Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/c4a7a685d5aa1e4c5941a0c0e048fb0a21b4e197.roa
File:                     c4a7a685d5aa1e4c5941a0c0e048fb0a21b4e197.roa (raw, json)
Hash identifier:          n917S+aa6o9MVn+l9w4eX6K3ZLWtJzDrcl+w0ycnSOE=
Subject key identifier:   E7:F3:26:1A:F5:6D:25:E7:8F:9A:EE:E4:CF:B8:D5:CC:37:6D:9C:C4
Certificate issuer:       /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial:       20FB63
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/c4a7a685d5aa1e4c5941a0c0e048fb0a21b4e197.roa
Signing time:             Wed 14 Jun 2023 02:12:26 +0000
ROA not before:           Tue 13 Jun 2023 02:12:26 +0000
ROA not after:            Sat 14 Jun 2025 02:12:26 +0000
asID:                     19905
IP address blocks:        200.31.96.0/19 maxlen: 24
                          190.8.128.0/19 maxlen: 24
                          190.187.0.0/16 maxlen: 24
                          148.102.0.0/17 maxlen: 24
                          2001:1380::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161507 (0x20fb63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
        Validity
            Not Before: Jun 13 02:12:26 2023 GMT
            Not After : Jun 14 02:12:26 2025 GMT
        Subject: CN=c4a7a685d5aa1e4c5941a0c0e048fb0a21b4e197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:ea:51:c5:b5:e3:e1:de:54:50:71:4a:9f:
                    53:ee:da:b1:c5:c8:5d:f0:0c:85:b0:d3:43:40:ae:
                    5c:ed:36:85:14:8f:da:3b:a1:0b:61:18:2e:3e:20:
                    bb:cd:cf:8a:3b:59:38:d0:76:f2:48:45:22:b6:af:
                    06:65:1f:71:f4:2a:13:4f:ca:d5:55:d6:af:0f:39:
                    6f:05:80:b0:36:d3:ef:71:95:e6:e7:21:c6:74:81:
                    48:b1:64:eb:76:15:94:20:cf:f9:dc:ab:ad:6a:0e:
                    08:45:fb:53:c5:a2:45:c9:99:8a:d0:79:56:40:6a:
                    ce:c9:91:b4:bd:2a:db:07:e1:f7:1e:36:a2:05:e1:
                    56:71:d3:a4:6d:92:be:e9:82:bb:59:53:b3:ca:c0:
                    a0:16:61:22:5c:a4:4b:0b:17:89:06:6b:95:72:a9:
                    1b:e1:01:35:1c:1a:3a:ac:eb:4d:14:95:d3:b3:d3:
                    bb:3e:26:cf:19:ca:16:7f:e5:ce:59:c5:5e:d5:2b:
                    6a:40:00:f9:5e:8f:3c:8b:20:21:8d:a6:26:cd:90:
                    11:04:34:32:40:47:ee:e6:8b:09:59:49:a6:eb:e6:
                    c6:ab:aa:01:a1:9a:dc:95:46:6c:77:57:2e:9f:ce:
                    1a:58:80:95:95:3c:d2:00:00:c6:33:8e:8e:1e:79:
                    46:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F3:26:1A:F5:6D:25:E7:8F:9A:EE:E4:CF:B8:D5:CC:37:6D:9C:C4
            X509v3 Authority Key Identifier:
                keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/c4a7a685d5aa1e4c5941a0c0e048fb0a21b4e197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.0.0/17
                  190.8.128.0/19
                  190.187.0.0/16
                  200.31.96.0/19
                IPv6:
                  2001:1380::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:c1:be:c8:0d:ca:cf:31:a6:4d:c3:58:7e:27:2a:03:3f:42:
         18:fb:8b:55:40:3d:cd:25:eb:0d:70:ea:c9:47:c4:42:7d:bd:
         de:56:1b:e8:4a:16:63:9f:32:49:8c:b4:1e:a4:80:3b:23:36:
         0c:1f:c3:15:93:df:88:56:7e:ca:73:92:e4:90:29:22:01:54:
         28:69:74:cb:59:8f:cf:96:c5:35:f1:ab:c0:54:9c:cc:fa:d2:
         5a:4f:db:5d:0a:30:88:d5:2b:b0:4f:f8:0d:82:86:bb:5e:da:
         d6:22:36:1c:57:58:86:2b:14:e7:ea:74:3a:ac:2e:b1:d1:42:
         20:7b:5d:b0:c3:7a:31:1c:4c:d9:50:78:9e:4b:30:f5:6c:a7:
         92:60:ce:f6:85:5b:bd:37:e4:5c:1b:8f:5e:f1:f1:8e:a2:15:
         a0:e3:5a:39:76:4e:b6:7f:fe:97:83:53:6d:81:4e:f5:54:df:
         be:2d:35:5a:1b:43:2b:30:30:b5:c8:6c:14:a5:2d:83:39:b3:
         b0:55:c2:6e:94:70:f7:57:7c:c0:8a:bf:2a:2c:d5:3d:60:aa:
         a4:1c:8d:34:ca:c5:6d:97:18:ee:8a:4c:cd:dd:90:69:a5:a8:
         ca:98:5d:5a:b5:48:37:6b:d4:08:8d:79:69:13:6e:23:b5:c4:
         63:2b:76:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----