Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/572e94e7d519b61a3ec930cbb8a84810cd30fae9.roa
File:                     572e94e7d519b61a3ec930cbb8a84810cd30fae9.roa (raw, json)
Hash identifier:          toUx9ymfm3Jg3C27tbex7nPmsXUF23kLtmZZo/wpaOo=
Subject key identifier:   43:F2:41:F8:F7:24:9A:34:0D:67:47:8E:82:DD:F9:7E:9A:01:3C:68
Certificate issuer:       /CN=138405134343f63286b605fe9165839fd04a4252
Certificate serial:       263FE8
Authority key identifier: 13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/572e94e7d519b61a3ec930cbb8a84810cd30fae9.roa
Signing time:             Thu 14 Dec 2023 17:46:46 +0000
ROA not before:           Thu 14 Dec 2023 17:46:43 +0000
ROA not after:            Sun 14 Dec 2025 17:46:43 +0000
asID:                     3549
IP address blocks:        200.0.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2506728 (0x263fe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138405134343f63286b605fe9165839fd04a4252
        Validity
            Not Before: Dec 14 17:46:43 2023 GMT
            Not After : Dec 14 17:46:43 2025 GMT
        Subject: CN=572e94e7d519b61a3ec930cbb8a84810cd30fae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:09:bf:93:a6:e4:a6:70:3a:de:3e:57:2c:
                    63:84:a6:57:e3:fe:9f:6a:f8:fc:42:22:76:a3:e4:
                    7e:8f:07:0d:37:31:d1:30:3a:2a:16:62:e5:82:fa:
                    14:30:72:fe:d6:1c:ea:72:28:d8:b4:ad:99:93:b0:
                    53:e8:34:66:a9:5b:d4:20:75:12:fe:e2:48:c0:9a:
                    ef:77:33:7d:b4:13:b0:b1:5e:da:ee:61:09:53:d0:
                    85:48:c3:f5:af:63:3f:f7:70:61:7c:c4:e3:a4:6b:
                    f2:bc:04:c5:92:fb:77:3e:97:fc:f8:2e:23:ec:6f:
                    5f:4f:5b:66:b9:df:16:62:ca:c5:5c:d1:11:8f:32:
                    e0:fc:bf:41:83:ff:e7:3b:ad:fe:35:19:f5:61:eb:
                    60:43:c1:01:09:dd:f3:7b:b3:7b:04:ce:e1:e8:6a:
                    17:14:9c:3f:e9:be:d3:9f:3b:45:29:6d:ac:25:4d:
                    bd:8f:6d:cd:cd:df:5d:2f:13:fa:4b:7a:3e:71:e2:
                    ff:d4:24:c5:72:18:a9:8a:d8:1c:e3:7e:04:10:b6:
                    71:65:1c:d5:dc:5c:71:e2:3a:09:90:33:8b:cc:bb:
                    94:27:24:00:1e:8d:9d:4a:56:94:af:4a:e2:a2:06:
                    ae:4c:7b:e9:d8:ec:ea:be:14:b9:ec:8d:b4:9a:ca:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F2:41:F8:F7:24:9A:34:0D:67:47:8E:82:DD:F9:7E:9A:01:3C:68
            X509v3 Authority Key Identifier:
                keyid:13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/572e94e7d519b61a3ec930cbb8a84810cd30fae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:af:8f:62:cd:0e:f4:1a:83:40:7b:07:bd:2b:35:4b:5e:07:
         7e:e7:ab:e7:2a:62:b8:8f:64:92:e6:78:b8:4a:bf:17:5b:1a:
         2f:0f:34:ee:e8:e9:11:60:f0:98:9d:c9:c5:79:73:3d:10:2f:
         db:00:10:d7:88:e1:63:31:85:a5:0d:b1:58:c6:4c:8c:52:2e:
         5e:3a:39:4c:3b:a3:7e:8b:c4:e4:b9:ba:47:1d:d4:04:f4:69:
         6d:57:ed:04:fa:44:8f:c2:fd:19:4b:a3:d3:86:b3:86:09:3e:
         b9:11:38:a5:c2:5b:7b:d8:70:e9:35:40:37:a9:e7:ef:f1:d0:
         53:06:d8:12:0e:4f:e9:f5:0e:b4:2b:4c:dd:e0:c6:07:e5:fe:
         29:52:bd:ed:4b:38:6b:16:f8:1f:b2:bc:30:94:ac:7b:62:b6:
         77:5d:5a:92:67:9a:f1:22:50:ff:7e:20:82:73:98:cd:94:c9:
         04:36:4c:d0:77:e7:c5:8d:3c:86:ac:08:e9:c8:9f:15:a9:a4:
         48:88:79:ee:fb:19:15:4f:17:f0:a3:c2:aa:52:fc:02:0a:13:
         10:77:78:18:31:be:92:80:05:27:be:82:30:ad:65:82:91:9f:
         f0:b3:58:a7:67:07:b0:91:10:7d:fb:15:2b:08:53:53:bf:5a:
         eb:46:04:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----