Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/070ac88807a3d4574f58e04c26396a90eac14dfc.roa
File:                     070ac88807a3d4574f58e04c26396a90eac14dfc.roa (raw, json)
Hash identifier:          Vfylc2QC2QJvukNW3W+RnKj2syxL30cfYOPLQrRoe4I=
Subject key identifier:   C4:C4:CC:A5:90:99:F3:83:B1:3F:C5:5C:73:78:4D:57:96:B1:42:EF
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       10C2E2
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/070ac88807a3d4574f58e04c26396a90eac14dfc.roa
Signing time:             Sat 27 May 2023 12:40:52 +0000
ROA not before:           Fri 26 May 2023 12:40:52 +0000
ROA not after:            Tue 27 May 2025 12:40:52 +0000
asID:                     834
IP address blocks:        200.26.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1098466 (0x10c2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: May 26 12:40:52 2023 GMT
            Not After : May 27 12:40:52 2025 GMT
        Subject: CN=070ac88807a3d4574f58e04c26396a90eac14dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:5e:5c:91:43:f2:08:55:77:b8:39:98:5e:
                    c4:d9:ed:66:3f:e8:b6:d0:40:d6:e3:6a:e1:fe:fa:
                    67:4d:ca:11:4a:65:4d:c2:ce:f8:cb:44:89:7b:5d:
                    4c:d4:8b:69:81:c2:ba:88:27:2d:6c:4b:aa:3d:82:
                    e8:9a:a5:dc:34:9a:37:34:fd:54:9d:2b:a9:2b:d6:
                    f6:36:aa:16:b2:b1:0f:e4:2e:75:fa:37:23:9b:ea:
                    44:41:36:03:fd:fd:85:bc:50:d0:35:97:f4:64:f5:
                    d6:53:0b:19:01:c6:c3:0d:e0:c5:df:d6:6c:ff:6a:
                    70:81:36:27:75:a3:d1:0c:04:f7:c5:f4:f0:4e:54:
                    92:5a:da:63:5b:36:a1:a3:a3:e2:d4:15:85:79:a8:
                    5b:e7:d9:a9:f5:e2:d5:54:ac:00:8d:3d:4d:c0:40:
                    25:79:5d:d8:a7:fa:8f:9b:35:ef:43:ea:d7:2f:a8:
                    b9:e6:ae:da:96:52:11:d4:a5:33:e8:8a:75:7a:1c:
                    23:66:87:42:4d:02:ff:7c:b5:93:f4:a6:b3:f6:54:
                    a7:c6:35:ff:d1:35:e7:07:b3:ed:23:6b:a4:85:88:
                    30:ad:71:ca:4a:6e:a3:23:9d:1a:a4:c7:1c:2f:f0:
                    74:d4:d9:6d:3c:39:23:25:9b:55:31:e0:33:e3:3c:
                    65:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C4:CC:A5:90:99:F3:83:B1:3F:C5:5C:73:78:4D:57:96:B1:42:EF
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/070ac88807a3d4574f58e04c26396a90eac14dfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:69:9c:24:f2:35:da:de:89:fc:11:4f:40:b3:02:fb:f4:cf:
         d4:83:5e:b4:dd:95:dc:94:77:65:bc:5d:71:6b:d2:12:d0:dc:
         28:cf:60:a0:d8:d5:f8:c1:9e:b1:ee:eb:9c:8c:ff:fe:50:96:
         bc:58:2d:79:69:60:03:16:f1:28:b7:c5:a7:b8:f6:4d:ff:05:
         c1:ed:b9:eb:6c:f8:59:fc:c0:52:3d:62:91:bf:b5:c3:0e:d3:
         26:83:1a:59:ae:16:ea:89:4b:4d:59:2f:7c:ae:c4:f5:b2:9d:
         12:20:14:84:0c:f9:bc:0c:43:01:97:13:d3:1a:b4:73:0a:ed:
         65:7c:ff:e4:fe:6a:10:6a:68:4c:c5:88:d4:2f:5d:60:3d:68:
         97:19:bf:f4:ed:ca:b0:dd:d3:34:7a:44:9b:e3:a1:ee:b2:10:
         4d:24:04:81:0c:30:54:24:4d:69:7d:90:87:c7:41:ff:7d:40:
         41:ad:e2:cd:86:43:e6:78:a2:9b:f2:d7:f0:68:f1:65:b7:be:
         76:3d:a5:74:58:bc:b8:1d:c9:9b:3b:fb:e5:18:b9:fa:0c:d9:
         c7:0d:92:a3:50:6b:c9:61:06:f3:69:40:62:34:10:0c:2b:f0:
         04:b2:86:79:ae:dd:75:b6:22:f0:8b:63:83:3e:2d:03:5a:92:
         6e:57:65:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----