Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c3132fc53ce33542e1739d03879cb7a5fe4447b1.roa
File:                     c3132fc53ce33542e1739d03879cb7a5fe4447b1.roa (raw, json)
Hash identifier:          CGjd+ZZlUwDE5Y1s57xbyz1w+sQC2ZrkHQCHhrKMsdc=
Subject key identifier:   39:B0:BA:96:6F:A4:F8:75:81:2A:8B:BC:46:52:DC:40:86:75:6D:B8
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1FF703
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c3132fc53ce33542e1739d03879cb7a5fe4447b1.roa
Signing time:             Wed 22 Feb 2023 18:27:25 +0000
ROA not before:           Tue 21 Feb 2023 18:26:21 +0000
ROA not after:            Sat 22 Feb 2025 18:26:21 +0000
asID:                     19114
IP address blocks:        200.7.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094851 (0x1ff703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Feb 21 18:26:21 2023 GMT
            Not After : Feb 22 18:26:21 2025 GMT
        Subject: CN=c3132fc53ce33542e1739d03879cb7a5fe4447b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:d0:2c:5a:4b:86:1c:9b:ac:3c:e8:26:86:
                    39:a9:90:c6:5c:c2:a9:67:32:81:12:88:d8:26:93:
                    de:29:be:11:f5:60:19:0a:78:af:f5:c4:06:34:2e:
                    9f:1e:a7:08:49:27:01:9d:32:45:de:50:f6:0a:3b:
                    59:5a:c7:b6:7a:fa:c3:2e:d0:ba:87:d5:13:ed:ee:
                    49:aa:1a:32:0f:0d:b7:b8:cc:b3:6d:36:3e:63:a3:
                    69:3b:ef:26:19:66:6a:8c:ce:6c:3d:a7:7e:91:61:
                    da:07:f4:52:ca:5c:fb:1a:5e:55:26:36:9c:19:fe:
                    ad:05:ec:c1:a1:bf:06:23:82:ff:5d:62:0c:5a:7b:
                    a3:e6:0d:59:51:1d:e3:9a:8b:f9:ad:4f:cb:5e:f5:
                    90:16:db:00:87:e0:8a:8c:35:fc:45:29:0a:ff:87:
                    51:02:74:fa:01:9e:14:ec:62:90:8e:42:f6:32:31:
                    fe:21:1c:3b:56:27:dc:37:b7:54:4a:e0:c2:27:3d:
                    99:51:0c:41:21:74:0b:3a:75:39:85:42:53:14:af:
                    ca:81:39:1f:41:b1:e2:f3:8d:a2:e6:6c:64:e7:96:
                    7e:d5:d6:d1:aa:d8:ce:e0:96:93:bb:01:a8:19:25:
                    9a:29:0e:34:0e:49:88:d4:8d:cd:3e:62:3b:95:da:
                    dd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B0:BA:96:6F:A4:F8:75:81:2A:8B:BC:46:52:DC:40:86:75:6D:B8
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c3132fc53ce33542e1739d03879cb7a5fe4447b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:1e:78:83:02:70:1f:6a:10:8f:c3:f3:fb:f6:12:f0:77:f4:
         fe:c2:7d:66:e5:e8:d4:68:7c:46:6f:a1:cc:42:b8:c6:77:3e:
         e0:6f:0f:b8:c8:eb:2a:c2:8d:cd:98:80:d1:af:a4:8d:d7:65:
         34:0a:be:25:57:60:0e:52:b1:39:3b:01:92:8e:e4:55:42:98:
         89:3a:d6:6e:f4:fd:bd:a6:20:ec:61:ff:15:ec:a1:35:35:bc:
         32:9d:0e:d5:c9:9c:a7:d0:14:0e:10:50:ab:3e:d1:0d:94:34:
         88:2f:51:98:a4:d0:8f:3c:04:04:a5:d6:b2:40:c0:de:15:15:
         4b:e4:48:f8:72:8c:07:cf:19:09:95:9e:da:65:5f:6c:99:28:
         18:70:ac:a8:13:ef:ad:95:f4:8f:cf:8f:13:29:49:c5:34:e8:
         c7:3d:63:f4:4f:2f:f1:37:b3:53:53:f6:c4:79:6d:45:c4:03:
         43:b2:ce:91:3c:0a:a7:6c:9f:0f:ee:f1:61:45:f4:9f:47:c0:
         ae:74:d7:ee:93:cb:6b:de:9b:84:be:e5:58:0a:0c:00:27:af:
         41:6c:2a:a3:23:93:26:23:64:d3:38:95:9b:9c:77:07:57:70:
         18:a1:b5:f5:a9:da:aa:f4:34:67:ce:64:04:41:7a:95:4e:11:
         84:40:06:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----