Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/83bf7b56ec1b2915077c9c78a3144261504e61c1.roa
File:                     83bf7b56ec1b2915077c9c78a3144261504e61c1.roa (raw, json)
Hash identifier:          LmsTtIC7r3UuWVHSx3IthZiP5NAKE3JJxmrgNrzSyzI=
Subject key identifier:   A3:0F:44:E3:5D:8E:50:52:2E:D5:E0:9F:87:BC:96:78:D7:FE:83:16
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       2386F1
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/83bf7b56ec1b2915077c9c78a3144261504e61c1.roa
Signing time:             Thu 14 Sep 2023 20:19:24 +0000
ROA not before:           Wed 13 Sep 2023 20:19:21 +0000
ROA not after:            Sun 14 Sep 2025 20:19:21 +0000
asID:                     202
IP address blocks:        181.193.0.0/16 maxlen: 24
                          181.194.0.0/15 maxlen: 24
                          201.191.0.0/16 maxlen: 24
                          201.192.0.0/12 maxlen: 24
                          200.91.64.0/18 maxlen: 24
                          200.91.128.0/18 maxlen: 24
                          201.237.0.0/16 maxlen: 24
                          45.232.116.0/22 maxlen: 24
                          2803:9b20::/32 maxlen: 64
                          2800:d300::/29 maxlen: 48
                          2001:1330::/29 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328305 (0x2386f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Sep 13 20:19:21 2023 GMT
            Not After : Sep 14 20:19:21 2025 GMT
        Subject: CN=83bf7b56ec1b2915077c9c78a3144261504e61c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:ab:21:38:af:bf:ec:55:60:2e:b4:c3:4f:
                    27:4d:0d:78:7a:58:9c:d0:f7:21:d1:5d:f1:15:e6:
                    c1:f0:55:f5:6a:10:fe:46:e1:9c:54:e3:40:e2:68:
                    18:7e:fa:13:91:a4:e9:33:1f:0c:a3:03:cf:c3:1c:
                    a5:46:2a:08:45:5f:d7:74:f9:ad:51:6b:ba:ed:c5:
                    13:e9:f4:5c:6a:c4:e8:ff:3f:ee:c8:7e:eb:e2:f8:
                    42:05:1a:53:3d:cf:d2:f1:e0:fc:03:cc:d4:c2:37:
                    70:7e:cd:36:59:ca:60:81:92:e6:53:c0:74:c2:77:
                    50:04:fb:af:eb:ac:5e:39:70:d9:99:82:a6:a5:2d:
                    1d:e4:5f:f5:0d:7b:93:a6:ac:26:13:cf:bb:93:c9:
                    f6:d4:39:98:df:cd:d3:b6:71:bd:ba:0a:57:0b:c2:
                    5d:02:d4:c5:78:c9:fe:f8:b9:c0:89:dc:f0:23:be:
                    81:f8:f3:16:c9:8c:86:73:9f:67:df:57:42:d6:5f:
                    cb:d3:b1:73:cb:4e:2c:8d:e4:52:2a:2d:8e:74:4a:
                    44:44:79:88:d7:b9:22:97:af:3c:25:6f:76:22:6e:
                    e1:94:08:30:ec:7e:9a:13:a9:ef:55:a3:3a:49:43:
                    39:3b:44:04:25:01:0b:51:47:f7:62:83:de:3a:6a:
                    11:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0F:44:E3:5D:8E:50:52:2E:D5:E0:9F:87:BC:96:78:D7:FE:83:16
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/83bf7b56ec1b2915077c9c78a3144261504e61c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.116.0/22
                  181.193.0.0-181.195.255.255
                  200.91.64.0-200.91.191.255
                  201.191.0.0-201.207.255.255
                  201.237.0.0/16
                IPv6:
                  2001:1330::/29
                  2800:d300::/29
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:3b:31:b3:ca:5b:2a:1f:9f:59:fc:36:32:aa:1f:39:b7:14:
         1a:56:d5:4d:70:4f:c4:72:1c:89:0c:6e:83:de:92:a9:8b:98:
         d2:f4:f1:d8:0d:53:ff:44:dd:83:86:14:46:8c:1b:68:28:25:
         9c:92:0a:ef:9d:28:16:a6:40:58:4f:54:45:82:62:94:bf:24:
         ef:b7:1f:0a:87:2c:b4:f2:06:2b:83:90:46:27:9c:73:3b:3a:
         ef:ad:75:04:e1:c7:5e:15:86:cd:1c:0d:20:e5:80:c1:33:1a:
         54:e9:24:8e:dc:07:75:bd:c3:0f:61:59:a7:6e:d2:51:42:5a:
         3b:69:48:a0:3d:b6:be:aa:b4:bc:eb:60:c2:08:f4:64:02:ab:
         e1:54:c4:7d:c1:2d:b1:33:a3:e2:9e:3f:86:64:d9:83:60:e4:
         65:1c:81:f0:b6:00:06:ad:64:c7:ae:d8:7c:e5:98:85:c8:3b:
         88:19:86:78:8e:86:0d:4f:80:e0:c4:9c:b6:84:18:d1:ea:cc:
         c9:5a:fe:50:96:9e:cd:a9:46:43:63:51:85:6d:47:71:36:b7:
         bb:85:ac:11:61:eb:3b:09:9d:4d:cf:94:53:90:5c:f5:5d:ea:
         6a:2e:d3:a9:46:dd:d7:8e:75:af:3a:1a:07:91:a5:1a:f9:3c:
         db:09:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----