Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068bdd3-5430-4dcc-bcfa-89e8e9fe2b38/23f278de09deb9d10ead008146c95a62b55afa09.roa
File:                     23f278de09deb9d10ead008146c95a62b55afa09.roa (raw, json)
Hash identifier:          lQ1IrTkWOK7cs184Xtm3eytDfeEJijsHTep6wTphVyU=
Subject key identifier:   9B:3C:AC:EC:D0:5D:D4:41:3D:08:6D:E6:AC:F5:93:74:F4:78:8E:8C
Certificate issuer:       /CN=4f38ac0e08f7d2f4471d0cbc85dcb2934977923e
Certificate serial:       1EDC97
Authority key identifier: 0A:96:FE:C0:B5:23:46:CF:C1:49:FA:56:C3:77:15:9D:E2:61:E8:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f38ac0e08f7d2f4471d0cbc85dcb2934977923e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7068bdd3-5430-4dcc-bcfa-89e8e9fe2b38/23f278de09deb9d10ead008146c95a62b55afa09.roa
Signing time:             Sat 18 Mar 2023 04:58:34 +0000
ROA not before:           Fri 17 Mar 2023 04:47:56 +0000
ROA not after:            Tue 18 Mar 2025 04:47:56 +0000
asID:                     18592
IP address blocks:        187.251.32.0/19 maxlen: 19
                          187.251.64.0/19 maxlen: 19
                          187.251.160.0/19 maxlen: 19
                          200.23.60.0/24 maxlen: 24
                          201.139.176.0/21 maxlen: 21
                          2001:1228::/32 maxlen: 32
                          2001:122c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022551 (0x1edc97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f38ac0e08f7d2f4471d0cbc85dcb2934977923e
        Validity
            Not Before: Mar 17 04:47:56 2023 GMT
            Not After : Mar 18 04:47:56 2025 GMT
        Subject: CN=23f278de09deb9d10ead008146c95a62b55afa09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2f:0f:6a:f6:48:b9:2a:2a:29:f2:65:26:64:
                    26:40:2c:de:55:22:9d:b7:a1:ee:f1:b2:8d:fa:49:
                    08:b3:62:c2:ad:f5:4d:0c:26:01:d0:15:ee:dc:a9:
                    4b:17:ad:5c:64:f8:4c:9a:be:e9:3b:5e:2b:a8:0b:
                    ce:5d:d3:6a:8f:2c:4f:f5:a7:12:9b:af:8b:8b:c1:
                    c6:61:98:2e:bf:c9:61:59:9a:22:4f:4f:96:02:4f:
                    e1:fd:b5:23:c9:61:48:e5:d5:67:76:ee:6a:50:cf:
                    31:db:af:e2:bd:74:be:e3:9c:9c:dd:f0:c9:be:0e:
                    5f:a6:72:24:73:b3:5f:c2:57:7e:7c:d1:10:5c:df:
                    d3:b5:ae:26:4d:4e:56:86:6c:0b:bb:bf:0b:1d:08:
                    70:16:b3:d8:79:53:7c:eb:ae:db:14:87:5f:fd:ff:
                    04:ea:fd:5e:fe:6e:62:ad:b1:14:c1:ab:46:74:83:
                    69:cf:16:ed:69:c8:43:bc:ed:fb:65:8b:f9:a9:7b:
                    4a:cf:dd:b7:91:1a:3e:53:43:77:54:7a:c6:2d:13:
                    c3:89:23:4b:ba:de:39:1e:ae:74:d0:5a:5d:29:fa:
                    64:f3:0a:0f:1c:75:d2:ea:af:f2:8e:af:60:f4:b5:
                    a3:79:88:34:f9:67:ae:98:f6:2f:17:79:0c:2b:f1:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3C:AC:EC:D0:5D:D4:41:3D:08:6D:E6:AC:F5:93:74:F4:78:8E:8C
            X509v3 Authority Key Identifier:
                keyid:0A:96:FE:C0:B5:23:46:CF:C1:49:FA:56:C3:77:15:9D:E2:61:E8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f38ac0e08f7d2f4471d0cbc85dcb2934977923e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068bdd3-5430-4dcc-bcfa-89e8e9fe2b38/23f278de09deb9d10ead008146c95a62b55afa09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7068bdd3-5430-4dcc-bcfa-89e8e9fe2b38/4f38ac0e08f7d2f4471d0cbc85dcb2934977923e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.32.0-187.251.95.255
                  187.251.160.0/19
                  200.23.60.0/24
                  201.139.176.0/21
                IPv6:
                  2001:1228::/32
                  2001:122c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:d5:04:fa:29:9b:fe:a5:3d:08:9c:9f:27:52:a8:93:c2:bb:
         61:1b:18:69:bf:a3:e4:bc:2a:83:3c:9d:9e:c3:53:b4:96:7f:
         f0:dd:76:3a:89:00:7c:c3:e4:14:d1:f7:8e:04:53:fe:d3:e3:
         d0:88:3f:3b:9d:88:26:e4:d5:a0:e5:84:a3:41:3c:c4:0f:91:
         f3:47:8b:92:2a:9e:4c:34:5a:af:0c:74:db:cd:e9:25:d6:e5:
         5e:55:58:ac:08:fd:88:11:05:ca:f4:2d:b2:2b:1d:a8:e8:46:
         8d:0d:24:1d:4b:d9:13:5d:82:94:0b:70:ec:38:33:ab:ff:04:
         76:52:9e:6a:bc:e4:7c:8c:17:ce:bd:29:67:99:94:bd:78:eb:
         5c:79:f9:a1:c7:5c:76:f7:22:59:d0:2f:34:dc:4d:57:c0:bf:
         df:0e:0b:88:d9:95:3b:b5:70:8a:93:ec:ab:59:8c:c1:a0:9b:
         f3:20:3a:44:53:57:e0:7e:de:93:d6:10:76:57:85:68:2d:e3:
         e0:c2:84:fa:41:6f:05:13:31:9d:03:41:8c:ea:65:ed:10:06:
         95:13:a1:6a:9c:2e:1a:66:21:47:a4:bf:22:62:1b:c8:b6:42:
         96:d2:91:2e:d7:17:97:af:ba:99:fd:ac:d8:64:b9:24:b9:61:
         b0:f9:47:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----