Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/1b25e224d27277ba1ef6d1155d9c157e870444e1.roa
File:                     1b25e224d27277ba1ef6d1155d9c157e870444e1.roa (raw, json)
Hash identifier:          /DSz/XQwFdQdFlKbxIMlqO+2QY5BTJwe/szjbUeNCx8=
Subject key identifier:   3D:B3:87:53:3F:D0:99:3A:38:5D:6D:BC:22:83:29:9D:78:AE:56:08
Certificate issuer:       /CN=30d20bef67088f83626615a8accfbafffad06334
Certificate serial:       090E4C
Authority key identifier: 93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/1b25e224d27277ba1ef6d1155d9c157e870444e1.roa
Signing time:             Fri 28 Oct 2022 16:39:05 +0000
ROA not before:           Thu 27 Oct 2022 16:37:57 +0000
ROA not after:            Mon 28 Oct 2024 16:37:57 +0000
asID:                     27932
IP address blocks:        143.202.196.0/22 maxlen: 24
                          190.124.160.0/21 maxlen: 24
                          190.185.112.0/20 maxlen: 24
                          200.52.144.0/20 maxlen: 24
                          200.107.232.0/21 maxlen: 24
                          2800:6a0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593484 (0x90e4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d20bef67088f83626615a8accfbafffad06334
        Validity
            Not Before: Oct 27 16:37:57 2022 GMT
            Not After : Oct 28 16:37:57 2024 GMT
        Subject: CN=1b25e224d27277ba1ef6d1155d9c157e870444e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:5f:bc:ea:b5:e0:22:e5:9e:2e:98:cf:07:
                    95:47:62:73:f9:a1:7e:24:f3:e6:aa:c4:5e:2b:37:
                    eb:5c:b2:62:70:f6:46:e0:b3:ad:45:0e:83:ca:b1:
                    f1:29:51:10:37:6c:3a:57:0a:da:17:51:49:b8:9c:
                    77:8c:42:7d:ba:d0:2c:63:be:5f:72:e6:07:0b:a9:
                    4d:a6:71:95:df:f1:9a:12:04:3e:38:25:79:b2:25:
                    72:e3:c9:2b:11:0d:ba:40:b7:cf:86:20:0e:39:53:
                    39:a4:c4:e8:3e:7b:4b:16:ac:a4:69:d9:bd:72:6b:
                    00:a7:90:08:ed:5f:d4:9d:28:5e:3c:6b:70:54:10:
                    75:15:64:07:41:43:9e:d7:bc:78:56:7a:0f:e4:42:
                    f7:ab:2d:f0:67:9c:58:87:50:55:4d:c9:d5:67:3e:
                    4d:29:f9:d5:c6:81:70:ec:b3:67:6b:c2:16:1e:0e:
                    df:21:03:66:d1:c5:8a:f8:85:08:9e:04:65:7e:4b:
                    79:da:97:99:6d:f7:63:8f:af:0f:35:20:79:40:a5:
                    be:20:bb:73:4a:c1:b5:3f:60:ca:80:4d:6f:aa:9e:
                    47:1d:23:0a:ac:58:27:5a:33:8a:db:da:7a:7c:dc:
                    c0:93:23:7b:e5:a8:a2:52:19:8b:f8:9d:1c:be:db:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B3:87:53:3F:D0:99:3A:38:5D:6D:BC:22:83:29:9D:78:AE:56:08
            X509v3 Authority Key Identifier:
                keyid:93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/1b25e224d27277ba1ef6d1155d9c157e870444e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/30d20bef67088f83626615a8accfbafffad06334.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.196.0/22
                  190.124.160.0/21
                  190.185.112.0/20
                  200.52.144.0/20
                  200.107.232.0/21
                IPv6:
                  2800:6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:86:15:7c:40:5d:59:98:6f:7e:af:63:03:c6:e8:2d:27:09:
         e6:00:72:cc:4d:ec:35:87:09:b1:63:9c:3c:9a:b6:f8:e2:81:
         75:71:9d:fe:6a:9c:74:28:a4:60:1c:c1:01:bf:fc:d7:f9:d2:
         84:48:1d:13:7d:9c:97:f6:7f:bf:c9:c0:27:b4:d4:35:15:ce:
         c8:9d:c3:f1:f0:15:59:89:50:9c:ed:45:73:c1:3a:6a:8f:c8:
         a9:da:91:b0:e0:e7:8c:ae:7a:29:43:72:e5:75:cb:1a:92:96:
         54:ba:df:23:57:fe:0a:0f:79:ca:fe:c8:a6:ed:6f:5a:ff:fb:
         a1:1a:1d:d4:a6:c4:f7:c1:89:f3:7d:0a:a6:a0:cf:e3:ce:97:
         d3:5f:f7:e9:93:2e:5d:75:4b:65:70:ca:a5:6d:20:b6:7f:34:
         46:4f:20:97:53:de:d7:fe:53:59:f9:37:37:41:9f:61:c7:c4:
         cf:61:bf:38:a5:bb:55:b4:03:9a:a3:0d:39:7b:ad:33:73:ed:
         82:0a:ac:7d:10:f2:73:40:19:79:0e:1c:02:4a:a7:4b:7d:bf:
         45:4a:4d:6e:5f:28:97:e3:bb:a8:f6:01:a7:af:3d:25:b7:03:
         dc:67:96:33:ae:ec:25:86:c5:83:7b:2b:58:d3:c0:ee:28:1c:
         a9:a9:36:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----