Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/d8ce3852613bf2d4257c8cb6923eda7525a1b657.roa
File:                     d8ce3852613bf2d4257c8cb6923eda7525a1b657.roa (raw, json)
Hash identifier:          9tD8VhnPlcgVepOjjAWyIgYOzzNxW+PmZ/idz/gUVlg=
Subject key identifier:   81:46:E6:91:BC:4D:55:AB:B2:F2:28:B7:F1:76:3D:3A:04:E3:A8:92
Certificate issuer:       /CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
Certificate serial:       20C80A
Authority key identifier: 48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/d8ce3852613bf2d4257c8cb6923eda7525a1b657.roa
Signing time:             Mon 08 May 2023 17:06:33 +0000
ROA not before:           Sun 07 May 2023 17:06:31 +0000
ROA not after:            Thu 08 May 2025 17:06:31 +0000
asID:                     6461
IP address blocks:        200.123.207.0/24 maxlen: 24
                          2800:870:1002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148362 (0x20c80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
        Validity
            Not Before: May  7 17:06:31 2023 GMT
            Not After : May  8 17:06:31 2025 GMT
        Subject: CN=d8ce3852613bf2d4257c8cb6923eda7525a1b657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a9:3f:88:fb:21:07:8e:b0:3e:47:37:d4:4c:
                    59:89:79:9b:ba:79:ad:c2:a9:18:cc:32:2d:0a:fd:
                    c8:15:5e:eb:3e:b1:c3:86:73:bf:d3:71:8b:5d:dd:
                    63:e9:a8:58:bf:67:4a:13:8f:57:01:90:e3:86:24:
                    68:65:82:76:08:3e:36:44:b2:45:4d:35:74:b6:32:
                    08:52:2c:b3:04:48:f4:85:63:f8:6b:3e:3c:5c:d7:
                    2b:47:2e:71:dc:d5:2c:4a:45:cc:61:46:30:47:eb:
                    27:61:c2:7f:7e:f7:a0:f7:82:49:e7:29:13:eb:a2:
                    34:d0:66:e1:2d:3b:2c:c0:9d:cf:0a:7e:53:6e:16:
                    85:80:cd:31:6a:c2:47:1b:8c:c2:41:5d:4a:cf:22:
                    de:44:61:52:b9:2b:f5:5f:47:23:b6:ff:1a:00:5f:
                    f3:3b:e7:84:ab:7d:83:8c:48:b0:d5:ea:48:8f:90:
                    55:fc:b3:97:2f:0e:cc:91:84:b2:84:84:83:cc:7b:
                    5e:fb:4c:c2:ee:7d:af:b0:a2:95:62:7e:fe:37:35:
                    c0:f6:fd:98:f6:20:c2:60:c5:d9:64:9e:f8:e2:66:
                    e3:86:01:b9:86:79:43:32:b2:78:9a:02:69:dd:69:
                    7e:f5:c4:72:0c:36:4d:43:5c:02:da:9e:39:4c:48:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:46:E6:91:BC:4D:55:AB:B2:F2:28:B7:F1:76:3D:3A:04:E3:A8:92
            X509v3 Authority Key Identifier:
                keyid:48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/d8ce3852613bf2d4257c8cb6923eda7525a1b657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/29194fbdbd11c97181ad21546cc92fc2d0e3857a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.207.0/24
                IPv6:
                  2800:870:1002::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:44:26:ca:d9:1d:9c:90:63:03:3e:e1:fb:b8:68:97:4e:27:
         d5:18:fd:f6:91:cc:4f:6d:48:a1:a7:e3:57:00:0b:1d:48:5f:
         f9:ca:83:77:ce:7f:21:6b:c6:db:10:6c:c9:18:4b:66:47:81:
         e5:6e:4a:d8:cb:59:8b:1a:a9:fc:7b:82:45:2c:05:2b:64:1d:
         ee:71:f1:79:b0:75:a2:99:15:d2:3c:f3:4a:cb:8a:bf:13:72:
         40:dd:77:b6:92:84:ed:ab:df:cd:26:7d:e8:d6:4c:e4:ad:c6:
         21:75:d9:6b:4c:de:41:67:34:ef:ba:0f:50:0f:1f:87:c2:17:
         61:c6:3f:ec:a0:c6:f2:6f:02:44:ef:1a:78:d6:3c:55:c7:f4:
         28:8f:9f:ee:89:f2:15:94:58:93:ef:45:b2:62:76:d3:79:91:
         13:5f:50:02:6f:36:19:a7:cd:16:5f:3f:a5:db:ed:62:85:65:
         40:00:70:fa:2e:64:bf:72:ba:54:ae:97:98:69:da:5a:7d:9d:
         f1:4d:ea:e9:ba:14:8a:2e:2c:95:8a:64:fa:32:06:cc:fb:9b:
         9d:5a:f8:82:1e:4a:87:b6:98:44:0d:bf:15:14:d0:f5:e0:2d:
         e9:5c:05:c5:65:a8:db:ce:d9:d0:0c:96:e5:3d:58:f9:1e:cc:
         18:3c:8a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----