Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/e42f1ed275d95c5bffbfe0b048c103d523299faa.roa
File:                     e42f1ed275d95c5bffbfe0b048c103d523299faa.roa (raw, json)
Hash identifier:          9sQDDOpyzi58AzbO81vIbZ9E1RUu3p+JJ6t0l6y5u08=
Subject key identifier:   CB:21:6F:CB:23:11:C6:70:6B:5A:D1:57:0E:95:B8:FB:53:92:CC:AF
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24D97F
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/e42f1ed275d95c5bffbfe0b048c103d523299faa.roa
Signing time:             Mon 30 Oct 2023 12:07:14 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     11058
IP address blocks:        200.0.17.0/24 maxlen: 24
                          2001:13c7:6001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414975 (0x24d97f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=e42f1ed275d95c5bffbfe0b048c103d523299faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:dd:71:8b:04:85:90:41:2d:d4:10:47:9f:
                    de:5e:66:e2:7c:d5:a8:0e:4e:61:3a:b1:f9:bb:14:
                    76:dc:1b:90:1a:2c:3d:87:af:75:d9:bc:2a:c0:db:
                    53:62:ac:fb:13:90:b1:50:89:f8:2f:2d:50:e1:43:
                    28:fa:32:16:ba:45:47:cf:8a:e8:c4:78:19:e7:7a:
                    fb:d6:64:3f:a3:47:f9:bb:f7:16:45:ba:0c:80:1b:
                    3f:e7:7f:cb:17:9d:c4:06:3f:64:64:d6:28:da:01:
                    ea:0e:19:ca:dd:39:b3:a4:7b:cd:cb:d7:b2:66:2e:
                    25:c4:9a:f1:98:63:34:a3:be:bb:b6:d1:f7:ae:94:
                    36:c2:46:78:1c:9d:91:0e:34:77:7b:9c:7e:53:19:
                    fe:82:63:37:22:fd:be:d2:22:b9:64:99:31:80:54:
                    3e:c3:64:9a:52:d6:2c:ed:e2:75:17:88:84:96:6f:
                    6c:87:bb:28:39:bd:34:fb:7d:32:6d:d3:be:90:0a:
                    56:20:a1:f3:f2:41:54:87:66:f9:84:99:9e:09:d5:
                    5d:18:79:eb:24:1a:51:c3:9f:e4:f7:bf:b9:14:68:
                    fe:ed:24:dd:cf:d3:6c:dd:6b:15:91:67:00:22:08:
                    18:b1:f2:7f:21:c3:09:c6:38:cc:fa:7a:c2:be:c6:
                    11:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:21:6F:CB:23:11:C6:70:6B:5A:D1:57:0E:95:B8:FB:53:92:CC:AF
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/e42f1ed275d95c5bffbfe0b048c103d523299faa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.17.0/24
                IPv6:
                  2001:13c7:6001::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:06:ea:4e:3b:c2:ef:7a:d2:b8:87:56:55:6a:87:d8:99:04:
         db:f8:9b:c8:6e:3a:aa:9b:e3:df:48:c7:b5:15:e2:45:2d:ba:
         ec:78:c6:11:80:e7:1a:5b:04:5a:b4:df:c3:d4:4b:9e:e3:bb:
         a9:62:96:54:8d:e1:bc:f7:bf:ad:5f:aa:98:6d:a3:9b:16:f5:
         b9:d4:62:79:4f:ba:2d:a0:3b:9b:22:5e:6a:5c:e5:c6:fc:0b:
         7b:a8:a4:08:bb:64:05:7a:44:07:b6:42:0b:98:78:3f:da:01:
         7d:03:02:79:6c:44:99:8e:3b:4e:e1:78:0c:ca:33:d0:70:6c:
         8d:25:f5:43:9b:34:0d:f5:9c:ab:6e:3f:ca:2e:2d:7d:e4:51:
         36:72:5b:5f:63:76:4a:c4:f4:98:35:22:fe:89:e9:8a:5e:af:
         20:df:28:59:8f:2e:70:77:b6:31:a0:7b:48:eb:a7:4d:c5:da:
         f7:3e:ee:6e:0b:f8:fa:87:4e:23:08:39:d1:8e:f4:80:a4:5f:
         a3:08:e5:8d:c7:61:91:37:27:40:ef:5c:22:8e:cb:2a:ad:25:
         af:46:45:a3:d2:ad:f7:b5:74:2c:8e:31:bb:10:df:76:ee:07:
         0d:a4:37:69:79:2f:0c:13:07:1e:ef:90:53:40:97:89:00:25:
         68:8e:c3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----