Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/48200c1a5252da556e597b8642bf1eb8cff6c493.roa
File:                     48200c1a5252da556e597b8642bf1eb8cff6c493.roa (raw, json)
Hash identifier:          P912d2JvJ8yLLacziRTXor+dyDLaYXY3uulcU2MVFxc=
Subject key identifier:   02:80:AC:78:70:3F:19:9C:5B:BE:60:05:6A:64:6E:13:AD:1C:DB:9C
Certificate issuer:       /CN=5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae
Certificate serial:       224E03
Authority key identifier: 75:77:AF:10:66:15:D9:6D:1C:24:42:60:6A:86:60:57:EE:9F:48:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/48200c1a5252da556e597b8642bf1eb8cff6c493.roa
Signing time:             Fri 02 Jun 2023 13:31:07 +0000
ROA not before:           Thu 01 Jun 2023 13:31:06 +0000
ROA not after:            Mon 02 Jun 2025 13:31:06 +0000
asID:                     7049
IP address blocks:        186.0.192.0/18 maxlen: 24
                          2800:630::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248195 (0x224e03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae
        Validity
            Not Before: Jun  1 13:31:06 2023 GMT
            Not After : Jun  2 13:31:06 2025 GMT
        Subject: CN=48200c1a5252da556e597b8642bf1eb8cff6c493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:bd:e4:2b:ba:ce:5d:8d:89:90:de:1c:db:
                    a3:2f:c6:7d:7e:e4:61:62:02:9e:0a:46:dd:2d:51:
                    69:74:50:17:20:49:55:2f:53:07:6a:dd:f8:69:fb:
                    5e:56:0b:c4:50:7e:4b:57:b2:74:21:b3:a6:00:a8:
                    d1:0d:86:06:fc:6d:9f:b5:0b:5c:a8:b3:0c:ea:fc:
                    9b:a6:e4:c9:6e:59:bd:10:8d:8f:46:08:7c:43:5c:
                    fd:78:96:14:a7:f5:36:58:43:7e:23:a5:ff:fe:c2:
                    ea:8e:3a:6e:ae:75:e7:6e:12:72:08:5c:11:a5:9f:
                    e5:bf:45:4b:21:38:a9:cf:ac:ea:56:2f:ba:c7:6d:
                    c1:1a:96:05:63:83:86:4f:a8:bd:f2:68:15:80:8c:
                    f0:98:d5:7b:14:5e:a6:32:33:e4:cd:9f:95:ab:c1:
                    8b:1c:4b:6f:e6:d8:86:d6:87:01:28:39:4e:1d:bf:
                    e0:fd:e2:96:c1:16:fc:a7:28:3d:02:2a:03:5d:c5:
                    54:88:bf:d4:ae:79:e6:9c:c0:db:13:06:ce:3e:03:
                    bd:35:70:d8:bc:a4:66:c8:80:d1:f2:c0:1d:8b:d3:
                    7c:46:91:b5:98:00:c5:78:0e:1a:97:54:de:85:e0:
                    1a:df:19:5f:0e:c6:d6:01:a8:f0:bd:c3:a2:77:f4:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:AC:78:70:3F:19:9C:5B:BE:60:05:6A:64:6E:13:AD:1C:DB:9C
            X509v3 Authority Key Identifier:
                keyid:75:77:AF:10:66:15:D9:6D:1C:24:42:60:6A:86:60:57:EE:9F:48:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/48200c1a5252da556e597b8642bf1eb8cff6c493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.192.0/18
                IPv6:
                  2800:630::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:8d:e9:dd:9e:8a:52:28:5f:b0:a7:17:1d:13:e7:d5:23:
         a4:ba:ec:51:89:ea:f1:53:f0:d3:9b:6c:90:b2:b1:63:6a:ae:
         e1:2f:9a:b5:fe:56:4f:99:df:e8:80:b4:01:78:cc:ac:fc:ef:
         59:92:48:22:b9:11:b5:99:61:89:14:98:5d:ee:d4:bb:4c:f5:
         2b:e2:15:45:fe:8f:a6:fe:7d:e8:6f:08:30:2e:e5:ae:d3:17:
         3d:a5:5f:52:07:e6:6e:3e:28:fd:ed:6b:f0:c6:ce:80:79:e5:
         fc:72:7a:b8:fe:59:c8:a4:91:32:88:cb:47:24:1a:7e:12:4c:
         66:8e:8f:a3:d1:b2:b3:da:49:bf:0e:69:94:4b:b8:58:41:ae:
         aa:eb:0f:18:a7:8f:7b:1e:bf:2e:b1:0a:61:e5:15:23:cc:60:
         48:50:20:b8:11:c6:12:a6:1a:bc:bd:31:99:8f:af:07:be:62:
         38:79:a3:8d:2b:a3:4e:8a:d7:1f:64:7b:0f:4d:3a:a0:0e:6a:
         c2:d6:6f:60:05:bb:70:37:36:bf:bc:00:2c:69:48:fc:16:88:
         fa:50:e6:7f:80:bc:56:df:25:8c:b8:08:9a:4b:7c:57:38:f7:
         1a:18:d4:f4:e5:33:1a:23:32:ed:b3:14:00:10:c9:e8:ae:7f:
         f7:bf:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----