Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/032e75ba7a07e246ad1e5511f79559a1a9f93edc.roa
File:                     032e75ba7a07e246ad1e5511f79559a1a9f93edc.roa (raw, json)
Hash identifier:          RQmXJttsBLflKTHEl5NreYFOPcCVbpFPrYkH2UTHTcM=
Subject key identifier:   59:36:9C:D2:71:5E:54:6B:54:F5:EE:EB:C8:94:3A:EA:18:A2:51:08
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02EE52
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/032e75ba7a07e246ad1e5511f79559a1a9f93edc.roa
Signing time:             Wed 12 Jul 2023 15:33:30 +0000
ROA not before:           Tue 11 Jul 2023 15:33:29 +0000
ROA not after:            Sat 12 Jul 2025 15:33:29 +0000
asID:                     16629
IP address blocks:        200.113.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192082 (0x2ee52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:33:29 2023 GMT
            Not After : Jul 12 15:33:29 2025 GMT
        Subject: CN=032e75ba7a07e246ad1e5511f79559a1a9f93edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9b:10:1c:32:a2:ee:eb:61:dc:a3:da:9a:4a:
                    71:15:ad:26:fb:9c:cf:e2:ad:78:ce:be:c6:7b:ec:
                    8d:6d:04:88:e4:61:ef:bc:54:ef:44:9a:26:8f:73:
                    6a:8a:95:5b:a1:1c:24:44:04:e2:7d:9d:4e:b0:be:
                    27:24:83:d4:2a:7c:28:af:03:a0:e0:95:72:c3:b9:
                    c6:45:c7:e8:08:01:55:0d:62:8f:6e:7c:bc:26:3c:
                    d4:bc:3b:f0:53:a0:f7:0c:56:62:6e:f9:b4:8a:23:
                    33:e9:6c:fd:cc:74:86:66:34:3d:a3:95:b5:83:3d:
                    0a:9b:fe:03:a1:c6:4b:a0:3b:83:5d:64:15:e0:37:
                    16:6a:cd:f8:6c:56:42:4d:7d:3d:87:cc:62:42:4f:
                    14:81:d5:56:ee:09:83:6f:8c:79:1d:c3:0c:eb:08:
                    97:ed:b4:82:f9:0f:5c:87:5a:fe:24:64:28:4a:3f:
                    7b:c7:c9:05:7b:3e:5e:47:62:31:89:5a:be:46:91:
                    ee:83:23:b0:13:73:98:d9:c4:3b:b5:37:46:a6:2a:
                    57:5e:fd:d5:81:81:a7:2f:0d:7d:e4:ea:ae:c2:a3:
                    d8:52:c0:7e:24:e0:82:2c:94:f8:28:d1:5f:0e:be:
                    89:d5:fb:64:05:d9:5b:ca:64:54:06:0d:80:70:8a:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:36:9C:D2:71:5E:54:6B:54:F5:EE:EB:C8:94:3A:EA:18:A2:51:08
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/032e75ba7a07e246ad1e5511f79559a1a9f93edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:72:9f:2a:bb:10:e8:67:ba:17:62:f4:56:72:c8:7c:b7:68:
         cd:af:34:3f:e2:8a:7b:f4:b5:ba:a7:b5:33:b9:79:35:64:8f:
         7f:64:41:bf:78:72:2c:7c:c8:0f:a9:3e:0a:14:29:db:dc:82:
         74:f5:a9:65:a1:22:23:9b:0c:46:f8:12:7e:42:74:df:0a:a8:
         6b:8c:54:00:5a:c8:d3:56:81:92:5b:ae:63:cc:09:63:5e:c5:
         be:5f:65:49:a9:d2:0b:da:85:fb:ca:1f:27:41:e0:00:11:e1:
         91:cf:61:a8:75:6f:b1:85:34:f3:fa:95:b6:97:e7:87:83:15:
         26:ce:c1:c5:37:44:63:68:59:15:3e:f3:b7:66:d6:76:8c:b7:
         4b:7f:d7:a5:55:5a:b7:df:b4:64:e8:ac:82:85:6f:c2:b5:c3:
         56:b1:b1:a4:c3:8f:6d:63:00:9b:5e:80:f3:58:cb:0f:13:77:
         76:81:54:38:fc:8e:59:de:65:25:1f:63:15:e9:d9:33:33:f1:
         fe:1d:54:34:58:3d:7b:5f:f7:18:0f:a9:c2:11:f3:b6:d5:fe:
         e5:d1:55:15:18:59:f3:e2:f9:41:e8:df:4c:55:fc:b8:22:1c:
         f0:89:fa:ff:d9:27:38:b5:b5:fd:fe:11:cf:e8:f1:5b:93:59:
         4d:83:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----