Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9bf48553bea9c3b595f3668ca385aea2803cd19c.roa
File:                     9bf48553bea9c3b595f3668ca385aea2803cd19c.roa (raw, json)
Hash identifier:          bs91mlkoKUwvbgITXnl/glaNufcc7+dFs2wmEWS+UyU=
Subject key identifier:   04:21:81:FE:F2:D9:CD:01:32:5E:E6:4A:3E:41:1E:BB:83:33:43:BB
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       2489A7
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9bf48553bea9c3b595f3668ca385aea2803cd19c.roa
Signing time:             Mon 30 Oct 2023 12:06:40 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     52360
IP address blocks:        200.14.38.0/24 maxlen: 24
                          200.115.88.0/24 maxlen: 24
                          2001:13c7:600b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2394535 (0x2489a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=9bf48553bea9c3b595f3668ca385aea2803cd19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:a1:ec:fc:05:3a:ad:42:e9:12:98:50:44:
                    51:4c:99:68:11:21:cb:f0:9d:ac:df:eb:24:fd:f2:
                    fb:7d:e8:a2:01:1f:d2:42:4f:b5:98:5e:17:c2:2a:
                    5a:58:10:3f:21:bd:50:f0:59:fd:00:6b:d2:44:bd:
                    46:90:eb:d4:9b:d9:65:7e:77:67:25:53:c7:59:9b:
                    51:1b:12:fa:3a:12:72:60:54:53:61:30:a2:27:a2:
                    d4:a0:a8:76:23:aa:bf:74:1d:35:2c:d8:a8:72:ee:
                    e9:e2:b8:eb:52:06:76:a1:bd:b0:8b:ad:16:cf:c4:
                    e5:cc:d4:89:f9:3b:d0:d8:f0:05:f9:18:4d:22:b2:
                    d4:22:39:0d:5a:12:5d:08:43:40:fc:00:cf:ab:c5:
                    60:62:6b:97:73:ab:bd:89:26:51:6c:8c:bc:10:a5:
                    85:b6:5a:4a:1a:7d:e4:01:e9:2f:66:97:c7:93:71:
                    37:2a:f8:f7:72:c0:8f:14:77:5e:60:12:ca:34:6c:
                    1d:ee:ec:a0:2a:d0:ab:9a:4e:2b:60:60:cf:ef:0a:
                    48:43:87:f9:1d:cf:a1:14:b6:86:fa:b3:72:10:8c:
                    b1:85:56:f2:8a:e7:85:2d:25:93:56:a7:58:38:13:
                    f7:a6:af:10:b1:d7:c4:0f:47:95:44:db:fd:8a:7f:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:21:81:FE:F2:D9:CD:01:32:5E:E6:4A:3E:41:1E:BB:83:33:43:BB
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9bf48553bea9c3b595f3668ca385aea2803cd19c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.38.0/24
                  200.115.88.0/24
                IPv6:
                  2001:13c7:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:f0:b1:74:91:75:e3:0c:77:8b:9b:a8:7c:55:3c:c6:21:d6:
         98:f2:16:17:f2:40:5f:c0:38:d9:98:7f:b6:4d:95:87:3f:08:
         3b:9a:71:68:ef:7d:1a:61:0c:aa:c3:bc:f5:3a:8f:dd:64:43:
         07:d0:58:50:d6:83:2e:d1:50:4f:fa:ae:af:ed:86:48:26:2e:
         55:e3:81:28:8c:2a:ad:67:bb:0e:88:d2:aa:e2:2a:f6:4d:52:
         b8:dc:83:8a:11:62:c3:9a:08:26:d9:8b:d2:77:83:57:5c:36:
         b0:39:31:54:f2:a1:65:e0:d2:94:50:29:e5:f5:a2:1f:be:9c:
         89:f3:49:95:9c:66:67:b7:e1:e7:89:38:0c:e8:e5:af:95:0f:
         32:28:57:8f:dc:05:a0:15:0f:be:45:66:ad:dc:61:44:25:f6:
         07:68:67:4b:6e:1d:24:c3:c0:6b:62:79:57:66:5e:2f:74:15:
         9b:6d:13:02:63:6d:ff:91:3f:4d:d3:39:c1:16:7c:0c:93:a6:
         ee:82:b6:50:95:07:ec:d7:9b:5e:75:06:3a:0d:fb:de:8f:e4:
         5c:b3:f5:1c:74:a1:5a:48:71:fd:e3:e3:9d:1e:bc:2a:ac:82:
         6e:3b:f3:72:8e:6f:37:d5:98:de:53:09:84:31:2e:e8:c2:aa:
         e0:37:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----