Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/42b09d18a85579838b733fe249836aa1103670df.roa
File:                     42b09d18a85579838b733fe249836aa1103670df.roa (raw, json)
Hash identifier:          QXZmuB5SAjvAZrcsZK39Xs9NYOSxmUqgN6dbDhV1gF0=
Subject key identifier:   73:E7:E0:A9:4A:44:29:86:7E:05:57:80:75:95:49:11:B6:5C:3D:BD
Certificate issuer:       /CN=4d6514d89948e6d41988b60c1228765a24fd7536
Certificate serial:       22CC11
Authority key identifier: BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/42b09d18a85579838b733fe249836aa1103670df.roa
Signing time:             Thu 17 Aug 2023 02:08:34 +0000
ROA not before:           Wed 16 Aug 2023 02:08:32 +0000
ROA not after:            Sun 17 Aug 2025 02:08:32 +0000
asID:                     263242
IP address blocks:        200.12.248.0/24 maxlen: 24
                          200.12.250.0/23 maxlen: 24
                          200.12.252.0/23 maxlen: 24
                          200.12.254.0/24 maxlen: 24
                          2803:1180::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2280465 (0x22cc11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6514d89948e6d41988b60c1228765a24fd7536
        Validity
            Not Before: Aug 16 02:08:32 2023 GMT
            Not After : Aug 17 02:08:32 2025 GMT
        Subject: CN=42b09d18a85579838b733fe249836aa1103670df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f5:fd:12:dd:80:f2:0f:08:78:ee:60:49:8f:
                    28:00:c0:a4:4e:ff:61:84:6f:2b:95:46:13:a1:c3:
                    43:ed:55:0e:1d:4f:42:21:25:5a:10:7f:c0:31:7c:
                    a3:6e:28:70:c8:85:ad:c0:de:ab:0d:29:a5:0b:b4:
                    d7:e8:46:d6:42:06:3c:11:80:5f:a7:a3:6d:e2:1f:
                    18:8a:5b:33:45:6d:57:f4:ad:b5:0e:d9:40:15:a3:
                    44:be:78:09:2c:b4:0c:c0:ac:a5:0c:4c:d2:d5:66:
                    0b:27:2f:53:21:eb:48:d0:ec:61:0b:8b:fd:f8:44:
                    37:11:47:4d:fa:d6:0a:0d:22:78:9e:eb:31:ba:0f:
                    2f:5b:e7:a5:55:02:08:e4:9a:30:8e:53:7c:c6:0f:
                    ed:60:b2:9f:5d:e8:27:83:69:6a:4a:2e:e7:69:e3:
                    f4:1f:fa:4e:af:27:ec:cb:83:1f:4b:9a:7c:a0:23:
                    ea:c8:eb:6f:4b:8d:e0:2b:65:61:97:d1:75:ab:8f:
                    94:86:e5:33:ed:50:f2:38:7e:89:e3:59:ec:18:86:
                    39:ee:19:13:f3:84:73:a9:c7:ea:e4:db:37:15:d9:
                    48:98:1e:ac:fa:dc:0d:d9:8f:24:af:f6:bc:a0:9b:
                    7e:a4:e1:a6:bd:7b:ef:ea:cd:74:e3:0f:2e:85:e0:
                    a0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E7:E0:A9:4A:44:29:86:7E:05:57:80:75:95:49:11:B6:5C:3D:BD
            X509v3 Authority Key Identifier:
                keyid:BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/42b09d18a85579838b733fe249836aa1103670df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.248.0/24
                  200.12.250.0-200.12.254.255
                IPv6:
                  2803:1180::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:29:65:a5:c1:3f:76:f4:bd:2d:d6:81:65:fc:a4:5d:0c:05:
         63:8c:20:d7:81:26:98:76:c8:8f:3d:d1:03:55:a3:75:6f:25:
         65:d7:b7:18:af:62:5a:32:77:8e:de:1f:94:25:59:8f:ef:76:
         85:67:7a:5e:5e:3e:42:88:23:b1:1b:47:c8:76:77:74:c8:dd:
         35:8b:fc:c4:99:16:b1:7c:ce:6a:ff:98:6c:8e:58:3e:5e:b3:
         1e:78:1d:ac:07:8b:72:63:76:21:fb:82:53:1b:b3:d7:be:4c:
         c0:35:3f:ea:8e:07:3a:12:bf:d7:00:27:62:36:7f:19:4d:45:
         a1:0c:a4:e8:4f:3f:99:44:7e:1b:5a:86:87:10:96:8e:44:5b:
         70:d4:e7:56:34:e5:e4:ec:a8:24:24:35:69:f0:59:c7:08:e4:
         66:53:c0:89:7a:24:d8:a4:11:18:5f:35:4b:f9:23:07:7e:81:
         de:84:95:12:5b:c6:e3:18:a5:c2:d0:ec:b3:1d:4f:1b:9c:8a:
         b9:5c:b9:5e:28:aa:d6:d4:84:d6:e1:e5:50:e3:f6:bb:0f:60:
         73:22:4f:0f:30:51:64:47:30:bf:d5:b3:ce:0b:2e:6e:3d:9a:
         3c:9f:b4:a5:0d:d1:5b:f5:09:a2:c9:cf:c3:bd:61:0d:74:37:
         b4:eb:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----