Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/d4825f84f019330920c40e811b804dd89ebac594.roa
File:                     d4825f84f019330920c40e811b804dd89ebac594.roa (raw, json)
Hash identifier:          AcLI6Zts5tiaP5KTOYx5nkYlA4xVye2qIN+iNNf/eNs=
Subject key identifier:   23:4A:A8:26:99:BA:8A:C0:BA:4F:78:FD:84:45:8B:B0:BF:EB:C8:2D
Certificate issuer:       /CN=d46ebd602e50b2947122f994202d0ade1474b0a2
Certificate serial:       0DC1E8
Authority key identifier: 20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/d4825f84f019330920c40e811b804dd89ebac594.roa
Signing time:             Mon 20 Dec 2021 13:09:06 +0000
ROA not before:           Mon 20 Dec 2021 03:00:00 +0000
ROA not after:            Sat 20 Dec 2025 03:00:00 +0000
asID:                     14080
IP address blocks:        200.23.75.0/24 maxlen: 24
                          2801:1da::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901608 (0xdc1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46ebd602e50b2947122f994202d0ade1474b0a2
        Validity
            Not Before: Dec 20 03:00:00 2021 GMT
            Not After : Dec 20 03:00:00 2025 GMT
        Subject: CN=d4825f84f019330920c40e811b804dd89ebac594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:50:c2:fd:fa:77:7f:36:f6:c2:bd:8b:4e:
                    82:21:29:4a:7f:74:d2:4a:84:b3:0d:2e:e9:c1:3a:
                    d9:3f:0a:50:22:d3:d3:b9:8d:5f:91:83:ee:75:cc:
                    f3:d2:c5:98:4a:db:fe:71:a9:0f:ea:7c:71:7d:5c:
                    cb:f2:8a:5a:b5:12:50:17:ce:c8:b6:c4:44:83:13:
                    89:f7:e9:4c:cc:d0:06:b9:76:47:7c:aa:ac:f6:3f:
                    ea:bd:52:89:29:b9:7f:41:21:eb:ab:dc:c4:c1:22:
                    7e:1c:c7:ee:13:d8:1d:a8:e6:91:bd:35:0e:2e:37:
                    15:6b:02:1f:f9:4e:f3:3a:1c:c4:38:cd:a0:e8:52:
                    79:f6:a9:8b:53:3a:d4:33:36:26:d8:56:b6:19:07:
                    3a:a0:55:fc:f3:a2:aa:54:c1:36:f5:b7:22:66:be:
                    93:9e:49:3d:52:f0:c1:5c:d9:b1:40:6c:4a:61:c4:
                    9f:bd:9c:8a:7d:c2:75:83:0a:be:3f:e0:a5:4c:a9:
                    a6:18:bb:eb:0c:47:72:21:39:cc:ee:13:f9:cf:d3:
                    e7:c8:3f:6c:f9:2d:52:af:7e:e0:67:fb:dc:c4:30:
                    5d:8e:2b:b8:66:33:fe:cd:b1:e7:df:59:18:d2:50:
                    e7:fd:27:29:a6:e3:4a:0c:30:ce:e1:46:14:b0:30:
                    a6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4A:A8:26:99:BA:8A:C0:BA:4F:78:FD:84:45:8B:B0:BF:EB:C8:2D
            X509v3 Authority Key Identifier:
                keyid:20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/d4825f84f019330920c40e811b804dd89ebac594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/d46ebd602e50b2947122f994202d0ade1474b0a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.75.0/24
                IPv6:
                  2801:1da::/44

    Signature Algorithm: sha256WithRSAEncryption
         52:38:26:5d:a8:62:af:11:53:aa:c9:b7:ac:41:07:c1:66:29:
         4b:cd:dc:d8:e3:50:f3:a2:7c:86:c3:2a:ca:5f:4c:83:bc:1c:
         6d:2a:35:ed:9b:cc:70:9b:60:fc:33:2f:8a:d2:df:dd:05:f9:
         04:07:08:3f:fa:04:3f:95:92:ea:6c:ae:ec:26:38:9a:1a:e4:
         07:9f:86:2a:7c:ff:17:34:46:ec:c4:3f:6b:33:55:b7:61:b8:
         28:e4:b5:9c:fc:27:5c:8c:b7:2d:ce:50:0f:cd:99:ac:57:e1:
         30:10:aa:81:64:bb:49:af:fb:bf:7e:78:4b:7a:06:b2:4d:43:
         bc:7d:6d:b8:56:e3:53:84:9d:5c:06:61:7f:90:dd:97:aa:2a:
         99:88:1f:f4:5f:f4:19:8b:8f:e6:24:5c:49:18:f6:c5:80:89:
         71:1f:57:eb:1a:98:b6:d4:6a:cd:e7:c7:51:9c:6c:2f:09:02:
         af:b0:9e:e3:99:d7:a3:d3:c7:04:05:39:3a:7f:85:ef:ba:0d:
         18:71:fe:78:76:8d:6a:8f:7b:fa:20:71:1c:6d:f5:77:d1:1a:
         c4:74:a4:1f:8c:ed:5f:f4:73:00:e8:24:26:67:81:c9:cd:68:
         8f:ba:10:5a:ce:cb:db:c1:14:7b:ee:77:82:a8:37:34:30:ee:
         6c:2b:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----