Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/9c366147f458b4fb01b4050c28225fb12e5829b6.roa
File:                     9c366147f458b4fb01b4050c28225fb12e5829b6.roa (raw, json)
Hash identifier:          2Y9xnyAKbDjNMNFjItB1mQgJSAOYjyL7K0kqrtBCWdU=
Subject key identifier:   C1:5B:9C:BE:EA:40:69:79:8E:74:D6:2E:32:CC:E7:7D:E5:6E:21:09
Certificate issuer:       /CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Certificate serial:       2432A7
Authority key identifier: FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/9c366147f458b4fb01b4050c28225fb12e5829b6.roa
Signing time:             Mon 11 Sep 2023 19:17:43 +0000
ROA not before:           Sun 10 Sep 2023 19:17:43 +0000
ROA not after:            Thu 11 Sep 2025 19:17:43 +0000
asID:                     10617
IP address blocks:        200.81.160.0/19 maxlen: 24
                          200.81.176.0/21 maxlen: 23
                          200.81.184.0/22 maxlen: 23
                          200.69.32.0/21 maxlen: 24
                          200.69.32.0/19 maxlen: 24
                          200.69.44.0/22 maxlen: 23
                          200.69.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2372263 (0x2432a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
        Validity
            Not Before: Sep 10 19:17:43 2023 GMT
            Not After : Sep 11 19:17:43 2025 GMT
        Subject: CN=9c366147f458b4fb01b4050c28225fb12e5829b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6c:79:df:a8:ac:23:f9:43:18:b8:77:c1:f2:
                    03:7e:70:b2:e6:46:4c:1d:d3:d5:dc:61:3b:cc:d0:
                    72:f5:cf:ff:2a:b4:18:39:d8:8c:1d:b3:d5:f7:ee:
                    9d:47:93:33:f7:ce:16:01:84:3b:b3:21:de:aa:4d:
                    85:78:8b:78:5c:e6:96:82:ee:01:cf:df:24:91:f4:
                    02:87:05:05:e0:d3:41:12:cf:1c:3a:a2:1c:c4:03:
                    bb:7d:2d:b1:ed:87:fc:a5:a3:32:fa:c8:d7:ca:ab:
                    08:48:14:32:69:40:45:07:1b:2d:d7:c2:20:e1:5f:
                    70:74:1c:01:f5:23:32:09:0d:70:dd:15:6f:65:c4:
                    28:86:b8:74:61:98:8e:b3:06:19:f6:75:75:40:58:
                    8f:28:9f:9c:ed:b7:07:ff:6e:4b:65:12:4b:a5:c7:
                    35:cf:09:1e:0e:a9:bc:23:99:80:e4:3e:14:b1:eb:
                    06:a4:fb:b1:e5:1f:9e:7c:20:5e:b4:25:33:2a:b0:
                    d3:9e:32:a7:cc:8c:86:77:95:14:53:50:25:02:20:
                    84:6d:53:71:70:01:c1:7a:f3:64:3c:bc:52:1e:4c:
                    7b:13:05:3c:25:c9:4d:3c:cd:fe:f7:aa:3d:68:82:
                    16:30:b0:e4:de:e4:5d:e8:29:b2:49:6a:66:19:25:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5B:9C:BE:EA:40:69:79:8E:74:D6:2E:32:CC:E7:7D:E5:6E:21:09
            X509v3 Authority Key Identifier:
                keyid:FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/9c366147f458b4fb01b4050c28225fb12e5829b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.32.0/19
                  200.81.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:39:c0:39:43:ab:46:1a:da:94:31:2c:6e:7e:09:8b:7d:bd:
         a2:6f:fc:ee:01:51:2d:a7:6e:a1:55:8c:a6:f5:bb:d6:1e:3b:
         32:6f:44:59:ce:65:1a:90:3f:23:0e:ab:e6:15:83:60:0d:62:
         7c:ee:be:f3:98:a1:9f:e1:ee:66:2c:44:8e:27:fc:37:aa:dd:
         5b:3a:35:0a:bd:4c:c1:f7:6c:ee:21:bf:6e:07:67:9c:ad:a6:
         56:ca:97:5d:20:6c:1f:1a:e1:ba:9b:49:69:23:93:8a:c6:5b:
         cf:09:6c:05:96:c6:75:82:65:45:70:f4:00:0c:1c:19:33:7e:
         7b:a3:54:e9:cc:96:24:88:7e:ce:c3:a0:fa:61:a0:63:0f:63:
         29:3c:41:6f:a5:48:28:57:43:48:fd:78:99:8c:2e:d7:3b:aa:
         bb:59:0d:ae:f0:38:10:6e:c2:59:3f:c6:3c:0c:cd:f9:8c:40:
         81:66:7a:82:13:db:7d:92:dd:1b:72:ff:07:83:36:55:78:29:
         b7:0e:23:e0:c5:19:8f:cf:37:cc:51:a4:e3:ab:18:8d:dd:99:
         a8:e0:2a:17:9e:a7:0e:df:70:d9:22:cb:ec:e2:b6:1f:12:73:
         46:c7:2a:de:84:0f:bd:2e:9f:57:0b:be:3a:78:69:a9:0d:15:
         fa:d8:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----