Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2f9b1878d9951bd187b5adcdc0e9ae204b3a70a0.roa
File:                     2f9b1878d9951bd187b5adcdc0e9ae204b3a70a0.roa (raw, json)
Hash identifier:          Xgocct63dn2gU5xpRIO1Aggd1IJhlhNXZGjli5bsD1g=
Subject key identifier:   1D:CD:91:7D:F3:02:61:D2:71:29:2D:80:3E:C6:FA:4E:CE:95:56:66
Certificate issuer:       /CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Certificate serial:       2B483C
Authority key identifier: 2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2f9b1878d9951bd187b5adcdc0e9ae204b3a70a0.roa
Signing time:             Thu 15 Feb 2024 21:18:50 +0000
ROA not before:           Thu 15 Feb 2024 21:18:29 +0000
ROA not after:            Thu 15 Feb 2029 21:18:29 +0000
asID:                     280001
IP address blocks:        200.0.88.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2836540 (0x2b483c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
        Validity
            Not Before: Feb 15 21:18:29 2024 GMT
            Not After : Feb 15 21:18:29 2029 GMT
        Subject: CN=2f9b1878d9951bd187b5adcdc0e9ae204b3a70a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:5e:51:03:93:ed:0b:43:3e:b3:e6:c4:95:
                    e2:ee:d0:9b:af:21:61:40:b4:86:cc:55:2a:3b:eb:
                    cc:f7:23:d7:80:8e:b5:db:fc:48:43:df:32:16:10:
                    de:21:af:55:60:b0:6c:af:b0:60:e7:c1:4c:92:40:
                    d4:bd:0b:2a:5c:48:f2:dd:c6:98:5c:64:3b:c2:14:
                    98:30:15:fb:48:11:b4:0e:d9:c8:16:00:32:93:90:
                    fe:3e:4e:64:ed:a9:1f:f4:ec:5e:e4:79:77:ac:34:
                    41:05:fd:69:0b:96:94:9b:58:58:23:1f:5f:2f:93:
                    52:f2:0f:89:1a:43:3f:e5:71:d6:7e:7e:7c:5d:2e:
                    15:86:b8:55:23:3e:2f:fb:94:a0:a8:7e:55:e3:9e:
                    8a:ff:31:ed:0d:11:ae:eb:f9:72:6f:0d:8b:0c:d5:
                    f7:54:28:08:ec:42:e9:91:ba:15:42:a8:69:44:f4:
                    67:60:ba:93:14:9f:7c:7a:f7:09:e8:a0:11:0e:e8:
                    e8:01:91:df:ec:8e:fc:9f:f3:c7:5c:e0:3c:3c:8f:
                    2a:a5:62:ea:71:0e:4a:81:e1:01:e6:72:b4:b1:e8:
                    f2:2c:a8:52:c8:d3:96:b6:43:2c:c4:bb:96:13:30:
                    10:23:17:fa:cf:e9:c6:d9:dd:e6:de:3e:69:eb:2d:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CD:91:7D:F3:02:61:D2:71:29:2D:80:3E:C6:FA:4E:CE:95:56:66
            X509v3 Authority Key Identifier:
                keyid:2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2f9b1878d9951bd187b5adcdc0e9ae204b3a70a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:64:e5:28:1c:7a:fe:4d:99:7b:4b:b7:31:2a:06:6c:57:d2:
         b7:5f:bb:c4:5a:8b:e3:06:fe:0d:7c:65:91:1d:aa:09:a4:c1:
         24:67:08:2d:17:3b:e2:b3:fb:b3:d1:f4:8c:a2:55:52:6a:70:
         31:e1:8f:eb:b7:d4:43:73:c2:bf:79:18:72:18:5c:11:4f:7f:
         83:4d:c3:dc:e9:cc:15:85:66:94:11:a5:da:1d:17:b0:d0:cb:
         4d:30:44:72:e2:36:24:5c:18:df:6c:b9:ff:22:32:e4:a1:f3:
         d0:86:c6:7c:7a:fc:0f:6b:c4:bc:d2:a5:06:2b:8c:07:9e:9e:
         80:62:e1:95:cf:32:64:a9:4d:b3:e9:15:b0:73:7f:2c:08:6f:
         b1:28:68:88:9f:4c:7c:ee:14:14:12:af:16:f9:b8:c9:4c:07:
         de:18:ad:66:fd:26:ff:11:80:71:b9:88:b3:af:a5:eb:64:0b:
         91:b1:37:c2:f3:69:65:14:93:c6:a9:f8:02:be:c2:3f:0b:f3:
         99:d8:00:86:49:01:79:c5:80:90:cc:a9:fd:de:6c:7d:7a:66:
         dc:3f:3f:72:51:bc:96:ab:cf:a1:3a:96:0e:92:cf:e0:b2:3c:
         f6:2f:05:43:c6:09:fd:8c:f6:9d:09:89:e3:10:91:d9:a3:75:
         7c:37:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----