Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8ff37c2-38fa-475a-9759-1d922ef38181/c4c7f768fa25fa6242924f660c3e488e8674acb1.roa
File:                     c4c7f768fa25fa6242924f660c3e488e8674acb1.roa (raw, json)
Hash identifier:          HPW4CPpref2jjCK3En/8Z7NNlQACklTCtmODPxMM4kU=
Subject key identifier:   F2:71:0A:B3:4F:AD:60:5A:5A:6F:5D:90:68:9A:3C:59:C8:B9:DC:1F
Certificate issuer:       /CN=9cb7bc4b5530d7f1720524e32a2994dedf375c16
Certificate serial:       17E8FD
Authority key identifier: CA:19:50:A1:23:DC:0E:BD:F7:A1:93:93:18:24:E9:40:93:0C:23:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cb7bc4b5530d7f1720524e32a2994dedf375c16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d8ff37c2-38fa-475a-9759-1d922ef38181/c4c7f768fa25fa6242924f660c3e488e8674acb1.roa
Signing time:             Tue 08 Nov 2022 14:42:41 +0000
ROA not before:           Sun 06 Nov 2022 14:37:15 +0000
ROA not after:            Fri 08 Nov 2024 14:37:15 +0000
asID:                     269907
IP address blocks:        200.26.232.0/22 maxlen: 24
                          2803:2ce0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566973 (0x17e8fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb7bc4b5530d7f1720524e32a2994dedf375c16
        Validity
            Not Before: Nov  6 14:37:15 2022 GMT
            Not After : Nov  8 14:37:15 2024 GMT
        Subject: CN=c4c7f768fa25fa6242924f660c3e488e8674acb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1a:e6:2d:41:94:dd:d4:4f:9f:55:b8:26:58:
                    5b:02:07:3d:b6:37:8f:42:29:2a:33:64:1a:6b:f0:
                    ff:69:f5:f8:23:08:52:08:87:1d:b3:aa:f0:7b:7b:
                    1b:2e:11:f9:9f:ae:93:ae:55:75:ec:7e:64:9c:88:
                    b4:62:f4:82:dc:15:55:27:53:d9:d1:cc:d2:c6:65:
                    64:b7:3e:7b:47:82:39:46:ab:bb:89:17:3b:aa:b9:
                    60:5e:1b:51:93:ff:3d:f3:ed:c0:c8:34:22:d3:06:
                    b6:d8:78:d2:20:c7:63:a8:cb:aa:24:06:8b:9c:de:
                    0d:ba:01:6e:b7:7a:d7:ec:09:f2:da:b0:ae:40:60:
                    7c:d6:02:c3:07:69:23:09:14:2c:b8:84:f5:87:0c:
                    1b:e6:2c:ef:a5:0e:77:79:8e:08:fc:0b:33:e8:96:
                    54:4e:5b:81:6c:d5:e8:e0:c0:ce:43:c3:50:97:3d:
                    44:db:8d:9c:36:d7:14:43:11:e1:fd:62:47:ce:13:
                    82:2f:b3:93:e4:49:71:b6:cf:4c:da:ac:04:e7:dd:
                    79:e0:a7:ef:ad:6b:c0:b1:0b:4a:33:40:0a:dd:48:
                    0b:9f:a3:4f:26:35:38:aa:fe:4d:04:84:03:bf:b1:
                    1f:9e:de:91:a0:e3:68:74:20:61:01:84:a6:56:a0:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:71:0A:B3:4F:AD:60:5A:5A:6F:5D:90:68:9A:3C:59:C8:B9:DC:1F
            X509v3 Authority Key Identifier:
                keyid:CA:19:50:A1:23:DC:0E:BD:F7:A1:93:93:18:24:E9:40:93:0C:23:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cb7bc4b5530d7f1720524e32a2994dedf375c16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8ff37c2-38fa-475a-9759-1d922ef38181/c4c7f768fa25fa6242924f660c3e488e8674acb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d8ff37c2-38fa-475a-9759-1d922ef38181/9cb7bc4b5530d7f1720524e32a2994dedf375c16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.232.0/22
                IPv6:
                  2803:2ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a0:a5:95:c7:6d:89:c0:13:b2:c1:36:5d:91:08:24:f2:e1:
         4e:41:bc:d9:90:98:74:88:af:0f:3c:e5:d9:66:8d:b6:fd:78:
         dc:cc:a0:88:ba:74:50:f1:ac:81:19:82:97:36:a9:41:8b:b9:
         65:1a:11:2e:5b:71:21:b1:7c:af:34:ef:b3:15:b0:2d:1c:31:
         be:03:4a:0f:7a:0d:5f:9f:98:90:b0:a7:bd:0d:7a:26:93:54:
         e6:ef:05:6c:94:ed:cd:be:fa:5e:da:c0:9f:7e:bf:66:7f:a9:
         dd:bd:f0:41:81:72:3b:b8:db:2d:d6:9f:a3:b2:9b:7b:2a:60:
         08:aa:d2:d3:c0:cf:a0:94:90:d8:97:4d:58:b5:bc:ba:8f:c1:
         30:0e:8e:b4:db:2e:46:26:2f:b8:31:ae:bd:3e:ff:ab:b7:d0:
         6c:79:d0:d6:97:61:42:f1:4d:97:d2:7d:0b:18:99:11:76:ed:
         31:35:f5:0e:ac:b7:0e:4a:be:81:5f:b4:b7:60:67:8c:e3:ae:
         f3:b8:2c:5b:42:a1:45:72:5b:4a:bb:05:70:db:dd:8d:47:d7:
         cf:36:a9:2d:74:e1:f3:6c:92:45:8e:8b:4d:16:50:f9:a3:90:
         4e:e4:65:1a:36:90:3e:c9:0b:68:9c:98:a3:00:fb:c2:0f:c0:
         7b:d8:63:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----