Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ba2079e-3c34-44c3-88ed-fed9d05d2ad8/b4422e5eb4761c3147ce7d71346bf2b88dd2acfd.roa
File:                     b4422e5eb4761c3147ce7d71346bf2b88dd2acfd.roa (raw, json)
Hash identifier:          MkOo4JfxUeZH3fBT1EEhCfNnuEioe4cffA4qnzEiuQI=
Subject key identifier:   89:41:9D:7F:E2:74:E2:06:56:A1:5B:E1:94:74:A2:3D:77:D0:6D:42
Certificate issuer:       /CN=a48d42aaaa2f17abc6bd69e654d1317d47c4d12d
Certificate serial:       18673A
Authority key identifier: 4E:8F:F3:7F:72:D2:83:82:4D:25:A9:2C:3E:A8:9C:FE:7F:E3:16:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48d42aaaa2f17abc6bd69e654d1317d47c4d12d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ba2079e-3c34-44c3-88ed-fed9d05d2ad8/b4422e5eb4761c3147ce7d71346bf2b88dd2acfd.roa
Signing time:             Wed 10 May 2023 23:53:31 +0000
ROA not before:           Tue 09 May 2023 23:53:31 +0000
ROA not after:            Sat 10 May 2025 23:53:31 +0000
asID:                     19332
IP address blocks:        200.39.96.0/19 maxlen: 24
                          200.53.96.0/20 maxlen: 24
                          200.13.16.0/20 maxlen: 24
                          200.56.224.0/20 maxlen: 24
                          201.168.0.0/16 maxlen: 24
                          200.53.32.0/19 maxlen: 24
                          2806:21b::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1599290 (0x18673a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48d42aaaa2f17abc6bd69e654d1317d47c4d12d
        Validity
            Not Before: May  9 23:53:31 2023 GMT
            Not After : May 10 23:53:31 2025 GMT
        Subject: CN=b4422e5eb4761c3147ce7d71346bf2b88dd2acfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:a8:be:c4:ad:5c:41:6d:2a:8f:1a:3b:58:
                    05:20:82:c5:ea:f4:2d:ae:b2:8f:3f:7f:3c:57:5b:
                    94:35:f9:bb:a1:b5:fe:8d:fc:8c:d3:1e:ee:6a:c5:
                    18:2a:02:16:73:ce:23:82:6c:8a:51:51:f6:a1:c3:
                    e7:18:cd:20:d0:2e:9a:17:34:ae:97:0c:33:44:64:
                    5b:2d:22:a5:61:a3:51:2a:cb:0d:81:8e:9c:4d:1b:
                    bd:97:4e:9d:35:e7:41:d3:d3:d1:df:9c:a7:6e:8d:
                    e7:ec:41:41:e4:62:47:67:ed:c6:d4:57:88:b2:a9:
                    27:28:8e:9d:6f:af:ba:b0:ff:8c:6a:55:0f:32:bb:
                    45:5a:aa:ac:a1:de:ed:6e:2d:0c:8b:23:33:b7:15:
                    f4:2e:76:f1:c9:9d:f3:90:8f:b4:72:eb:f5:7a:48:
                    0c:ee:91:e6:89:1a:19:9e:01:ca:81:dc:ee:85:32:
                    7e:61:bb:1b:c9:30:a2:0f:67:ff:8a:86:ec:77:5a:
                    f5:b9:77:78:c2:d9:e3:3d:ed:10:e6:bf:54:c3:5c:
                    d7:b9:d1:01:38:49:f1:c3:98:0f:3f:fa:29:ab:42:
                    b4:e4:f6:e1:52:22:23:72:d6:7c:d6:87:5d:48:10:
                    8c:cf:f9:b8:25:1c:72:d0:74:5a:2f:79:cb:04:3e:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:41:9D:7F:E2:74:E2:06:56:A1:5B:E1:94:74:A2:3D:77:D0:6D:42
            X509v3 Authority Key Identifier:
                keyid:4E:8F:F3:7F:72:D2:83:82:4D:25:A9:2C:3E:A8:9C:FE:7F:E3:16:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48d42aaaa2f17abc6bd69e654d1317d47c4d12d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ba2079e-3c34-44c3-88ed-fed9d05d2ad8/b4422e5eb4761c3147ce7d71346bf2b88dd2acfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ba2079e-3c34-44c3-88ed-fed9d05d2ad8/a48d42aaaa2f17abc6bd69e654d1317d47c4d12d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.16.0/20
                  200.39.96.0/19
                  200.53.32.0/19
                  200.53.96.0/20
                  200.56.224.0/20
                  201.168.0.0/16
                IPv6:
                  2806:21b::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ae:76:2f:2e:38:be:5f:6c:cc:2b:b3:7f:be:1f:a9:cc:89:
         bf:2f:52:bd:79:c1:5a:3b:65:11:6e:08:70:d0:28:c0:33:bc:
         c7:02:23:51:62:e5:1d:ee:8a:c4:be:aa:60:e8:83:1a:35:a5:
         57:16:d0:9a:dd:0d:36:fe:79:9a:a2:f6:c6:e6:dd:c7:08:f6:
         c2:9c:bb:8f:91:5d:54:41:d8:44:a6:ad:15:fd:6b:1c:e3:e1:
         2d:d1:2d:ee:0a:c9:09:a5:01:a7:b6:67:53:c2:68:b7:b4:ed:
         e2:62:c1:c9:63:da:6c:1e:4e:b3:51:04:ff:29:4b:e9:f0:6f:
         c7:37:2a:cf:c1:9e:51:ae:08:54:b1:35:c1:97:ee:0a:52:5a:
         ab:3c:55:1d:00:bf:6e:4d:af:43:d4:24:01:ba:98:52:e2:8a:
         c8:07:3e:30:2c:7a:ba:b8:fd:b5:87:4a:47:a9:1a:2d:3e:bd:
         92:91:66:65:e9:1d:9b:12:ce:ef:9b:ba:f9:35:72:c0:0d:25:
         5e:e1:6e:94:19:82:ca:5e:80:a1:4d:14:56:3a:93:6f:19:a3:
         c1:bb:99:60:75:92:0d:0f:8a:4d:43:64:66:eb:1e:5e:d6:f1:
         7f:63:15:98:bf:06:b7:9a:70:bd:d5:a7:01:92:c7:ce:3c:a0:
         5a:85:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----