Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6efe7cbf-b560-44ef-bfb8-aa5a5d58e638/65bf8fd032ba8f7b596e21ee40c2da90b7aa0f65.roa
File:                     65bf8fd032ba8f7b596e21ee40c2da90b7aa0f65.roa (raw, json)
Hash identifier:          +wvTarvwnhIa9RFL9819ChRW64tvC/aC6ncjDvtA5kk=
Subject key identifier:   01:9F:0C:AF:DE:28:E2:71:A2:50:39:35:26:E3:EF:DE:E5:68:16:B0
Certificate issuer:       /CN=8dbdc246cceb1862805c4dbe107d7326b0ae88ef
Certificate serial:       1FF9B1
Authority key identifier: 1F:39:4B:B9:88:11:6E:B1:96:9D:65:DF:42:AD:11:B9:61:4B:E8:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8dbdc246cceb1862805c4dbe107d7326b0ae88ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6efe7cbf-b560-44ef-bfb8-aa5a5d58e638/65bf8fd032ba8f7b596e21ee40c2da90b7aa0f65.roa
Signing time:             Sat 29 Apr 2023 00:04:51 +0000
ROA not before:           Fri 28 Apr 2023 00:04:51 +0000
ROA not after:            Tue 29 Apr 2025 00:04:51 +0000
asID:                     265708
IP address blocks:        200.85.136.0/22 maxlen: 24
                          2803:f9c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2095537 (0x1ff9b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbdc246cceb1862805c4dbe107d7326b0ae88ef
        Validity
            Not Before: Apr 28 00:04:51 2023 GMT
            Not After : Apr 29 00:04:51 2025 GMT
        Subject: CN=65bf8fd032ba8f7b596e21ee40c2da90b7aa0f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9c:0f:34:5a:1b:e6:99:e5:60:ec:c9:94:df:
                    91:3b:96:83:a6:f2:4a:fc:1d:8d:79:b2:76:d0:28:
                    14:ec:10:06:9d:bd:b8:7f:70:87:0f:80:05:2f:e3:
                    1c:2e:39:95:1b:59:0c:f0:a0:bc:2e:67:04:ce:c9:
                    1c:07:bf:e8:be:35:dd:50:22:5f:c9:3c:24:be:3c:
                    5e:94:05:63:01:d6:32:3b:f3:cf:f7:e6:50:da:df:
                    c4:43:35:b2:f2:39:b2:ca:f8:a9:ae:5a:10:34:1b:
                    ff:01:ad:2e:0e:5a:eb:de:6a:9e:1a:9c:1f:9c:99:
                    44:21:ea:18:06:98:87:43:a7:46:cd:fa:ae:0a:64:
                    2e:ab:3d:45:02:e6:df:f3:3a:04:56:9b:90:f7:33:
                    b9:81:2c:8f:e7:6e:f9:51:f4:3b:df:01:a2:67:13:
                    f5:ad:13:23:11:95:3a:8c:77:b5:37:08:d6:a1:4e:
                    11:f4:22:3a:ca:8d:34:c1:ae:2e:b5:de:c3:e8:e9:
                    d9:2e:e5:3b:2a:a0:41:a1:32:ba:b1:f7:31:2e:33:
                    87:d6:04:23:82:3a:98:9a:ea:4d:63:3b:af:da:32:
                    72:99:e5:b3:03:48:04:2d:02:75:10:30:da:91:a8:
                    37:6e:8a:dd:eb:3a:d5:b7:c1:08:f0:4b:8a:3e:64:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9F:0C:AF:DE:28:E2:71:A2:50:39:35:26:E3:EF:DE:E5:68:16:B0
            X509v3 Authority Key Identifier:
                keyid:1F:39:4B:B9:88:11:6E:B1:96:9D:65:DF:42:AD:11:B9:61:4B:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8dbdc246cceb1862805c4dbe107d7326b0ae88ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6efe7cbf-b560-44ef-bfb8-aa5a5d58e638/65bf8fd032ba8f7b596e21ee40c2da90b7aa0f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6efe7cbf-b560-44ef-bfb8-aa5a5d58e638/8dbdc246cceb1862805c4dbe107d7326b0ae88ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.136.0/22
                IPv6:
                  2803:f9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:c7:93:3b:44:ca:26:ad:dd:1d:be:4d:8e:27:52:fd:c4:1e:
         2a:d0:96:35:16:d0:9b:c1:f5:26:32:fb:62:d0:33:f2:e0:7e:
         c6:75:3b:b7:d1:64:6e:64:9b:29:cb:97:91:32:4d:49:cb:45:
         80:34:75:d6:5d:98:64:be:03:5c:0c:06:a2:2f:52:31:8f:d8:
         d8:49:70:b1:02:25:d1:93:b4:59:a4:ef:95:12:41:0b:14:e8:
         39:2d:0d:3a:37:83:8a:63:6b:86:4d:74:46:3f:c8:d6:b9:d8:
         e7:94:15:17:8f:2f:f2:b8:07:91:3f:be:7e:8f:59:a9:c7:5b:
         0c:d8:40:6d:d7:1e:f3:ba:44:6e:94:09:3c:cb:30:73:04:d7:
         b3:b7:ec:9d:fa:0e:0b:c2:44:d5:d6:ee:db:0c:7b:71:47:24:
         48:88:61:3a:b1:a1:06:9b:2a:d3:fb:ee:bd:fd:de:4d:7c:5e:
         ec:e8:d0:bf:de:a8:e5:cc:09:65:ea:50:a0:f3:f3:dd:2d:30:
         c1:49:e0:4c:6c:c1:0c:dd:55:d1:27:2a:7d:03:61:96:c5:65:
         f5:d4:db:08:74:3c:42:d1:63:a9:e9:9f:99:26:58:0b:c0:a1:
         53:c3:5c:dd:71:6d:45:14:d0:b5:e1:1a:d7:c7:19:af:88:bf:
         83:9d:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----