Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/f6cedaba374c0f26011170e6d13b8000dc4edfc9.roa
File:                     f6cedaba374c0f26011170e6d13b8000dc4edfc9.roa (raw, json)
Hash identifier:          C18k/DwXXnII1n0S69XL0Nbd10eplvBXZwxem1gVyYQ=
Subject key identifier:   65:C9:C1:F0:1A:AA:A4:8C:37:76:A5:7E:49:D2:FC:CC:4D:9F:7A:3C
Certificate issuer:       /CN=ebe91dc23a981293baadb7c6ae73c111d36d98be
Certificate serial:       16AEA6
Authority key identifier: 4B:97:F4:90:08:9F:01:73:35:E2:F9:68:85:0F:3E:CC:64:E5:A5:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebe91dc23a981293baadb7c6ae73c111d36d98be.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/f6cedaba374c0f26011170e6d13b8000dc4edfc9.roa
Signing time:             Mon 10 Jul 2023 15:05:40 +0000
ROA not before:           Sun 09 Jul 2023 15:05:39 +0000
ROA not after:            Thu 10 Jul 2025 15:05:39 +0000
asID:                     61468
IP address blocks:        192.100.198.0/24 maxlen: 24
                          2801:10:6800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1486502 (0x16aea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe91dc23a981293baadb7c6ae73c111d36d98be
        Validity
            Not Before: Jul  9 15:05:39 2023 GMT
            Not After : Jul 10 15:05:39 2025 GMT
        Subject: CN=f6cedaba374c0f26011170e6d13b8000dc4edfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:95:c3:2b:d2:d6:c6:77:ce:0f:53:33:4d:
                    45:6e:c9:33:ba:4b:ef:ee:a0:20:dc:0d:70:40:8f:
                    2e:26:4e:6e:72:b5:43:8e:2c:06:c1:31:35:15:8c:
                    ef:9a:2c:07:39:28:d7:ae:4a:6b:18:b9:76:20:41:
                    80:fd:67:e5:a7:59:fd:01:c6:78:e4:9e:d8:5e:17:
                    fe:f5:a1:09:f1:bc:e0:fc:c6:a1:b1:fb:c5:43:44:
                    7b:32:0a:a4:59:8c:fd:17:a9:50:79:11:c7:7a:af:
                    49:a8:3f:4b:57:02:64:ba:3d:ca:85:49:aa:be:da:
                    d3:b4:95:5e:e4:db:30:77:0f:77:71:e2:b7:73:2d:
                    69:7b:b2:f7:1f:77:d1:4f:9a:d2:0d:c8:64:26:22:
                    9e:c5:9b:d1:58:5c:3f:16:58:4e:de:28:75:8d:57:
                    80:d1:2a:8c:42:4d:da:ba:c5:91:82:ee:b3:13:02:
                    ba:c8:e7:9c:10:57:d6:5f:13:50:32:38:5d:29:be:
                    c5:4f:3f:f8:2e:9a:a2:6a:2d:c1:c1:81:1b:76:54:
                    26:fd:00:8a:8b:65:76:d7:3d:0f:60:23:8f:d6:ee:
                    cc:89:56:32:8d:46:6b:25:d9:00:04:b0:06:94:a7:
                    df:b5:07:78:92:fc:5c:c3:9d:f8:00:5b:e1:82:95:
                    81:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C9:C1:F0:1A:AA:A4:8C:37:76:A5:7E:49:D2:FC:CC:4D:9F:7A:3C
            X509v3 Authority Key Identifier:
                keyid:4B:97:F4:90:08:9F:01:73:35:E2:F9:68:85:0F:3E:CC:64:E5:A5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebe91dc23a981293baadb7c6ae73c111d36d98be.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/f6cedaba374c0f26011170e6d13b8000dc4edfc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/ebe91dc23a981293baadb7c6ae73c111d36d98be.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.198.0/24
                IPv6:
                  2801:10:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:1f:82:9c:f8:22:b4:e7:3e:71:22:94:52:5c:54:4d:30:
         93:65:db:21:7d:fa:14:f0:50:ee:45:2b:6c:f1:05:be:93:6a:
         f7:c6:01:3a:c6:f7:d2:bd:5f:0f:34:15:a2:91:d1:da:94:86:
         7d:43:73:d0:b6:65:3f:cf:4f:f0:6a:41:de:6f:3f:1f:a5:5b:
         02:00:63:0d:b1:52:6b:43:72:e3:54:c7:fe:11:fd:1b:96:3a:
         24:81:ec:39:ee:16:5b:c7:de:13:ce:72:21:f9:c4:58:32:74:
         4d:3c:67:fd:73:5c:c7:bd:91:09:d2:71:8e:10:a2:39:55:1a:
         75:23:b0:d8:07:86:3f:c8:e9:11:f8:58:a6:3e:a0:3e:8b:f5:
         33:94:42:25:dd:af:90:64:72:61:4d:23:5b:60:3b:7a:a2:21:
         a3:9d:60:4c:c1:e0:5f:78:05:f7:e5:b1:19:81:ff:22:16:12:
         84:22:ea:96:5f:db:ff:cf:bf:c3:3b:99:9a:15:3d:58:31:d9:
         2d:23:ac:62:dd:36:ec:83:fc:21:b8:7d:c6:67:22:85:39:0c:
         99:8a:f3:05:4c:57:38:4d:74:16:75:47:a9:ca:9b:cd:f6:d4:
         6e:ce:dd:e6:9f:4e:9f:91:d3:8e:f6:9b:a6:31:2e:49:3c:9c:
         bb:06:6c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----