Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95da2d41-a484-4243-8488-6fb016cd12a6/417e718548ce360b0b241761b3331cc0727042ee.roa
File:                     417e718548ce360b0b241761b3331cc0727042ee.roa (raw, json)
Hash identifier:          KjcMKdZrIT6zqGDkU1SCpqTH3f5TUHmCT0OQk92zL7g=
Subject key identifier:   03:27:FD:75:95:F9:46:2A:E6:33:A0:E2:C6:81:A7:66:FB:C5:E9:21
Certificate issuer:       /CN=7808c60ca10489d8d033d16f55a246d49beb0aaf
Certificate serial:       038F
Authority key identifier: E2:E7:CD:95:82:BF:CE:0F:96:3F:9A:A8:5B:9A:01:7F:3D:BD:2B:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7808c60ca10489d8d033d16f55a246d49beb0aaf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95da2d41-a484-4243-8488-6fb016cd12a6/417e718548ce360b0b241761b3331cc0727042ee.roa
Signing time:             Sat 22 Oct 2022 15:42:11 +0000
ROA not before:           Fri 21 Oct 2022 15:39:06 +0000
ROA not after:            Tue 22 Oct 2024 15:39:06 +0000
asID:                     262238
IP address blocks:        200.115.179.0/24 maxlen: 24
                          2801:0:310::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7808c60ca10489d8d033d16f55a246d49beb0aaf
        Validity
            Not Before: Oct 21 15:39:06 2022 GMT
            Not After : Oct 22 15:39:06 2024 GMT
        Subject: CN=417e718548ce360b0b241761b3331cc0727042ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2c:95:7e:e6:ae:68:8f:f3:64:1a:d6:e8:37:
                    4a:6a:85:ce:dd:c8:bb:69:2d:cd:20:6f:4d:f9:92:
                    3a:ff:e2:9e:ff:33:53:d4:11:dc:90:c2:75:72:c1:
                    2f:c1:b5:44:df:da:39:5b:f4:70:72:88:c7:59:c1:
                    3f:cc:ad:86:9b:d4:dd:80:5f:75:63:c7:11:38:5d:
                    2e:2c:38:4f:19:43:00:59:6d:0d:69:67:f8:fb:e5:
                    cb:0c:e2:cf:45:35:9e:b9:3f:82:9f:de:f2:35:f3:
                    58:fd:34:a9:86:16:e8:68:07:09:98:b7:1f:af:64:
                    9e:08:13:cf:16:ea:eb:cd:3b:a6:7a:1d:ee:f9:32:
                    95:e1:49:c6:3d:f1:8a:24:c9:b8:ca:85:e2:7c:29:
                    94:0a:c0:a8:cc:ac:3e:79:08:7a:4c:00:10:38:a4:
                    be:43:cc:3e:af:a5:0f:07:60:0b:34:28:09:39:4e:
                    53:ff:e2:a9:93:c8:b3:c5:9e:41:ee:4e:ec:b7:69:
                    f6:cb:98:47:9c:06:af:f6:8a:cc:70:b4:27:7b:9e:
                    62:93:a7:1e:20:8b:d6:94:74:e0:f4:21:fb:27:85:
                    80:69:55:06:82:81:ee:85:02:0e:f8:29:6c:4f:2f:
                    86:e7:d1:87:71:85:7c:2a:07:96:b2:85:30:e5:e0:
                    15:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:27:FD:75:95:F9:46:2A:E6:33:A0:E2:C6:81:A7:66:FB:C5:E9:21
            X509v3 Authority Key Identifier:
                keyid:E2:E7:CD:95:82:BF:CE:0F:96:3F:9A:A8:5B:9A:01:7F:3D:BD:2B:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7808c60ca10489d8d033d16f55a246d49beb0aaf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95da2d41-a484-4243-8488-6fb016cd12a6/417e718548ce360b0b241761b3331cc0727042ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95da2d41-a484-4243-8488-6fb016cd12a6/7808c60ca10489d8d033d16f55a246d49beb0aaf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.179.0/24
                IPv6:
                  2801:0:310::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:da:bd:53:c0:c1:5d:8c:75:fe:08:e5:4f:c7:76:e4:2d:8f:
         9b:80:33:6f:c8:ec:60:6f:5b:11:46:3b:cf:46:f7:3d:09:21:
         91:d2:32:a7:f1:c6:97:0d:c7:fe:16:e8:bb:d0:82:a0:94:ff:
         f6:c3:59:5a:ca:c3:0b:ab:16:2a:3f:fe:a0:7d:31:ac:c3:ee:
         e3:f9:84:fe:c0:61:1b:92:f8:fa:5f:fc:04:67:4c:bf:1e:00:
         54:5e:bf:af:9d:f1:ce:c5:f7:e6:d2:b3:5a:91:ac:e7:27:2f:
         57:24:62:93:44:ca:dc:04:2d:3c:1d:9d:4a:7b:00:5f:9c:d5:
         ec:13:d1:a8:c3:f1:c2:81:ce:c4:f6:29:51:44:51:93:0f:d1:
         52:39:4d:cf:9e:ec:77:52:91:77:df:69:4e:86:c6:74:a0:8d:
         11:38:62:28:f9:7d:20:c5:23:00:b9:44:44:a1:ff:06:8b:2d:
         d0:d3:d2:92:29:e4:20:df:56:2d:d9:2e:e1:db:0b:f8:fa:92:
         3f:76:8e:0f:db:85:37:a6:ed:c4:00:df:fe:ac:db:86:97:96:
         0b:c5:97:7a:e2:b3:a5:9c:02:08:8d:4b:84:e0:6d:47:95:7e:
         bc:47:58:0b:ad:57:67:f9:76:99:a2:19:7e:b8:75:4e:a2:e8:
         2b:4a:a6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----