Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/66432c58d25c51071d1436cd701d72ca62915d57.roa
File:                     66432c58d25c51071d1436cd701d72ca62915d57.roa (raw, json)
Hash identifier:          FgXkk29xXqY2FTNZmmWckr8QJm6TbhukcnOSSdMdmyQ=
Subject key identifier:   D7:FD:07:46:D4:E1:39:8D:1D:DF:D4:44:35:DF:55:90:BE:04:56:13
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24E4BF
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/66432c58d25c51071d1436cd701d72ca62915d57.roa
Signing time:             Mon 30 Oct 2023 12:07:19 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     52403
IP address blocks:        200.115.82.0/24 maxlen: 24
                          200.115.91.0/24 maxlen: 24
                          2001:13c7:6012::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417855 (0x24e4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=66432c58d25c51071d1436cd701d72ca62915d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:6f:70:d0:ae:2e:31:ad:40:9f:42:a6:86:
                    c0:9d:d4:04:55:a3:3b:66:e1:7d:8d:d6:f5:0a:82:
                    f0:09:a4:0e:a5:de:4c:00:0e:7a:bb:52:c8:e3:ec:
                    66:ae:dd:f6:68:e4:44:2f:52:24:82:14:d3:c1:f8:
                    47:0e:38:2d:d5:1e:aa:21:a1:3c:87:dc:73:3e:49:
                    8e:ec:70:a4:55:c5:d6:9f:1e:6c:cf:73:f0:f4:0a:
                    42:bc:df:99:fa:10:b1:5c:0c:b8:80:78:83:1e:e9:
                    d0:c4:cc:ca:77:4e:8b:da:b6:be:22:71:77:87:cd:
                    f3:be:8b:83:0b:43:3c:38:f8:94:24:54:62:3c:06:
                    fb:3c:83:12:e8:22:96:1b:22:6e:49:15:00:d2:51:
                    dd:db:a6:e7:82:4f:68:42:87:fd:97:9a:1a:8d:a3:
                    66:78:b1:8a:3e:e5:94:86:7a:53:6b:3d:15:db:d1:
                    32:79:c8:99:5b:9c:47:a5:68:d4:f4:fa:88:ee:2b:
                    5e:b3:61:7d:9e:da:e2:03:3e:bb:9d:58:2d:af:5e:
                    f4:5b:0c:48:df:79:2b:6e:1c:0f:51:02:51:c7:2f:
                    bc:3f:fa:9d:b6:48:02:7e:50:32:75:ed:d3:9b:89:
                    a5:41:70:3b:22:c7:81:23:5c:29:e4:a0:ec:47:03:
                    90:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FD:07:46:D4:E1:39:8D:1D:DF:D4:44:35:DF:55:90:BE:04:56:13
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/66432c58d25c51071d1436cd701d72ca62915d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.82.0/24
                  200.115.91.0/24
                IPv6:
                  2001:13c7:6012::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:94:1c:6f:c5:c9:b9:0c:89:40:7e:cf:6c:60:62:12:39:62:
         eb:c6:ed:ce:8a:a4:fb:ab:55:d7:73:74:fd:22:08:0f:31:80:
         81:15:30:50:30:98:fa:2b:12:2b:84:9b:01:81:07:9d:a3:73:
         8b:29:90:52:7a:d4:cb:a2:43:7a:7e:fa:3c:bb:ed:14:95:b6:
         63:17:3a:f9:ce:68:59:9c:5b:b3:a4:72:e1:14:d7:4c:12:ae:
         97:63:84:fa:99:22:f5:18:90:97:66:5a:b5:f1:ab:2a:45:97:
         be:3b:3f:a7:24:24:33:5e:5d:2f:dd:e5:8d:a2:16:2f:3f:9c:
         e8:8a:bc:60:73:00:d5:ec:9c:25:d4:59:33:e0:4c:68:13:23:
         2b:4d:6b:62:78:e0:1c:5a:ae:6e:22:03:94:c6:03:7d:34:0f:
         dd:04:2a:ca:f7:72:bd:61:a3:28:89:73:e5:53:6e:1e:aa:c1:
         e2:10:0e:f1:10:2f:3f:49:bd:5a:0f:f5:10:f4:38:fc:c8:f8:
         53:36:cf:a7:82:a4:1b:53:fa:ed:8f:73:da:38:84:c9:01:ae:
         a3:11:d5:50:38:2b:c4:17:11:ef:7d:65:a9:62:1c:ae:3c:09:
         b5:95:07:91:85:72:87:59:2f:bb:70:71:d3:44:30:cf:dc:85:
         03:5d:3b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----