Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/e49c5590089ba3c8bce2398bf700b529d1e0c615.roa
File:                     e49c5590089ba3c8bce2398bf700b529d1e0c615.roa (raw, json)
Hash identifier:          dXNvuVrcumCuz5oL2UWkFi54EgKVheBXGvlVbvJJT58=
Subject key identifier:   12:B6:EF:63:E6:D5:84:F4:8D:EF:E2:81:FC:83:7F:C6:3B:15:B0:34
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24AFA7
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/e49c5590089ba3c8bce2398bf700b529d1e0c615.roa
Signing time:             Mon 30 Oct 2023 12:06:50 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     52376
IP address blocks:        201.182.140.0/24 maxlen: 24
                          200.9.157.0/24 maxlen: 24
                          200.115.94.0/23 maxlen: 24
                          2001:13c7:600a::/48 maxlen: 48
                          2801:168:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2404263 (0x24afa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=e49c5590089ba3c8bce2398bf700b529d1e0c615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:a2:60:2a:70:3c:41:91:1b:5d:19:bf:bc:
                    08:58:d2:8d:c3:96:8e:fd:ff:a5:af:ce:0b:a8:8e:
                    b5:6a:18:0a:6c:08:0f:7a:87:3b:9f:0d:43:59:4a:
                    68:1d:f8:bb:75:85:c0:7b:d6:af:35:58:1e:ec:03:
                    3f:78:62:d2:0d:60:49:6a:69:10:d8:3d:de:74:21:
                    50:c2:ca:55:35:68:fe:b4:92:58:6e:8e:b9:1e:06:
                    c0:4b:4c:cc:ad:9d:c4:5c:5d:6e:91:4c:e0:d5:58:
                    d8:10:f1:83:11:ad:9e:04:6d:16:0c:c2:04:ef:fb:
                    12:37:6a:d1:6b:1c:6d:79:87:fa:a5:41:36:5c:fc:
                    1b:3e:f6:93:1e:53:eb:9d:a0:8d:d5:ee:4b:00:0a:
                    21:b8:bd:2a:4c:00:b7:25:ad:05:58:30:f6:1a:06:
                    0f:09:54:88:3b:77:94:40:27:9c:66:6a:4d:b9:52:
                    5a:1d:77:50:a8:c5:83:1f:d9:1c:15:ad:47:2e:09:
                    2e:90:8b:9d:0d:1e:c4:30:56:80:9a:6b:91:44:99:
                    46:94:e9:92:3f:e6:e1:83:dc:35:e7:f3:c4:d5:7e:
                    ba:6d:4e:70:18:ce:14:45:3c:14:cd:40:09:52:b5:
                    01:c2:e6:f6:be:b5:5d:18:cf:6e:9b:56:77:ca:b6:
                    d5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B6:EF:63:E6:D5:84:F4:8D:EF:E2:81:FC:83:7F:C6:3B:15:B0:34
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/e49c5590089ba3c8bce2398bf700b529d1e0c615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.157.0/24
                  200.115.94.0/23
                  201.182.140.0/24
                IPv6:
                  2001:13c7:600a::/48
                  2801:168:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:2e:8f:bb:9d:2a:9e:16:49:41:b1:34:28:be:f9:c6:8f:88:
         13:22:18:a0:34:53:36:f8:0b:11:e1:eb:91:83:89:d8:1d:91:
         f4:30:2d:b8:f1:1b:7c:c1:a1:f7:9a:66:8a:ac:1c:90:72:93:
         0d:10:d8:49:0f:e8:85:91:46:cc:03:35:fd:e6:b3:94:80:66:
         00:aa:86:25:33:cc:3b:4b:0c:60:3a:ca:18:90:bb:23:35:79:
         a8:71:d7:d6:80:0b:22:ea:c6:c1:58:66:ba:27:0f:48:52:13:
         d8:fc:3f:7f:38:e8:bc:74:47:3d:73:01:83:aa:0a:b8:26:ee:
         62:2c:c5:a4:eb:1a:fc:83:28:18:a0:4a:51:22:4c:9b:f6:31:
         87:e5:80:11:fe:4b:77:13:37:35:52:43:a6:2d:38:8f:47:66:
         cd:af:d6:f3:8f:a0:eb:41:a0:83:15:32:7f:6f:81:08:80:da:
         26:cc:8b:12:cb:15:83:0b:07:47:90:4d:27:ce:20:32:36:fd:
         64:87:95:4c:93:7b:04:8c:d9:51:e5:61:75:38:65:ea:e6:a1:
         20:35:1a:36:3b:8d:a8:44:21:86:f4:c0:b4:35:25:de:cd:58:
         23:f7:9f:4f:58:14:29:0c:1c:c5:e1:a4:7e:8c:85:0e:6c:cd:
         74:b1:d1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----