Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/b1961ec97e2190b69700bb6018361a35121f763d.roa
File:                     b1961ec97e2190b69700bb6018361a35121f763d.roa (raw, json)
Hash identifier:          /6qMwGrIuiOANLIEVBU24rS1Fc9b0WWWM+6Z7+hQH4M=
Subject key identifier:   56:20:FA:C5:FE:64:D9:7B:BA:49:EE:0C:B0:BB:A4:59:3E:96:2F:A8
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       04AD7C
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/b1961ec97e2190b69700bb6018361a35121f763d.roa
Signing time:             Wed 19 Jul 2023 17:07:33 +0000
ROA not before:           Tue 18 Jul 2023 17:07:32 +0000
ROA not after:            Sat 19 Jul 2025 17:07:32 +0000
asID:                     16629
IP address blocks:        200.29.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306556 (0x4ad7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 18 17:07:32 2023 GMT
            Not After : Jul 19 17:07:32 2025 GMT
        Subject: CN=b1961ec97e2190b69700bb6018361a35121f763d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:1b:0f:ba:ad:60:27:d9:9d:2c:b2:40:77:
                    2e:4c:c5:21:d3:08:5d:8d:fe:3b:86:18:62:fe:69:
                    14:f7:2a:21:f2:bc:02:9e:60:84:07:95:f3:71:ad:
                    4d:ab:57:bf:87:75:89:2d:64:1c:c7:e3:b7:89:0c:
                    e8:8b:cd:dc:ce:b5:d2:4a:fb:6e:a9:91:11:89:d7:
                    79:f8:55:02:37:10:be:f7:e8:d9:be:54:d9:a6:31:
                    4a:e1:2b:20:58:54:a2:1e:e9:f3:26:23:0a:a2:e0:
                    7e:74:66:31:50:5d:88:f7:b9:57:4f:df:7a:4e:61:
                    4d:3c:b8:54:f9:64:bc:1e:20:eb:a7:66:b1:aa:74:
                    bc:1a:af:b5:c8:6f:87:58:cc:14:0e:36:2a:99:e4:
                    d4:ce:63:de:b9:5f:62:9b:f7:89:cf:9d:e8:ab:f3:
                    14:ee:00:ea:72:12:17:d6:b8:bf:d1:a5:ef:07:bd:
                    ae:42:a6:63:dd:d5:02:fc:91:85:22:26:3a:4d:64:
                    f1:65:76:6e:89:8c:dc:95:ab:bd:0f:83:50:7d:03:
                    05:cf:38:b0:b7:01:cc:bb:a9:34:62:7b:50:2b:8b:
                    5e:09:fa:e7:9d:ca:f9:eb:34:51:2a:e3:66:44:15:
                    85:dc:ad:50:3c:20:4a:6d:23:83:ac:73:d4:86:aa:
                    97:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:20:FA:C5:FE:64:D9:7B:BA:49:EE:0C:B0:BB:A4:59:3E:96:2F:A8
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/b1961ec97e2190b69700bb6018361a35121f763d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:a5:55:a0:2f:0a:a2:bc:72:8b:46:ec:4d:8d:2d:11:09:37:
         37:f1:f3:a4:45:a3:e0:dc:ad:94:d0:41:07:26:1e:49:12:43:
         7b:b5:06:ca:f9:66:90:51:fe:7c:9c:fd:a2:00:84:5c:28:00:
         19:5d:3f:e2:e6:0e:15:4d:fb:64:65:56:a0:30:45:44:60:12:
         56:6d:26:27:62:ec:95:4a:7e:07:c3:88:c8:b5:c8:17:12:68:
         7c:93:d1:df:17:13:4f:0a:a9:9b:d7:ae:79:91:63:d5:5b:dd:
         40:85:71:a7:75:83:bf:88:f6:eb:89:4d:24:77:2b:4c:6f:cd:
         9e:ff:fb:06:1e:e4:5d:eb:67:33:06:3a:8c:4d:c0:92:fe:b8:
         e1:67:07:1d:8f:7e:04:fd:f6:23:ca:26:07:6e:14:6e:7e:6f:
         f4:f0:71:76:37:ce:b2:b9:bd:97:56:4b:1c:4d:9d:9a:ab:a4:
         91:12:2c:ce:8d:35:c8:a2:84:4e:f6:52:5d:ec:ad:43:84:29:
         7a:86:6f:12:b1:32:c7:0d:f1:4f:48:5a:d5:b5:92:c0:42:e2:
         21:62:54:39:62:a6:c9:71:a2:9b:68:2d:15:99:93:31:7d:78:
         70:73:f5:d5:61:e8:ba:16:db:ae:11:db:c6:e2:f3:11:59:3c:
         47:98:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----