Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/dfb23d6c6ee498ee04faed165dc24f93b334c41d.roa
File:                     dfb23d6c6ee498ee04faed165dc24f93b334c41d.roa (raw, json)
Hash identifier:          RDH4MQmftRXt8S0SkRrQqpysyUdAJuPRJt1prE2P+xk=
Subject key identifier:   6A:AA:35:6D:D3:F9:E9:C0:E6:A1:2C:76:8B:42:F0:DA:92:21:F9:C9
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       09E5FC
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/dfb23d6c6ee498ee04faed165dc24f93b334c41d.roa
Signing time:             Mon 12 Sep 2022 08:30:00 +0000
ROA not before:           Mon 12 Sep 2022 08:30:00 +0000
ROA not after:            Wed 11 Sep 2024 08:30:00 +0000
asID:                     271799
IP address blocks:        200.26.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648700 (0x9e5fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: Sep 12 08:30:00 2022 GMT
            Not After : Sep 11 08:30:00 2024 GMT
        Subject: CN=dfb23d6c6ee498ee04faed165dc24f93b334c41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:b5:4f:07:ad:d9:06:9a:2c:ee:d5:f4:77:
                    72:f5:7a:d3:91:4a:54:82:5a:bc:36:ab:72:b4:06:
                    8e:ee:96:94:b2:73:54:5d:fa:f6:fd:d0:e9:84:c1:
                    a1:ec:eb:fb:ec:73:c3:d6:dc:fe:2b:26:69:2a:06:
                    7e:ef:03:ca:3e:e8:72:d9:db:9d:c0:67:22:82:8b:
                    ad:f0:c4:80:1e:bb:cb:59:df:62:c4:53:6d:c1:29:
                    e8:50:c3:6c:41:80:ea:af:1a:3e:1f:ab:ef:4d:57:
                    4d:ad:9f:a5:a8:93:9f:4e:5c:91:43:69:50:77:e3:
                    9a:a6:89:91:cd:85:8d:23:1d:c0:ce:dc:63:af:bb:
                    50:56:8b:9f:24:a5:d8:1b:e5:f7:2f:22:39:b0:b0:
                    a9:c3:d0:13:a4:37:17:82:69:5c:e2:b2:a6:f4:d1:
                    60:a4:5a:ed:54:f3:e2:c8:fc:41:98:dd:6d:53:d2:
                    e2:4a:40:29:7a:6e:ed:07:ff:93:26:5c:d5:6a:f4:
                    e2:6d:0c:0f:f7:c8:eb:b2:88:d4:42:31:59:72:86:
                    66:48:46:e7:05:33:c5:33:fc:1d:1c:0c:d1:93:ad:
                    1c:29:00:41:79:c9:70:94:71:17:ab:da:2e:99:74:
                    3c:7d:da:de:ea:3d:e4:99:d8:67:3b:71:5f:5f:e7:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AA:35:6D:D3:F9:E9:C0:E6:A1:2C:76:8B:42:F0:DA:92:21:F9:C9
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/dfb23d6c6ee498ee04faed165dc24f93b334c41d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:1e:3d:87:84:13:ce:7f:96:86:c1:65:38:46:ea:e0:3d:
         c2:44:67:31:f7:b4:01:74:e3:30:3a:be:34:32:58:12:8b:9d:
         b9:c8:09:7d:43:ec:33:3d:e0:41:c5:99:13:87:82:95:7a:9f:
         0b:d2:19:24:a3:e0:2a:93:5f:97:f1:17:3d:96:34:b9:64:45:
         b3:90:76:4b:dd:c2:09:6c:d9:ad:86:10:e5:76:5e:64:8c:9a:
         8c:44:b5:d9:3b:87:93:72:74:63:b4:f6:bd:92:38:2a:c5:f5:
         0c:c1:c8:94:f9:5a:78:91:6e:f2:bf:00:0b:80:3b:a1:03:87:
         54:4c:f2:91:fc:ac:b5:21:76:51:88:bc:08:51:bf:e3:48:96:
         8e:af:95:ef:c7:f5:39:91:e6:d3:30:71:c9:f5:01:52:a6:72:
         1f:ce:3d:d2:9b:36:39:9b:c0:92:b3:e6:07:5a:1b:21:b5:55:
         4c:c6:ba:b5:55:4b:73:c6:c3:6a:43:31:56:73:3c:44:ff:a2:
         2c:af:4f:1a:64:38:3f:10:59:95:88:66:7d:5c:0c:fe:83:76:
         a0:28:f3:fb:06:ea:af:86:ca:13:2c:e2:13:27:57:72:fc:54:
         28:ea:ca:82:59:13:86:8f:22:d5:c9:4d:79:03:f0:d1:73:d3:
         f8:30:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----