Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/b4ac8bd6babc91770887cb531b9453768a94456a.roa
File:                     b4ac8bd6babc91770887cb531b9453768a94456a.roa (raw, json)
Hash identifier:          Qb3+/ytKJdo/ZElSTPnJHUEM6MDOrqooTNsPW9Pi8eM=
Subject key identifier:   12:42:61:27:77:84:F2:60:65:45:20:DE:7B:AD:A2:B7:94:97:54:9D
Certificate issuer:       /CN=acd0b51210b784be64102a9286473d3c176ced3a
Certificate serial:       D5C1
Authority key identifier: 35:6B:6C:7E:E5:7E:0D:4E:91:CD:DD:0B:C5:DF:EB:83:EC:22:D9:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acd0b51210b784be64102a9286473d3c176ced3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/b4ac8bd6babc91770887cb531b9453768a94456a.roa
Signing time:             Sun 14 May 2023 02:29:19 +0000
ROA not before:           Sat 13 May 2023 02:29:19 +0000
ROA not after:            Wed 14 May 2025 02:29:19 +0000
asID:                     269931
IP address blocks:        200.125.168.0/22 maxlen: 22
                          2803:f2e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54721 (0xd5c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd0b51210b784be64102a9286473d3c176ced3a
        Validity
            Not Before: May 13 02:29:19 2023 GMT
            Not After : May 14 02:29:19 2025 GMT
        Subject: CN=b4ac8bd6babc91770887cb531b9453768a94456a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:3b:4b:38:4b:66:94:ff:98:ed:7c:ca:14:
                    d4:c4:87:4f:26:88:f2:c9:8d:d5:35:53:93:51:5a:
                    0e:bf:1b:69:ec:00:8a:24:76:f3:1d:5d:3a:d0:67:
                    04:56:29:f2:3e:54:2c:1f:c5:4b:ca:01:86:76:89:
                    01:f8:2a:e2:fc:df:df:f8:df:d7:43:02:f6:94:0e:
                    80:ed:8c:08:f3:30:80:bb:15:a7:f6:a3:ca:91:b3:
                    11:68:dd:d0:25:76:32:62:ac:36:6b:6d:26:e9:f5:
                    66:01:0f:b2:97:e0:02:86:96:71:0c:b4:17:2b:2a:
                    0e:73:6b:14:0f:2e:c5:b6:bf:34:0c:67:05:60:e0:
                    61:47:32:1b:61:0d:74:e9:26:9c:cf:2c:90:05:81:
                    07:d9:cb:5a:a1:89:a1:ce:e4:87:93:7c:b0:bb:e5:
                    6a:61:4d:b9:d1:f1:40:c7:11:d5:d7:aa:90:1b:ef:
                    ef:07:0d:4d:10:2f:67:5f:54:93:f8:41:28:27:5f:
                    8a:07:f0:80:bc:d3:7f:ca:7a:4b:0a:d2:99:fd:73:
                    6f:1c:2b:f5:59:da:4e:0c:23:e3:25:17:38:ea:c4:
                    52:2b:3a:7e:d9:18:b7:18:d7:df:d8:ad:c8:b7:1f:
                    6d:d4:31:0a:70:17:98:15:d3:6a:48:c8:37:3d:76:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:42:61:27:77:84:F2:60:65:45:20:DE:7B:AD:A2:B7:94:97:54:9D
            X509v3 Authority Key Identifier:
                keyid:35:6B:6C:7E:E5:7E:0D:4E:91:CD:DD:0B:C5:DF:EB:83:EC:22:D9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acd0b51210b784be64102a9286473d3c176ced3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/b4ac8bd6babc91770887cb531b9453768a94456a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/acd0b51210b784be64102a9286473d3c176ced3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.168.0/22
                IPv6:
                  2803:f2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:e7:a7:ec:8a:ea:4c:94:51:69:52:ed:c0:72:32:0f:8a:02:
         eb:bc:92:b6:43:4e:e2:8e:dd:ce:fa:f7:4e:6b:74:70:0c:06:
         ea:84:3e:ea:e5:6e:00:f4:2f:4b:3f:00:6d:3e:0d:ac:92:ef:
         8a:17:55:5e:a4:79:3c:23:ed:0d:6f:bf:c6:8a:2e:54:a6:42:
         31:4a:d9:29:75:ee:18:dd:33:df:56:9b:86:89:73:c0:fc:d6:
         bc:a6:1e:32:e3:81:3a:da:72:be:09:0b:39:f8:1f:f8:eb:1c:
         9b:af:d4:bd:e3:d6:23:97:70:29:d8:eb:49:e2:fa:83:0a:ce:
         58:d5:08:15:3c:61:4d:26:28:c7:8f:7e:04:94:d7:c6:a6:6c:
         15:94:38:ef:d9:48:9c:4b:1c:e1:d9:c7:19:be:ab:32:2e:bf:
         b8:90:82:7c:ba:8c:18:fc:55:32:53:be:3f:0f:c2:2b:00:40:
         4f:b1:42:2e:f9:55:28:9a:2e:ef:50:09:b7:8f:c7:be:a1:bc:
         27:0f:ef:76:00:41:83:0d:aa:7d:f5:fd:03:f6:0a:7e:5c:d1:
         79:1f:71:ef:ba:6d:0b:39:fa:d6:4d:36:7a:8a:7d:2a:53:08:
         77:09:36:62:e6:94:e9:ee:59:11:b7:42:c6:11:7f:ab:e4:54:
         69:20:2f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----