:
         f8:1b:be:67:5d:8b:ad:6f:7a:0a:db:52:d1:bc:51:9a:50:74:
         dc:e3:4d:40:ee:0b:73:12:9f:ee:ad:52:0f:63:22:7e:b9:26:
         91:11:72:71:37:c1:18:a0:82:49:a0:eb:34:52:91:eb:9a:f8:
         25:44:69:e0:6e:c8:39:49:38:8f:64:5d:16:fa:3d:ae:79:71:
         31:7f:7a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----