Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1a7b9fd304881978a4a5d84f88c958cdee343815.roa
File:                     1a7b9fd304881978a4a5d84f88c958cdee343815.roa (raw, json)
Hash identifier:          mhEyeXD8T5him356++GEKKjwTPcV8X6Z9VtsCXrCMPk=
Subject key identifier:   3F:22:E7:86:94:35:7B:CB:F9:AD:48:CA:97:C1:4B:14:46:68:37:CC
Certificate issuer:       /CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Certificate serial:       2B4194
Authority key identifier: 2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1a7b9fd304881978a4a5d84f88c958cdee343815.roa
Signing time:             Thu 15 Feb 2024 21:18:47 +0000
ROA not before:           Thu 15 Feb 2024 21:18:29 +0000
ROA not after:            Thu 15 Feb 2029 21:18:29 +0000
asID:                     28002
IP address blocks:        200.0.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2834836 (0x2b4194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
        Validity
            Not Before: Feb 15 21:18:29 2024 GMT
            Not After : Feb 15 21:18:29 2029 GMT
        Subject: CN=1a7b9fd304881978a4a5d84f88c958cdee343815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:76:4b:a8:a4:80:a2:a2:3b:3b:6b:4f:97:56:
                    ab:44:80:ad:5b:6c:9e:54:f3:59:3f:3c:f0:bc:6e:
                    c7:77:14:73:5b:ac:1c:6e:60:2a:25:00:fc:62:0b:
                    a3:e7:a7:f1:c0:14:18:84:04:c5:d4:9a:db:28:86:
                    60:2f:3e:ef:e6:47:61:ea:94:64:bc:ca:04:ba:73:
                    86:9f:2a:18:be:ae:71:73:78:5f:a4:4c:02:d9:0f:
                    70:6f:40:4f:b1:11:b6:5d:39:3a:43:7e:bc:0e:44:
                    e9:3c:22:e2:f1:2e:32:b1:44:79:39:b4:6c:07:d9:
                    d8:10:d0:5d:46:b3:42:f1:19:59:c9:c7:93:a5:0f:
                    88:ee:15:8c:9c:5f:a7:6b:20:2c:b0:7e:01:13:69:
                    1e:3b:15:37:9a:5e:ef:84:05:dd:c1:e6:2c:61:d5:
                    69:47:11:a2:7e:65:5e:0c:52:37:c7:4a:60:ec:f6:
                    c2:55:c7:5b:96:cf:55:07:1e:97:00:80:35:88:00:
                    50:0f:f5:b0:44:67:c4:bf:ba:1f:6c:a5:f2:53:db:
                    ac:a4:03:88:d6:00:2a:b8:5f:f2:f6:a2:8a:8e:a3:
                    b3:21:7b:a9:19:3f:17:fd:bb:60:17:87:08:e6:89:
                    fd:09:d8:1e:d1:d1:28:75:88:a7:ed:a2:7e:f9:12:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:22:E7:86:94:35:7B:CB:F9:AD:48:CA:97:C1:4B:14:46:68:37:CC
            X509v3 Authority Key Identifier:
                keyid:2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1a7b9fd304881978a4a5d84f88c958cdee343815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:77:1a:c1:f5:84:75:c8:6d:b8:25:86:53:c1:ca:c0:9e:6c:
         de:18:17:14:05:4e:64:34:bd:2b:4f:1d:7e:96:a9:05:9b:ad:
         0a:2e:de:a0:fc:39:38:42:9c:00:50:5d:19:48:b8:bb:0c:90:
         3d:79:74:9d:7d:4f:49:ff:bc:c4:a4:39:f2:23:73:d1:ac:9e:
         c8:ee:07:14:22:98:87:f9:ad:28:8f:48:be:3b:ff:12:cb:b3:
         69:41:e8:a9:9c:e1:63:18:46:78:f1:69:93:d9:c4:47:15:b4:
         64:a2:79:98:cf:bf:57:d5:b3:fd:78:80:e5:a8:cc:6a:ea:ea:
         a6:d3:f0:39:30:23:a3:76:b4:87:11:6e:94:a0:92:ee:1e:6c:
         cf:88:fc:3e:39:2d:7f:55:fc:94:90:e0:09:37:36:31:73:71:
         b6:f6:e9:b9:22:97:79:8a:4b:4a:16:c0:4e:b2:e3:a3:b5:bd:
         20:7c:25:ea:72:51:7a:41:fc:28:f7:59:34:fe:10:f1:82:1a:
         9c:34:40:6f:d3:cf:3b:1b:e7:8c:4e:07:a8:1a:52:8d:cf:bb:
         26:00:f5:2f:6f:a6:82:ae:c0:e5:4e:86:7f:ee:0f:49:56:9a:
         26:90:1f:c1:ba:c5:41:e6:6b:8f:a7:46:cf:ed:b5:2d:60:3f:
         27:d4:d5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----