Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/c10c00591b5a6f1d5d6ebefcfd954dd7da98255d.roa
File:                     c10c00591b5a6f1d5d6ebefcfd954dd7da98255d.roa (raw, json)
Hash identifier:          nHnWSzJwlnNClxIZVC1gsgSCtvN7QrYYEF03gi3Xp/M=
Subject key identifier:   F1:D4:FF:EF:3D:EE:16:DD:7B:0C:7D:A8:76:08:F0:4C:27:81:EC:11
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       04287B
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/c10c00591b5a6f1d5d6ebefcfd954dd7da98255d.roa
Signing time:             Wed 12 Jul 2023 15:07:22 +0000
ROA not before:           Tue 11 Jul 2023 15:07:22 +0000
ROA not after:            Sat 12 Jul 2025 15:07:22 +0000
asID:                     16629
IP address blocks:        201.223.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272507 (0x4287b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 11 15:07:22 2023 GMT
            Not After : Jul 12 15:07:22 2025 GMT
        Subject: CN=c10c00591b5a6f1d5d6ebefcfd954dd7da98255d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:d7:44:eb:00:46:43:63:f6:de:fd:c8:02:
                    fb:fe:e0:69:39:b6:4a:cd:e5:bb:53:8f:32:29:b3:
                    65:86:46:ea:f1:d7:b4:5a:24:41:ff:bf:fe:79:e9:
                    1d:01:3e:9b:97:b0:f9:02:cd:f9:48:5a:e1:34:d8:
                    3b:c5:83:4b:07:e6:bd:3e:7d:e6:c4:fc:b8:c1:ef:
                    1b:2e:68:c6:7b:5a:16:b3:9e:aa:cf:70:e1:fc:00:
                    d5:6a:69:36:af:2a:7d:25:09:ac:21:59:04:ce:06:
                    62:e5:8a:18:37:1a:56:0d:6e:11:62:6c:c5:62:dc:
                    c9:37:a1:34:58:d9:d9:da:db:c9:e9:ec:dd:9e:e3:
                    aa:90:fe:5e:4a:6c:b5:07:f5:f3:1c:d0:72:cf:97:
                    62:62:3f:1f:84:b3:56:d9:5e:42:8a:21:3d:96:3f:
                    dd:9d:e7:09:10:e7:86:37:b4:19:2b:8f:19:ad:85:
                    87:70:9c:9e:4f:e1:2d:76:21:dd:3d:be:ce:d9:4a:
                    f0:a4:0d:4e:2b:51:fc:45:84:87:e2:6b:f8:e5:81:
                    70:56:59:49:56:e5:f2:74:89:ac:6b:de:54:7c:6e:
                    5c:0b:95:33:4b:dc:2c:2d:97:1b:81:48:61:6c:27:
                    3a:b8:63:4d:fb:39:bf:02:09:f9:15:32:d1:e1:e5:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D4:FF:EF:3D:EE:16:DD:7B:0C:7D:A8:76:08:F0:4C:27:81:EC:11
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/c10c00591b5a6f1d5d6ebefcfd954dd7da98255d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.223.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         63:64:12:87:42:4d:c2:65:f4:a2:e9:81:27:ff:9f:72:70:16:
         50:08:06:ad:86:b3:38:ae:25:af:62:02:fa:41:02:da:70:6a:
         27:ef:ee:dc:65:17:44:05:7c:33:e1:fc:1f:15:40:99:29:81:
         93:a5:6d:74:78:4a:f1:17:db:b8:aa:e9:c8:18:2b:55:00:a8:
         2c:05:77:58:41:93:5f:78:e0:ab:8a:b1:b1:30:b3:a3:17:c0:
         e8:f0:de:ba:3d:a3:0c:04:6c:69:3a:99:fc:55:8b:77:a9:0c:
         cb:3e:1c:87:51:b1:de:ec:63:9a:14:de:e1:41:e3:65:55:3d:
         6c:a9:4a:2b:81:91:9f:6a:ab:e1:0f:bd:f9:3a:91:cb:95:9d:
         d8:7c:94:ad:46:95:d7:de:b9:32:66:a3:2b:77:61:86:c6:6f:
         06:95:9c:34:de:ed:d9:03:f7:22:3d:5a:63:33:2b:0d:da:35:
         0b:05:03:d1:8b:ba:59:a3:39:12:db:49:9d:be:83:4f:bd:26:
         b1:81:01:e3:81:d2:a9:22:ee:0d:bf:bc:39:14:eb:d8:2d:fb:
         e4:cb:b1:5e:38:66:de:46:ef:b7:3f:07:84:12:7c:88:42:e0:
         e0:25:46:cf:7f:eb:a3:e8:8d:89:2f:2f:8c:86:0c:1c:7d:9c:
         50:fb:74:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----