Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/605857694d38c332bad94cbc5b69c428b4cd3462.roa
File:                     605857694d38c332bad94cbc5b69c428b4cd3462.roa (raw, json)
Hash identifier:          sX9QqAZUWG/DRpIxOh4HXURtCwlwnqZ0H7HvHGJD9iA=
Subject key identifier:   94:45:07:DC:B7:7D:A4:87:6D:0C:2B:54:F5:C3:ED:71:2D:9A:9B:5A
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       0439EF
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/605857694d38c332bad94cbc5b69c428b4cd3462.roa
Signing time:             Wed 12 Jul 2023 15:11:15 +0000
ROA not before:           Tue 11 Jul 2023 15:11:15 +0000
ROA not after:            Sat 12 Jul 2025 15:11:15 +0000
asID:                     16629
IP address blocks:        201.246.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276975 (0x439ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 11 15:11:15 2023 GMT
            Not After : Jul 12 15:11:15 2025 GMT
        Subject: CN=605857694d38c332bad94cbc5b69c428b4cd3462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:90:11:05:a6:68:2d:12:dd:e8:5c:b1:7f:
                    0c:65:8f:ed:69:58:73:c4:08:54:c6:02:40:32:b6:
                    29:4b:eb:e2:bc:cc:e9:a1:f4:fe:f6:97:e1:ed:1b:
                    83:d6:d7:71:9a:4e:e0:ae:c7:73:ed:5b:b9:40:cf:
                    1a:52:83:1f:dd:89:bd:32:c3:b1:99:0a:79:06:da:
                    fe:f4:1f:52:08:09:17:af:70:e0:e8:95:ac:10:ea:
                    dd:87:4a:74:d3:b5:6c:b7:53:dd:12:4c:a8:26:12:
                    98:26:27:b4:cb:40:72:3f:5d:06:25:e8:c0:5b:4f:
                    91:6e:3d:33:b7:55:96:8c:b0:b7:5b:5d:3d:9f:32:
                    65:8a:99:d7:5b:01:9e:84:da:e2:d9:9b:8a:13:9c:
                    f9:6e:0a:b5:9b:cb:63:ea:b4:2e:f5:f9:8d:e0:1f:
                    81:e3:56:51:4d:5a:c3:ed:29:c3:cc:42:58:ff:59:
                    87:c7:34:b2:aa:ae:b3:88:97:fa:6b:09:eb:d5:fa:
                    8d:55:95:02:a8:8e:1b:a2:98:0c:18:b7:2b:0e:4c:
                    47:0d:30:f2:5e:14:c8:c6:b2:cd:da:c8:62:71:94:
                    9f:5c:34:00:e0:85:fb:86:2b:a4:7c:35:71:9b:95:
                    21:ec:68:eb:78:8c:08:50:f1:68:00:d2:09:58:69:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:45:07:DC:B7:7D:A4:87:6D:0C:2B:54:F5:C3:ED:71:2D:9A:9B:5A
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/605857694d38c332bad94cbc5b69c428b4cd3462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.246.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0f:ae:1e:a0:eb:a0:b9:8b:c8:3e:65:b9:40:a2:1d:5f:2a:08:
         2a:60:69:0d:5e:29:9b:25:84:be:68:29:40:4f:d2:78:b8:70:
         37:20:c5:4e:e8:06:8f:b1:80:d9:68:a3:e4:da:cd:8d:cb:43:
         ce:ba:b3:58:b1:cc:55:1d:95:9f:de:75:84:54:d1:43:84:bd:
         a3:a0:1c:0d:2c:39:8c:ab:a5:6c:e0:7b:f1:98:bf:69:c5:58:
         b9:76:99:5e:52:ed:06:2a:c0:57:fe:c1:3e:b8:13:b9:f5:70:
         d3:1c:0e:7e:23:6e:d9:a8:c8:2f:38:ab:9f:d4:59:98:13:3c:
         fd:4b:9f:e1:b3:93:cc:93:83:f3:47:d5:4b:b6:fe:3b:96:b4:
         31:3c:18:16:bb:61:ec:f9:9c:73:04:8b:14:99:0b:14:f0:71:
         01:11:07:a0:26:ec:fc:ed:ce:44:98:75:be:e3:37:f6:86:ce:
         3a:a1:7d:2b:77:d8:bc:12:9a:0d:49:95:83:36:23:a5:23:d8:
         86:ec:32:80:14:ff:3a:93:33:e8:f0:60:48:76:b0:0a:9b:6c:
         09:91:f2:3a:d9:93:7c:34:13:81:87:06:26:f6:f2:74:0c:41:
         fc:74:2f:c7:2c:2a:8c:e6:35:fa:fa:33:9d:35:e6:59:5e:0e:
         27:69:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----