Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/9d7a18dc10349da435dd434bebe0a0198d19e440.roa
File:                     9d7a18dc10349da435dd434bebe0a0198d19e440.roa (raw, json)
Hash identifier:          GNRevBHgGzSqdhg9rPmcgfgcL5XLlUJiYTRNcdvYd+0=
Subject key identifier:   39:E1:9D:39:A8:0F:1E:A1:9A:17:E2:C9:D7:C7:02:B1:20:E4:A4:CE
Certificate issuer:       /CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
Certificate serial:       186431
Authority key identifier: 64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/9d7a18dc10349da435dd434bebe0a0198d19e440.roa
Signing time:             Mon 10 Jul 2023 14:15:42 +0000
ROA not before:           Sun 09 Jul 2023 14:15:42 +0000
ROA not after:            Thu 10 Jul 2025 14:15:42 +0000
asID:                     264845
IP address blocks:        201.219.252.0/23 maxlen: 23
                          2800:700::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598513 (0x186431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
        Validity
            Not Before: Jul  9 14:15:42 2023 GMT
            Not After : Jul 10 14:15:42 2025 GMT
        Subject: CN=9d7a18dc10349da435dd434bebe0a0198d19e440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:db:27:69:f5:18:66:1f:fd:ed:79:78:7d:8f:
                    a7:4d:c5:47:a7:83:7c:7c:bf:a7:c4:c8:3f:8f:71:
                    1d:e0:c0:a8:b6:5f:98:e7:9a:fc:d6:67:76:a2:af:
                    65:14:cb:7e:2c:26:5b:cd:e8:fc:9b:c1:d5:0d:bc:
                    2b:84:7e:7b:b4:60:8d:b7:62:7f:4f:cf:52:65:72:
                    43:a8:de:ca:97:f4:3c:f4:fd:12:4d:fe:bc:a4:ab:
                    a0:fc:35:c8:5f:21:ff:6f:71:46:52:ae:7b:cf:93:
                    ea:09:59:6c:38:52:e6:ca:38:cf:3c:85:51:1f:31:
                    c4:be:2d:c4:7f:64:6d:53:a8:28:b7:c3:03:6a:d7:
                    d3:62:3a:b6:05:c1:87:e8:04:aa:65:91:a6:43:c4:
                    10:1a:b9:75:a6:0e:24:8a:4e:ae:cb:0a:04:da:32:
                    80:d5:4f:9a:90:c0:ad:de:41:db:d0:cb:44:5e:5a:
                    7f:ff:db:8d:57:8c:e5:2f:b8:d0:78:d5:21:28:e4:
                    c2:00:19:a0:82:f7:26:23:2d:45:18:19:1e:5c:3b:
                    d8:c3:db:f6:9f:21:c3:ee:b7:bd:03:71:78:0d:54:
                    5e:58:f6:81:53:22:3f:81:bd:cf:b0:d0:cd:46:3d:
                    18:1f:5e:a6:5e:5e:2a:64:e4:c1:b8:9a:12:95:e6:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E1:9D:39:A8:0F:1E:A1:9A:17:E2:C9:D7:C7:02:B1:20:E4:A4:CE
            X509v3 Authority Key Identifier:
                keyid:64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/9d7a18dc10349da435dd434bebe0a0198d19e440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/15ab7504ada349e4ed5816cfb2531293bf4331b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/23
                IPv6:
                  2800:700::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:cd:45:2f:01:d0:60:e1:40:f2:a5:68:98:17:bf:50:47:47:
         0e:62:5e:67:5a:8c:fd:d5:a2:2a:54:5b:10:3a:d2:ae:c4:9f:
         b6:6e:04:32:63:7f:05:b5:e9:1d:65:17:94:f1:0a:69:e3:9a:
         a3:c0:02:0c:9f:d6:5f:3b:11:df:dc:d7:9c:e9:82:d7:62:37:
         eb:93:75:e1:fa:18:35:b7:80:7a:f4:0e:e0:a2:96:22:ab:21:
         9e:bb:ab:28:aa:dc:4e:e1:25:4b:7c:0e:c4:89:6d:ec:d4:bb:
         84:ca:49:90:47:5a:e6:cf:08:0f:b5:06:67:9d:2c:3c:77:bb:
         eb:da:bc:25:10:96:7b:8e:d1:e6:6a:95:ac:e7:13:09:cd:65:
         2f:6e:40:60:bc:d1:ed:c9:81:8b:82:9c:48:c1:6e:de:b1:76:
         d4:3d:dc:dd:98:6a:da:90:ca:71:05:4e:18:b2:76:49:0f:d6:
         d8:a8:5a:28:33:7a:58:a5:39:25:af:a9:8d:6a:4c:04:37:1c:
         50:07:04:f9:df:13:ae:f1:2e:76:bf:98:4e:b5:ab:3d:da:53:
         2c:e8:ba:ab:dc:41:f9:04:bf:5e:57:13:ae:03:0e:e7:a4:11:
         28:9a:f2:72:38:34:83:71:f3:85:39:a8:a9:35:8b:fd:22:49:
         a8:cb:4b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----