Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/47f0a524caf72335ce643afe3c5368fd07473f0f.roa
File:                     47f0a524caf72335ce643afe3c5368fd07473f0f.roa (raw, json)
Hash identifier:          1aoW88Xd93M/q9vXx4xwrM2KYFeGes/gVcZ9oqoZtNs=
Subject key identifier:   64:91:88:CD:64:BE:6C:85:08:EC:3E:FC:39:06:85:13:25:4E:19:AB
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1FF187
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/47f0a524caf72335ce643afe3c5368fd07473f0f.roa
Signing time:             Wed 22 Feb 2023 18:21:11 +0000
ROA not before:           Tue 21 Feb 2023 18:17:21 +0000
ROA not after:            Sat 22 Feb 2025 18:17:21 +0000
asID:                     19114
IP address blocks:        200.24.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2093447 (0x1ff187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Feb 21 18:17:21 2023 GMT
            Not After : Feb 22 18:17:21 2025 GMT
        Subject: CN=47f0a524caf72335ce643afe3c5368fd07473f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:2c:ae:b3:6c:ab:e8:ed:cb:7e:d1:af:29:
                    6c:77:cc:09:c4:25:1e:9f:f8:07:ca:cf:c2:a9:66:
                    ab:91:51:fe:a3:a6:7c:9a:f2:09:76:00:19:7f:67:
                    44:fd:99:a9:d4:aa:03:b8:00:0f:b2:34:ba:30:4a:
                    5e:58:10:2d:d7:8a:9b:d6:81:29:61:e3:b7:04:6e:
                    74:89:1b:44:b5:06:5d:eb:cb:7b:86:f7:81:85:43:
                    d2:59:db:c3:04:d6:c5:9f:5f:83:0f:76:cd:1b:2c:
                    6b:a2:21:a8:f4:11:6f:02:64:06:45:63:ee:f1:7a:
                    fc:8a:76:de:29:62:99:7f:ac:3f:0d:59:77:e9:98:
                    a9:25:ea:84:3a:6b:40:0b:a8:c6:f0:bb:91:4d:60:
                    82:1f:3d:52:3f:94:f5:86:c1:c4:f7:8c:b2:7a:e9:
                    2c:91:6a:ab:a4:95:a2:89:24:e8:6f:b3:7c:f3:03:
                    29:0c:d9:08:45:47:69:28:c1:ab:b4:f7:b2:98:fb:
                    4e:55:de:5d:93:55:d9:87:e4:d8:f0:a2:71:fd:35:
                    37:6d:31:3a:a3:26:da:2f:7b:d1:47:6b:75:e0:29:
                    19:c0:d5:fe:ad:2c:f4:b5:05:85:ea:33:ad:b3:eb:
                    fb:25:2e:ac:9f:f1:71:9b:f6:b7:01:c0:21:e3:e0:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:91:88:CD:64:BE:6C:85:08:EC:3E:FC:39:06:85:13:25:4E:19:AB
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/47f0a524caf72335ce643afe3c5368fd07473f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:b7:3d:c9:00:e5:28:4d:01:20:b2:86:e3:a3:13:8f:61:
         de:82:3d:9c:6d:a3:d0:79:fb:0a:ec:0e:47:74:41:dc:6a:66:
         7f:68:43:b8:51:23:e9:7f:ef:17:cb:0e:27:ed:bf:18:cc:c2:
         73:37:b7:6c:4b:ac:07:b6:85:a3:c7:02:26:ff:3e:12:4b:27:
         57:bb:5e:e5:5a:dc:30:e6:55:b5:f4:f4:6e:8e:b2:12:21:93:
         b3:ea:74:57:9f:63:ec:51:b7:bd:95:bb:f6:63:04:15:11:c7:
         85:db:f1:06:f8:d0:c0:61:1f:79:10:fb:58:b2:c7:98:2c:a7:
         c7:0c:f6:c2:11:01:53:71:4f:8b:73:37:f1:0b:ac:d7:aa:bb:
         07:f2:91:f3:33:81:d6:ff:71:7e:ff:0d:0a:ae:d5:38:95:13:
         29:9d:cb:a2:e4:1a:2b:f3:c6:c5:c7:31:ff:d7:36:25:9f:54:
         56:d6:2d:2b:39:95:1d:e9:38:13:9c:09:c5:46:47:54:77:79:
         3b:ee:d0:41:10:be:35:30:96:4b:41:fd:58:53:0d:38:c6:85:
         40:35:18:be:8b:cc:e7:fc:99:34:55:f6:d0:e4:63:5f:99:7c:
         bc:f0:2a:83:b5:3e:11:bc:d4:49:fb:c4:d7:78:d0:3d:ce:ee:
         e8:7d:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----