Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5c755a3d14bf9649eb8dd0119045419e63280aa0.roa
File:                     5c755a3d14bf9649eb8dd0119045419e63280aa0.roa (raw, json)
Hash identifier:          3OQ9iXRXo90wLzN0kt53KiQcFErai3FbtjOzAES9npM=
Subject key identifier:   13:E8:B0:90:1F:29:E2:FA:9F:83:DE:89:13:94:3B:2C:FB:F4:7E:A9
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       20FCE4
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5c755a3d14bf9649eb8dd0119045419e63280aa0.roa
Signing time:             Mon 12 Jun 2023 15:18:25 +0000
ROA not before:           Sun 11 Jun 2023 15:18:25 +0000
ROA not after:            Thu 12 Jun 2025 15:18:25 +0000
asID:                     27789
IP address blocks:        201.221.69.0/24 maxlen: 24
                          201.221.72.0/21 maxlen: 24
                          201.221.80.0/22 maxlen: 24
                          201.221.84.0/23 maxlen: 24
                          200.12.240.0/21 maxlen: 24
                          201.221.93.0/24 maxlen: 24
                          201.221.94.0/24 maxlen: 24
                          190.93.0.0/19 maxlen: 24
                          201.221.64.0/22 maxlen: 24
                          2800:70::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161892 (0x20fce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Jun 11 15:18:25 2023 GMT
            Not After : Jun 12 15:18:25 2025 GMT
        Subject: CN=5c755a3d14bf9649eb8dd0119045419e63280aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:f7:0b:5e:76:3b:72:fd:ae:b5:65:a0:5f:
                    21:bf:7f:a4:d5:fc:43:93:2f:8d:73:04:46:04:3f:
                    e6:bf:50:4e:0f:99:c3:40:00:52:97:39:cf:bb:c9:
                    e3:89:03:de:4b:78:6a:b7:89:75:a6:9c:f8:02:47:
                    4f:16:b9:11:41:e2:a5:5d:f6:64:16:bd:87:44:76:
                    36:59:10:06:7f:a9:14:73:85:9b:40:db:fe:8f:63:
                    91:f1:ac:1d:a2:46:8d:50:7a:5e:73:cc:48:c8:52:
                    ea:36:44:92:a6:2b:ee:e7:9d:4f:6d:44:8b:36:f5:
                    8f:6e:c1:3b:b0:f3:47:e9:6b:97:e4:28:47:1d:ff:
                    90:58:ff:1c:c7:a8:1d:d6:30:21:98:0f:b0:e4:f4:
                    ef:55:ce:83:18:9e:d8:9d:7f:c6:76:77:ef:27:dd:
                    11:3f:a9:15:d5:e1:b0:8f:03:87:a3:43:0b:37:c4:
                    73:0f:61:75:ea:ed:31:4b:97:e7:de:f2:13:1b:55:
                    ed:d4:28:8e:71:89:cf:16:91:70:e5:a4:c5:28:76:
                    cb:f3:1d:57:fd:95:e9:cc:83:9a:42:07:e8:95:53:
                    d2:62:de:ce:a2:7d:83:06:9d:0b:1a:9f:60:88:6b:
                    a7:f3:21:4c:fa:55:dd:66:fd:c4:7d:56:a3:ac:3c:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E8:B0:90:1F:29:E2:FA:9F:83:DE:89:13:94:3B:2C:FB:F4:7E:A9
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5c755a3d14bf9649eb8dd0119045419e63280aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.0.0/19
                  200.12.240.0/21
                  201.221.64.0/22
                  201.221.69.0/24
                  201.221.72.0-201.221.85.255
                  201.221.93.0-201.221.94.255
                IPv6:
                  2800:70::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:c8:c0:9c:06:2b:b5:8d:3e:90:5a:6e:b9:9b:6f:d5:9e:ec:
         49:54:1e:33:df:74:b7:55:68:1a:62:2b:eb:15:08:39:5b:14:
         82:5c:20:e4:41:a2:39:45:9b:40:d2:2f:35:4f:8f:3d:02:90:
         2e:4e:60:26:75:b9:b8:d6:c2:f2:4e:90:98:4b:1d:c8:9d:d5:
         2d:5f:c3:df:ed:fb:01:82:78:e7:3a:be:b8:71:40:d5:f4:9d:
         aa:2e:ea:e2:4e:de:45:aa:cc:59:ea:b3:a7:39:3a:66:e5:ea:
         65:db:54:9e:19:98:2b:3c:f6:6d:15:36:20:9d:12:ce:74:cb:
         a3:fa:25:ce:6b:c5:77:47:27:64:6a:bb:b4:0c:24:cb:83:87:
         2b:0b:b8:e3:60:cd:e3:16:8e:e2:11:37:2d:4b:78:bc:2e:cf:
         67:e9:e0:c8:f4:a7:be:fb:ee:37:3b:a2:57:f8:c9:4a:9a:50:
         01:3a:46:72:fd:70:e0:d1:90:67:1a:f3:89:60:1e:36:d3:e9:
         1f:9c:5f:35:d3:5d:8c:eb:5d:0b:0b:c5:97:a7:49:5d:b3:fa:
         d1:1a:a9:17:db:20:d4:33:6e:a8:54:44:10:5b:15:c5:b5:07:
         07:46:70:2e:ed:01:73:02:dd:7b:c1:19:d3:c8:a8:65:77:01:
         b5:2e:4b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----