Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/643962d9-654c-4cf9-aeb1-291e22bc90ba/b2e068e77a4622f0151a30ebe546b7fcba2cb5ed.roa
File:                     b2e068e77a4622f0151a30ebe546b7fcba2cb5ed.roa (raw, json)
Hash identifier:          8be7QctQa4l8lG1M+jH9Aav/A3JRlhWusOfl+DTKtrc=
Subject key identifier:   51:10:94:BA:7F:8A:F4:A4:7F:BC:89:34:C8:1A:5B:6B:5B:23:D4:C5
Certificate issuer:       /CN=4091dd5f86b6759109bca712d6384dfc45084ad2
Certificate serial:       03B320
Authority key identifier: 11:12:78:1E:88:8F:30:FB:DA:37:18:80:61:AE:9B:1B:F1:6A:D7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4091dd5f86b6759109bca712d6384dfc45084ad2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/643962d9-654c-4cf9-aeb1-291e22bc90ba/b2e068e77a4622f0151a30ebe546b7fcba2cb5ed.roa
Signing time:             Wed 04 Oct 2023 13:39:45 +0000
ROA not before:           Tue 03 Oct 2023 13:39:45 +0000
ROA not after:            Sat 04 Oct 2025 14:39:45 +0000
asID:                     10452
IP address blocks:        200.10.139.0/30 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242464 (0x3b320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4091dd5f86b6759109bca712d6384dfc45084ad2
        Validity
            Not Before: Oct  3 13:39:45 2023 GMT
            Not After : Oct  4 14:39:45 2025 GMT
        Subject: CN=b2e068e77a4622f0151a30ebe546b7fcba2cb5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d7:b3:a8:86:e6:f9:1d:0d:28:bb:97:aa:0e:
                    71:d2:ef:37:6a:7a:aa:49:d1:b4:5f:17:3a:d0:9a:
                    24:e3:59:c3:b3:6c:15:8b:a4:fe:1b:40:21:14:61:
                    bf:9d:a4:9d:03:96:c0:47:3b:e2:ae:7c:e6:ea:39:
                    fe:ce:ed:9e:e0:01:9b:69:44:76:d2:92:8e:60:ac:
                    57:d5:34:b0:ac:32:67:64:33:47:34:a1:93:76:82:
                    60:2e:d8:76:25:07:6a:aa:90:e8:eb:d0:29:d5:aa:
                    f3:59:b3:55:a1:83:34:b9:3d:85:b8:ad:2c:ca:e0:
                    ab:3c:c4:69:94:bc:4c:ad:b8:2d:64:fe:75:45:c1:
                    17:3e:74:69:ee:07:88:5a:4f:50:cd:21:51:0c:88:
                    d9:19:be:54:ae:4b:c2:8e:aa:7a:97:3b:f0:25:a2:
                    53:72:66:f6:57:00:3c:2d:79:46:73:a1:cb:d6:13:
                    e4:a6:fc:e3:de:19:0a:e7:cd:26:f1:e6:0c:bf:bc:
                    27:d4:f9:b3:5e:42:be:75:5a:69:da:24:fe:1d:34:
                    68:97:34:de:9d:8c:94:40:b0:45:6a:37:a5:34:48:
                    52:2b:0c:66:8f:59:68:d3:e4:79:6f:ca:2d:4d:73:
                    c1:b8:24:24:64:c9:bd:64:a8:40:f9:36:e1:aa:62:
                    55:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:10:94:BA:7F:8A:F4:A4:7F:BC:89:34:C8:1A:5B:6B:5B:23:D4:C5
            X509v3 Authority Key Identifier:
                keyid:11:12:78:1E:88:8F:30:FB:DA:37:18:80:61:AE:9B:1B:F1:6A:D7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4091dd5f86b6759109bca712d6384dfc45084ad2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/643962d9-654c-4cf9-aeb1-291e22bc90ba/b2e068e77a4622f0151a30ebe546b7fcba2cb5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/643962d9-654c-4cf9-aeb1-291e22bc90ba/4091dd5f86b6759109bca712d6384dfc45084ad2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.139.0/30

    Signature Algorithm: sha256WithRSAEncryption
         3a:43:2e:ab:50:eb:17:ff:4a:44:86:c6:20:cf:86:16:60:6c:
         db:be:75:34:e7:d0:03:2a:c1:95:2b:b6:95:fb:8f:32:fb:1f:
         22:a1:79:f9:dc:3a:05:d3:ff:a8:83:39:0a:58:8e:ee:74:e9:
         6b:46:d3:68:59:be:75:6c:85:73:bc:87:5a:4a:5d:80:9f:62:
         ba:92:a6:37:9d:89:3b:c0:cb:c2:88:d5:5b:49:8e:ef:63:6c:
         0c:59:61:a7:45:0a:81:6d:d0:74:cd:9c:5b:74:e5:c4:44:f6:
         e9:1c:c1:e9:86:9c:61:69:ad:95:08:17:36:de:fd:78:fd:7a:
         af:92:38:f0:87:9e:7b:28:2e:21:98:3c:d0:7f:e4:9b:06:60:
         c1:09:a1:3f:02:9d:b2:1a:e0:0e:ec:dc:19:62:3c:52:0a:4b:
         67:d2:ef:ba:ac:56:2a:20:e5:c7:7b:17:5c:c6:b2:8e:d5:41:
         35:f8:19:5b:9e:f4:99:94:5e:4f:e7:2e:f4:8c:b8:46:c6:54:
         71:96:31:d0:0e:03:18:f8:2b:d6:7f:58:75:4f:bf:85:05:e8:
         ab:3a:09:5d:41:bb:a2:87:96:90:d3:87:24:ed:97:a2:75:4a:
         84:b1:af:9a:1c:f0:cb:3c:03:b1:37:ea:0c:ac:d6:26:68:b7:
         dc:89:f8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----