Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/4214b4006b150007e4466987464eb4b98dc22e91.roa
File:                     4214b4006b150007e4466987464eb4b98dc22e91.roa (raw, json)
Hash identifier:          QfrnlqCvkmNjmM/tef/lxjMSkWkDAnuV023dHUamzrk=
Subject key identifier:   5A:44:9F:68:E2:1C:DA:31:0A:60:AA:C0:05:11:98:F9:48:CF:98:4D
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       1987A1
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/4214b4006b150007e4466987464eb4b98dc22e91.roa
Signing time:             Mon 12 Jun 2023 08:42:23 +0000
ROA not before:           Sun 11 Jun 2023 08:42:21 +0000
ROA not after:            Thu 12 Jun 2025 08:42:21 +0000
asID:                     270066
IP address blocks:        200.219.4.0/22 maxlen: 22
                          2803:5ce0::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673121 (0x1987a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Jun 11 08:42:21 2023 GMT
            Not After : Jun 12 08:42:21 2025 GMT
        Subject: CN=4214b4006b150007e4466987464eb4b98dc22e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:24:1d:45:d9:37:1f:c3:b6:80:a1:6e:f6:b3:
                    7f:aa:f2:a2:8d:3a:d5:37:26:0e:7f:89:fa:35:f2:
                    bd:c2:84:6a:73:49:67:7b:0c:07:85:0a:2a:f9:98:
                    27:ab:7e:c7:9e:91:22:e3:d3:a1:8a:df:9c:c6:01:
                    d5:9d:5d:91:8f:8e:5c:ba:13:b7:14:cd:b0:6d:1b:
                    8c:f8:a3:4f:97:68:c1:5f:1c:b5:45:63:55:9f:1a:
                    e7:be:16:2a:7d:99:40:b8:ac:e9:70:bd:93:64:bb:
                    5c:9e:59:7a:7a:fb:89:fc:e6:f1:56:ed:a3:12:e9:
                    04:cb:18:9e:70:19:e7:f9:16:29:1d:a4:38:4b:98:
                    ef:99:02:d7:5e:0e:b0:f4:d8:50:25:d9:e5:37:0e:
                    58:4f:6f:25:0d:14:18:be:cd:6d:bf:45:be:f3:dc:
                    b9:1e:b2:66:d5:9e:96:dc:fa:53:7d:20:56:9b:bb:
                    1f:5f:d3:81:8f:0a:6b:1f:16:24:08:10:54:72:03:
                    85:73:08:1f:45:9b:d9:37:55:4a:ec:94:02:f1:d1:
                    84:47:c1:ed:41:9a:84:42:bd:38:50:ba:89:41:d6:
                    5e:dc:d3:40:ca:55:cc:a3:83:4c:e5:f0:80:1a:bf:
                    7f:0d:ae:e7:9b:61:4e:8b:d5:ab:f8:b0:40:e7:39:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:44:9F:68:E2:1C:DA:31:0A:60:AA:C0:05:11:98:F9:48:CF:98:4D
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/4214b4006b150007e4466987464eb4b98dc22e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.4.0/22
                IPv6:
                  2803:5ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:60:65:68:38:51:4f:e7:47:7a:96:fc:1f:56:20:c7:2c:19:
         56:2a:1f:c5:7d:61:ef:c6:ec:84:d7:f1:cc:65:71:18:1b:c9:
         55:07:4d:46:70:40:6d:ea:ef:7e:d1:a0:55:fb:68:5c:01:24:
         b2:63:e4:d9:bd:f8:a1:67:c8:cc:36:00:8e:63:89:18:fa:06:
         cc:c4:55:d6:53:ea:cc:7a:eb:04:77:03:f6:35:87:81:bf:e8:
         d8:70:f4:b2:a3:c0:1e:a5:b7:e1:9e:f2:2d:de:3d:5b:5b:bb:
         3c:52:7e:36:f1:8b:67:80:9b:8c:8e:d0:7b:17:71:2e:0c:3e:
         34:61:a6:97:45:20:3c:07:6d:cb:1f:88:d4:97:53:12:25:2b:
         bc:0c:d3:57:c9:b7:9a:38:7c:57:e2:cd:31:ce:08:7d:c7:b2:
         b8:21:a1:e3:21:37:f1:8b:d3:02:e3:95:4f:e2:e9:44:9a:da:
         41:9a:af:c8:32:a6:2a:5f:ce:2e:1a:c5:db:e0:8e:bf:86:a9:
         e5:aa:87:1e:9f:dc:f5:e4:5f:61:da:dd:ae:a0:8e:37:c2:ac:
         7f:55:9f:57:aa:ef:21:50:1a:ce:8b:9b:00:1e:37:93:ba:dc:
         0d:cf:ea:20:e4:de:6c:11:9b:25:21:16:6a:ed:8c:db:2b:6b:
         79:99:93:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----