Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/bbca7915661ae338e159cb161c0af6b6ac965f9f.roa
File:                     bbca7915661ae338e159cb161c0af6b6ac965f9f.roa (raw, json)
Hash identifier:          PVjIJphyT/dC8QQvD3gznOyiLiiIEfi8foKaJ74pDEc=
Subject key identifier:   52:E9:3B:79:81:2F:65:9F:2F:B2:17:59:CD:C9:D9:40:76:E1:53:27
Certificate issuer:       /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial:       10EC32
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/bbca7915661ae338e159cb161c0af6b6ac965f9f.roa
Signing time:             Wed 29 Nov 2023 21:55:44 +0000
ROA not before:           Wed 29 Nov 2023 21:55:43 +0000
ROA not after:            Sat 29 Nov 2025 21:55:43 +0000
asID:                     11315
IP address blocks:        200.68.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109042 (0x10ec32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
        Validity
            Not Before: Nov 29 21:55:43 2023 GMT
            Not After : Nov 29 21:55:43 2025 GMT
        Subject: CN=bbca7915661ae338e159cb161c0af6b6ac965f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:55:c3:81:17:1c:bf:94:0a:97:0f:55:bd:d7:
                    a2:9f:52:db:0c:eb:72:5d:39:c4:87:57:be:a2:a1:
                    c2:ce:6f:88:98:4f:b8:47:40:23:9b:29:21:96:c4:
                    3d:c6:c2:a5:f4:93:fa:db:85:cc:fb:ba:91:bd:42:
                    07:8a:da:a7:69:0d:77:14:33:79:e2:c2:b9:e3:d3:
                    63:35:3e:c3:f7:66:88:87:06:43:47:50:5f:46:fc:
                    b7:2c:f1:6e:b2:ee:8e:1e:e3:28:b9:a3:63:61:a3:
                    36:df:8b:53:88:ca:25:94:ff:9f:cd:85:a2:f0:08:
                    84:a3:b9:ef:c7:fb:3d:b0:46:ce:40:4d:94:ad:c5:
                    76:43:26:71:f5:b8:6d:5e:cf:5e:43:e2:96:9d:8c:
                    0d:e3:20:f1:53:4c:61:ed:44:01:3a:46:2b:fd:51:
                    6b:41:71:4b:76:79:fe:51:1a:1e:b6:10:b7:e4:90:
                    4f:8e:81:67:14:6e:75:70:01:00:bb:44:e8:6e:0f:
                    a8:07:d9:95:6a:b9:24:8c:50:cd:58:4d:f7:98:b8:
                    c8:15:e9:f9:28:e0:3a:0a:2b:e0:d8:74:3e:62:f2:
                    68:45:67:cf:b4:53:f4:5a:06:2a:04:3e:fe:39:ab:
                    88:54:bb:33:24:3a:5e:f6:a9:a5:b1:82:bb:eb:c0:
                    a7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E9:3B:79:81:2F:65:9F:2F:B2:17:59:CD:C9:D9:40:76:E1:53:27
            X509v3 Authority Key Identifier:
                keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/bbca7915661ae338e159cb161c0af6b6ac965f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:82:30:1d:ec:67:45:e1:b1:9c:97:ba:3f:1a:ee:b4:05:58:
         e7:01:93:0c:28:6e:4d:21:79:3d:2f:7b:58:b8:5c:eb:da:96:
         6f:49:1b:54:91:51:41:37:55:61:0a:eb:af:30:65:c1:8e:1a:
         d2:ca:d7:4c:59:48:0e:8c:ab:b4:b8:83:54:8b:aa:95:0f:ed:
         5a:38:fb:05:6b:69:49:f2:40:25:36:d3:1b:e7:e6:df:1c:fd:
         10:bc:5b:29:33:07:ce:42:06:a0:e6:f2:91:93:45:65:99:c4:
         a4:32:74:7a:b7:11:38:64:9c:d2:5d:a2:36:ad:14:98:32:e7:
         ec:e2:5e:03:9b:fa:44:7a:ae:23:f4:69:90:74:a5:fc:25:50:
         47:f5:bd:e8:9a:d2:3e:73:cd:5c:e1:91:8d:93:3d:87:57:d3:
         c6:b8:f6:9b:d7:16:fe:c2:d4:82:ec:eb:86:3f:09:64:f8:a2:
         c5:2d:0e:2d:5f:f6:b9:e2:5b:4a:04:a2:03:aa:d6:94:84:48:
         a9:43:72:d6:20:57:22:eb:1a:7c:41:6b:60:09:db:09:1a:a8:
         b8:4e:12:ef:1c:16:c9:dc:15:60:f3:bf:13:e0:bb:4c:ca:68:
         47:06:58:98:81:09:af:13:5d:30:62:d7:9e:5f:c3:79:60:66:
         e6:e8:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----