Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/be411c3b380b4c786acbbbb8e6d5c2a56c2b520d.roa
File:                     be411c3b380b4c786acbbbb8e6d5c2a56c2b520d.roa (raw, json)
Hash identifier:          kyC0FqRxxM2qD2tLIdtHDP8mtDWcVkJnCpMXwGzvhmk=
Subject key identifier:   E4:A1:CA:BC:1D:59:4B:5B:BC:32:1B:35:CF:F2:56:96:3C:FF:FF:79
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       22ECAE
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/be411c3b380b4c786acbbbb8e6d5c2a56c2b520d.roa
Signing time:             Tue 20 Jun 2023 15:45:28 +0000
ROA not before:           Mon 19 Jun 2023 15:45:21 +0000
ROA not after:            Fri 20 Jun 2025 15:45:21 +0000
asID:                     61468
IP address blocks:        201.159.220.0/22 maxlen: 24
                          190.15.128.0/20 maxlen: 24
                          143.255.248.0/22 maxlen: 24
                          2800:68::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288814 (0x22ecae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Jun 19 15:45:21 2023 GMT
            Not After : Jun 20 15:45:21 2025 GMT
        Subject: CN=be411c3b380b4c786acbbbb8e6d5c2a56c2b520d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:a5:7f:b7:9d:99:cf:c4:36:0f:32:95:c6:
                    6a:34:e6:9c:d0:c2:10:68:35:32:3d:10:01:dc:87:
                    55:bf:7d:bf:fc:de:d6:22:4d:45:9f:4a:a1:b9:b7:
                    19:ac:ba:19:de:98:5d:53:a7:42:34:0d:43:30:3e:
                    22:69:86:cd:14:2f:8e:09:89:eb:77:ed:40:16:66:
                    94:93:16:c8:34:6e:45:59:63:62:92:46:51:3e:97:
                    92:e1:2f:97:49:95:f4:f8:fa:ed:96:48:e6:c8:0a:
                    3c:75:7f:a0:3c:17:1e:4d:d0:83:04:33:ea:19:5b:
                    fc:63:2c:cb:78:06:7d:2b:4c:22:53:1e:1b:27:f1:
                    6d:44:81:e7:39:9e:7f:bd:c4:66:dc:11:53:85:19:
                    23:d6:90:fc:c2:19:51:40:d1:07:c9:b4:7b:0c:b5:
                    70:76:82:0a:34:ec:52:0c:f2:60:5e:fb:e5:fe:60:
                    f2:29:5e:ee:78:df:28:da:81:66:97:1d:ae:8d:14:
                    d1:98:e7:05:ea:77:c4:1e:9e:02:ae:73:51:90:e3:
                    cb:f4:27:8f:0c:69:b7:86:02:46:bd:c5:9f:6a:37:
                    e9:f1:b8:58:6e:e1:c1:0f:e9:46:e3:4e:35:ac:59:
                    27:b4:ac:91:6e:cd:ef:16:3c:54:3f:9b:58:a3:74:
                    3b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A1:CA:BC:1D:59:4B:5B:BC:32:1B:35:CF:F2:56:96:3C:FF:FF:79
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/be411c3b380b4c786acbbbb8e6d5c2a56c2b520d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.248.0/22
                  190.15.128.0/20
                  201.159.220.0/22
                IPv6:
                  2800:68::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:8a:c2:e7:88:1e:c6:2c:bb:ef:11:35:54:4c:51:dc:9e:ff:
         98:a8:7b:fd:56:ef:cf:ae:49:b1:89:bd:7d:ef:93:e5:cd:d7:
         29:25:88:85:d2:9c:09:b3:d9:18:af:e6:c4:98:87:0c:8a:01:
         5a:d1:dd:c1:60:af:69:a6:55:38:8d:9a:78:a5:55:21:1b:0f:
         2f:4a:62:b2:c9:c1:42:28:4c:a8:5f:88:64:4d:0d:12:70:c8:
         53:5d:bd:e5:22:af:4d:d1:28:6a:cd:d8:26:5f:27:e6:cb:77:
         6a:f8:7b:ce:28:8e:ed:7c:ae:26:ca:9f:78:87:cc:0a:3b:e7:
         e5:72:9a:76:3f:67:b3:40:bb:dc:b0:81:0d:d7:09:90:4e:f5:
         01:a1:cd:07:27:0b:f6:0f:58:07:85:05:1d:0e:c3:6b:c3:63:
         dc:9b:8f:48:52:de:b2:38:85:e2:66:db:5a:50:1e:4e:9d:0c:
         aa:98:fd:ee:2f:33:ce:bc:22:99:d9:ee:0c:26:67:2f:75:1c:
         19:2c:c8:e7:7f:c1:e6:ac:3b:95:04:b5:76:ac:e2:34:f5:c3:
         5f:55:41:14:00:73:88:13:e0:cf:59:f6:04:f7:20:47:64:80:
         07:86:12:57:97:03:e7:7c:b4:01:9e:c1:be:d6:b9:3d:51:8d:
         d8:1b:a1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----