Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/6b2695475f2b34721e68c0b8ecdb0be2fb7c70f1.roa
File:                     6b2695475f2b34721e68c0b8ecdb0be2fb7c70f1.roa (raw, json)
Hash identifier:          /5NBvwSIVLlcrOFVCwaVJ9OAKmBJceE/mTv1QxgnXcE=
Subject key identifier:   87:B9:A2:CD:16:BA:95:77:03:31:11:93:ED:F1:1D:70:9A:D4:A4:9D
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       238D83
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/6b2695475f2b34721e68c0b8ecdb0be2fb7c70f1.roa
Signing time:             Thu 14 Sep 2023 20:19:25 +0000
ROA not before:           Wed 13 Sep 2023 20:19:21 +0000
ROA not after:            Sun 14 Sep 2025 20:19:21 +0000
asID:                     203
IP address blocks:        181.193.0.0/16 maxlen: 24
                          181.194.0.0/15 maxlen: 24
                          201.191.0.0/16 maxlen: 24
                          201.192.0.0/12 maxlen: 24
                          200.91.64.0/18 maxlen: 24
                          200.91.128.0/18 maxlen: 24
                          201.237.0.0/16 maxlen: 24
                          45.232.116.0/22 maxlen: 24
                          2803:9b20::/32 maxlen: 64
                          2800:d300::/29 maxlen: 48
                          2001:1330::/29 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329987 (0x238d83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Sep 13 20:19:21 2023 GMT
            Not After : Sep 14 20:19:21 2025 GMT
        Subject: CN=6b2695475f2b34721e68c0b8ecdb0be2fb7c70f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d0:0f:56:b7:e6:de:91:a0:1d:31:e1:64:0c:
                    f5:20:d3:10:ff:84:e4:87:4a:5e:81:ed:9e:0d:be:
                    4c:0f:86:e8:78:5e:ad:9e:08:36:9b:01:13:60:a1:
                    dd:48:c3:b2:d1:15:aa:7e:b3:71:99:ae:ef:1d:65:
                    e6:8e:f3:57:7b:fb:f9:4c:1d:31:37:0e:26:5b:60:
                    45:42:43:d5:7c:4b:67:be:54:2d:37:f7:d6:12:b8:
                    3e:c8:49:ae:74:85:7e:d3:75:22:28:6f:43:34:36:
                    b8:26:85:1a:24:d4:b1:ab:14:3a:c2:f7:7e:b0:b8:
                    a2:21:d9:52:7a:38:7b:53:f1:a7:d7:dd:d7:05:53:
                    4c:39:17:78:0b:09:ab:79:60:ff:55:ab:f7:0e:ad:
                    c3:53:1e:f7:7a:23:fb:93:b0:6f:90:9e:18:ef:3e:
                    6b:ae:21:1a:26:e0:d5:7e:6b:2e:a9:1e:d2:b7:bb:
                    54:91:9e:c9:38:db:a4:76:50:de:77:ac:0a:1c:32:
                    b5:21:12:d0:a1:49:2c:2f:2f:ab:aa:ab:76:9b:99:
                    79:70:73:d2:ce:fa:b0:17:5e:fa:92:15:1c:e7:8c:
                    5c:b4:86:01:dc:94:59:67:58:df:ea:5d:33:fa:fe:
                    95:45:ed:e0:fb:ef:7e:55:3e:51:fe:03:27:53:85:
                    10:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B9:A2:CD:16:BA:95:77:03:31:11:93:ED:F1:1D:70:9A:D4:A4:9D
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/6b2695475f2b34721e68c0b8ecdb0be2fb7c70f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.116.0/22
                  181.193.0.0-181.195.255.255
                  200.91.64.0-200.91.191.255
                  201.191.0.0-201.207.255.255
                  201.237.0.0/16
                IPv6:
                  2001:1330::/29
                  2800:d300::/29
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:71:ff:da:ac:22:f3:ee:72:15:73:e4:c2:40:ba:15:77:c6:
         7f:1b:8b:b6:cc:8c:5e:ab:aa:b4:77:b5:4e:d4:1c:f2:48:ab:
         bc:fb:ad:47:f1:a2:a6:dc:2b:65:e2:a0:1d:77:5d:0d:20:ea:
         9c:a8:07:a2:87:26:ed:c2:9f:40:c4:cd:33:bb:84:66:11:db:
         fc:ba:46:b1:9f:e2:77:37:b4:26:b3:f6:6e:2a:70:f3:d8:ed:
         4e:5f:e5:b0:7c:43:ad:59:c9:6d:22:32:37:d5:84:91:f4:e1:
         e2:dc:23:6e:ab:53:6a:c4:4e:d3:b9:ff:19:4c:cd:0d:25:fe:
         dd:51:e6:d6:c3:a3:92:06:8c:88:2e:1d:51:ac:09:fb:39:42:
         67:20:64:6f:f5:c9:67:79:47:b8:42:77:39:e0:3f:a4:3a:ba:
         6f:20:3c:ab:13:ea:cd:a0:b3:b1:ca:bf:18:c6:80:93:f4:6d:
         f6:5a:34:4d:c4:86:43:aa:81:45:93:88:de:3a:77:b7:22:de:
         b8:a7:45:ec:b8:28:20:ea:df:f7:a0:7e:b4:c2:7d:73:87:c2:
         b2:68:78:8c:11:72:2e:69:04:09:4e:9d:61:cb:9d:d0:09:d8:
         81:b7:a1:1a:2b:74:12:d4:44:92:49:e8:1b:e7:82:cb:f0:10:
         09:c4:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----