Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/75d07e09d9b1ca08dbbaa137e3f0aba1ac28a85d.roa
File:                     75d07e09d9b1ca08dbbaa137e3f0aba1ac28a85d.roa (raw, json)
Hash identifier:          DNWcMYwQH92K1rXklJHXWhveAY0ejXy9dq/80Gv1Tww=
Subject key identifier:   A1:B4:54:9A:FE:CA:03:92:97:84:C0:4B:44:31:6C:F4:81:F9:F6:EE
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       262D2E
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/75d07e09d9b1ca08dbbaa137e3f0aba1ac28a85d.roa
Signing time:             Tue 24 Oct 2023 21:10:01 +0000
ROA not before:           Tue 24 Oct 2023 21:10:00 +0000
ROA not after:            Fri 24 Oct 2025 21:10:00 +0000
asID:                     269805
IP address blocks:        200.7.210.176/28 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2501934 (0x262d2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Oct 24 21:10:00 2023 GMT
            Not After : Oct 24 21:10:00 2025 GMT
        Subject: CN=75d07e09d9b1ca08dbbaa137e3f0aba1ac28a85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:63:9d:42:68:74:b3:d4:e6:ac:84:8f:00:ef:
                    56:b5:8f:b4:9a:9f:9a:cc:65:f7:42:94:f4:69:28:
                    99:5a:7d:28:0a:37:6b:5b:28:c0:18:57:92:01:cb:
                    ac:72:d6:b7:3b:41:0c:02:a0:d8:70:74:ca:94:ec:
                    c2:10:55:a3:2c:26:fe:91:e6:2c:c5:17:db:98:46:
                    15:8b:c4:f6:04:c0:72:1f:d2:2d:d1:42:96:ad:17:
                    0b:d7:29:55:aa:18:10:1f:52:0d:7e:1c:95:3f:13:
                    55:9a:ca:9b:59:89:fe:a0:0f:58:0b:5d:99:d0:f9:
                    fa:55:2f:d6:af:2a:af:da:aa:19:81:1b:7c:9f:33:
                    97:bc:76:25:f9:11:5b:ca:95:a4:ae:17:b5:3c:f3:
                    4a:ab:9b:2a:d7:f0:76:dc:d5:1f:98:ca:d7:07:db:
                    b1:fc:f7:8a:7b:03:14:ed:a1:17:24:dd:b8:4e:60:
                    8c:c3:3d:9a:ea:6b:74:27:cf:9b:da:6a:d0:6e:69:
                    88:62:4a:1a:fd:08:bc:36:0c:de:d9:74:e6:f5:87:
                    e0:74:e4:c0:17:37:26:a7:59:ea:9f:85:22:56:9c:
                    85:39:1a:09:de:0f:0d:93:d4:61:c5:1b:1c:1a:15:
                    5d:8e:21:ef:d1:1d:62:bd:1d:54:c0:52:18:c6:fe:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B4:54:9A:FE:CA:03:92:97:84:C0:4B:44:31:6C:F4:81:F9:F6:EE
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/75d07e09d9b1ca08dbbaa137e3f0aba1ac28a85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.210.176/28

    Signature Algorithm: sha256WithRSAEncryption
         2d:5d:79:39:25:f5:e9:20:49:ac:12:83:2a:05:49:44:48:0a:
         8c:63:e0:9b:4d:cc:6a:26:0d:1d:c0:31:5e:30:12:90:8a:3a:
         54:b2:76:4f:aa:50:a7:3e:49:53:c0:b8:50:97:aa:ae:be:78:
         ad:63:a9:10:60:60:9f:f3:c3:fd:46:b4:d3:88:47:e7:fa:9b:
         32:5e:c0:ae:cc:9d:d8:57:2b:23:e7:3a:af:79:94:49:49:19:
         8e:ea:fa:5a:e6:b7:db:b6:44:58:ed:2d:79:db:02:50:43:3c:
         34:d7:5b:99:a9:2b:99:d3:e9:ed:65:d0:a6:26:4a:e8:db:36:
         0a:3f:ee:f4:9d:94:69:1a:9a:ce:34:1b:b0:8c:1b:06:08:bc:
         83:a4:59:09:d8:a2:57:8e:3e:e5:30:5d:fa:9d:37:3d:d3:ab:
         2c:94:c4:80:9d:2f:ca:45:14:9f:4c:9e:65:a5:df:6d:43:7a:
         ae:d0:41:a9:8a:77:2a:24:75:ef:b3:40:b8:d8:1b:b6:7f:2a:
         81:bb:21:28:ef:ca:17:72:c7:1c:00:76:2b:70:ce:dd:6d:b1:
         2e:13:0a:07:e3:82:45:2d:83:da:fb:87:07:5e:c6:6f:64:75:
         c2:45:6f:ac:17:22:a2:a7:66:91:26:0b:88:db:62:34:3c:8d:
         06:ed:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----