Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c3d4929f401c5850a68d073a91ee9bc798dd57a3.roa
File:                     c3d4929f401c5850a68d073a91ee9bc798dd57a3.roa (raw, json)
Hash identifier:          Vy3lvpwB2r1ewR7GOHHYlxjRpJYelDFwMzuTetlnY5g=
Subject key identifier:   4C:DA:EB:8B:B3:EB:F8:F0:A0:3B:05:DF:CD:9C:6A:9D:3A:DE:22:02
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       238294
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c3d4929f401c5850a68d073a91ee9bc798dd57a3.roa
Signing time:             Thu 14 Sep 2023 20:19:22 +0000
ROA not before:           Wed 13 Sep 2023 20:19:21 +0000
ROA not after:            Sun 14 Sep 2025 20:19:21 +0000
asID:                     11830
IP address blocks:        181.193.0.0/16 maxlen: 24
                          181.194.0.0/15 maxlen: 24
                          201.191.0.0/16 maxlen: 24
                          201.192.0.0/12 maxlen: 24
                          200.91.64.0/18 maxlen: 24
                          200.91.128.0/18 maxlen: 24
                          201.237.0.0/16 maxlen: 24
                          45.232.116.0/22 maxlen: 24
                          2803:9b20::/32 maxlen: 64
                          2800:d300::/29 maxlen: 48
                          2001:1330::/29 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2327188 (0x238294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Sep 13 20:19:21 2023 GMT
            Not After : Sep 14 20:19:21 2025 GMT
        Subject: CN=c3d4929f401c5850a68d073a91ee9bc798dd57a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:f3:a0:b3:f0:27:92:27:b6:9e:e8:f2:76:
                    42:d8:d2:2c:98:d4:30:d4:82:e0:1e:89:2f:bd:07:
                    e6:c2:fd:61:b3:a6:a3:07:4a:64:57:0d:c6:b4:b0:
                    84:be:01:a3:3b:c0:4c:46:94:da:48:8f:0b:32:3c:
                    31:a9:9c:41:07:b9:4c:69:f0:8a:34:5d:05:7b:73:
                    16:42:44:f3:97:8f:25:93:fd:df:3e:a5:f3:46:5a:
                    19:f6:50:ff:8e:63:cf:5b:47:f2:de:17:9e:3f:a2:
                    93:bc:7f:1d:9c:e7:84:25:1c:65:7c:0f:c9:26:42:
                    7a:f9:88:68:44:71:1d:81:d2:74:88:7e:23:7b:7e:
                    ce:63:3f:da:49:70:63:be:cc:18:f9:fe:4a:fd:a5:
                    74:5a:48:7b:b2:f0:6b:d6:4e:ee:6d:55:d4:81:d6:
                    ed:b0:ae:08:12:86:05:45:1a:bd:cd:01:c5:71:cc:
                    56:6d:c1:f4:3e:25:1e:6e:cc:b6:41:9d:9d:56:e7:
                    9e:74:98:0b:86:56:8e:c3:43:e6:51:b2:c3:d4:bd:
                    6a:62:1a:20:21:de:2a:39:02:2a:75:a7:44:cf:3d:
                    1a:ad:19:23:8f:ab:0d:4f:f9:0c:65:47:53:c9:c3:
                    35:22:6e:b6:63:e7:f4:5e:50:b8:ea:52:38:42:c2:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DA:EB:8B:B3:EB:F8:F0:A0:3B:05:DF:CD:9C:6A:9D:3A:DE:22:02
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c3d4929f401c5850a68d073a91ee9bc798dd57a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.116.0/22
                  181.193.0.0-181.195.255.255
                  200.91.64.0-200.91.191.255
                  201.191.0.0-201.207.255.255
                  201.237.0.0/16
                IPv6:
                  2001:1330::/29
                  2800:d300::/29
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:35:d3:da:37:46:9c:8d:98:10:86:49:9a:f4:8c:5d:ae:da:
         d4:ee:97:64:23:91:fa:6d:67:a5:a1:c6:c5:ef:c2:cb:30:7f:
         10:32:56:1e:20:fe:bd:cb:8c:7f:00:09:c3:7d:58:ec:4d:cc:
         24:57:bf:78:7c:04:1f:44:81:4d:fb:ea:32:92:8e:18:79:9b:
         33:fb:10:76:86:a5:fe:00:bf:0c:9c:a1:eb:e5:5b:ea:7c:e4:
         c4:77:2a:21:cc:38:8a:c6:af:dd:62:f9:d8:c6:fe:ed:4d:ea:
         99:b1:ef:fe:3a:2b:b4:c2:c7:f2:b3:da:e3:cc:3f:79:e6:3b:
         4a:7a:70:ee:03:68:d1:a7:60:2d:16:29:92:1d:97:4b:66:4d:
         55:1a:ea:26:f2:85:b5:79:93:31:75:04:41:a7:48:20:2a:39:
         d8:27:73:c4:bc:65:ee:03:04:1e:16:44:7b:3a:5f:2d:56:77:
         83:c6:ef:7f:9a:f6:c6:a2:22:ee:56:e9:cc:54:21:e8:91:73:
         26:e9:3b:c0:ad:14:ee:0d:17:a8:90:f2:da:0a:15:8a:d6:a9:
         ae:eb:d5:29:c9:45:2b:87:c3:2b:58:94:ad:2b:4b:b9:71:3e:
         bb:24:f8:18:63:19:a0:1f:56:f1:24:c5:22:6f:a7:9c:1a:4d:
         ae:ff:e2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----