Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/e82c281a2e3e025016894fcb9d9e1ae3dab8acc5.roa
File:                     e82c281a2e3e025016894fcb9d9e1ae3dab8acc5.roa (raw, json)
Hash identifier:          yYG7u2SvjTHoxr3xD+iKlc1N/oKihpB0925axB/rjHs=
Subject key identifier:   BD:EF:91:49:C0:DE:B8:A4:7E:97:DF:AB:12:01:AD:D9:96:83:53:E8
Certificate issuer:       /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial:       0B5BDC
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/e82c281a2e3e025016894fcb9d9e1ae3dab8acc5.roa
Signing time:             Mon 24 Apr 2023 18:42:15 +0000
ROA not before:           Sun 23 Apr 2023 18:42:15 +0000
ROA not after:            Thu 24 Apr 2025 18:42:15 +0000
asID:                     11315
IP address blocks:        200.68.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744412 (0xb5bdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
        Validity
            Not Before: Apr 23 18:42:15 2023 GMT
            Not After : Apr 24 18:42:15 2025 GMT
        Subject: CN=e82c281a2e3e025016894fcb9d9e1ae3dab8acc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:fc:8a:7a:9c:68:0f:e2:1f:55:03:63:67:
                    1c:c9:92:53:38:4a:62:68:b2:fb:60:3a:55:71:d9:
                    f9:fa:98:9e:39:fe:dc:d4:8a:91:19:c5:32:e4:f3:
                    23:da:d9:9c:1a:da:8a:0e:25:21:00:5b:c0:72:f1:
                    b9:cd:7e:d8:94:d4:95:4b:ea:ac:e7:ff:8f:94:da:
                    d2:56:da:3b:b7:11:65:46:87:12:c4:ab:d8:04:d1:
                    ba:1c:4d:5e:f2:04:9a:3f:bc:ae:6d:3e:be:3d:8f:
                    5f:78:f5:f4:a9:b5:96:29:5a:ab:a0:d9:91:a1:9c:
                    ab:6c:0e:b7:f1:a9:a0:0f:8f:22:32:76:07:29:38:
                    a1:14:01:27:e0:84:50:c9:a4:7d:4f:5c:97:fe:b9:
                    31:61:33:c1:af:a2:d6:a6:bb:88:e1:36:7d:00:fa:
                    b7:58:42:c0:56:83:a3:5d:d6:60:80:b6:89:32:ca:
                    0f:61:a1:ea:57:72:f0:8a:dd:58:4d:03:22:1f:8c:
                    de:53:69:36:75:db:d4:2e:85:50:ca:f4:c7:65:44:
                    c2:99:df:6a:aa:a7:a4:35:fc:78:62:c8:ac:13:f1:
                    82:50:14:4b:00:c4:fd:df:c1:64:c2:c7:61:a1:43:
                    a0:aa:96:0d:97:1d:0a:9f:bf:f1:e5:80:e1:6c:d6:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EF:91:49:C0:DE:B8:A4:7E:97:DF:AB:12:01:AD:D9:96:83:53:E8
            X509v3 Authority Key Identifier:
                keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/e82c281a2e3e025016894fcb9d9e1ae3dab8acc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:b5:44:1e:28:c7:87:4c:1b:19:71:b2:4a:39:b0:f3:ef:
         88:7c:67:f7:21:6a:5d:60:c5:87:d5:ab:d7:76:5d:a9:77:6c:
         30:f3:cc:95:f3:cf:9a:ea:ca:74:2a:8f:95:28:cf:6c:f0:2c:
         31:19:95:c6:f5:bd:fc:03:eb:61:47:90:76:3c:a1:de:32:e4:
         7e:97:8d:6b:93:1f:29:64:74:09:5c:97:a6:a9:9c:78:89:17:
         c7:d7:1b:8b:63:0d:4d:a0:ad:e1:bc:06:28:7e:bb:50:17:8d:
         c7:e3:b1:65:b5:3b:ce:bc:59:88:14:7b:d3:76:30:ba:7f:73:
         b4:f4:ea:59:00:be:1f:78:e7:1a:cb:8b:87:81:8c:ef:e7:fd:
         bd:52:df:53:fc:db:3d:b5:bc:4a:0e:bc:2e:e3:d4:fa:5e:0f:
         f2:36:23:17:51:70:07:8d:fd:60:c4:3e:6f:41:66:40:78:50:
         c3:25:a7:b3:99:27:93:8d:30:1a:38:c0:69:48:e7:1a:40:59:
         d3:85:a6:d4:48:03:db:78:97:ee:b9:48:16:8a:6b:29:df:62:
         ad:f4:9e:bd:af:7f:0c:2f:fe:ec:33:88:87:9c:73:c5:95:9d:
         d8:84:4d:32:dd:fb:34:d9:fa:15:89:69:f0:f5:78:04:b2:66:
         ec:dd:b4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----