Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/034277fe14e023924fecf026a539e1c77caded0f.roa
File:                     034277fe14e023924fecf026a539e1c77caded0f.roa (raw, json)
Hash identifier:          chnwiPKSRXxVkqs9UUe9fwMGzaP+G6aE2udEM0Pq4yQ=
Subject key identifier:   01:74:B6:91:95:EC:5A:15:32:05:18:CA:91:1B:5B:E4:7B:6B:D4:E1
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02DF08
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/034277fe14e023924fecf026a539e1c77caded0f.roa
Signing time:             Wed 12 Jul 2023 15:31:51 +0000
ROA not before:           Tue 11 Jul 2023 15:31:51 +0000
ROA not after:            Sat 12 Jul 2025 15:31:51 +0000
asID:                     7418
IP address blocks:        200.113.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188168 (0x2df08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:31:51 2023 GMT
            Not After : Jul 12 15:31:51 2025 GMT
        Subject: CN=034277fe14e023924fecf026a539e1c77caded0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:de:a9:b9:57:ef:c0:c2:79:5e:ba:c2:b1:1c:
                    3e:6b:e5:48:cc:c4:b8:38:4f:db:0a:35:2c:83:9e:
                    cf:5b:b4:9b:a5:b7:92:52:b7:8b:2d:57:72:c3:7f:
                    d4:cd:dc:02:4c:ff:97:c0:be:2f:3c:ba:cf:68:1f:
                    6f:1a:ca:6d:7f:ef:6e:61:8a:92:d1:8a:b2:c2:34:
                    73:91:10:bb:7d:3b:2c:ef:83:57:38:b2:39:a0:f0:
                    7a:a5:88:b0:c0:02:27:97:94:17:22:b3:78:53:5e:
                    79:e3:f6:c5:6c:3f:cb:d9:9e:eb:9d:60:d1:8d:aa:
                    70:d5:2b:42:21:d7:5d:7d:af:c6:c6:3a:f0:b2:d9:
                    db:65:81:ba:3c:52:94:bd:99:dd:02:bf:2d:cf:0f:
                    aa:38:a6:53:b6:2c:18:af:4d:a7:5b:82:ca:a6:22:
                    ea:60:86:e9:66:88:80:f5:38:dd:f2:24:de:84:9e:
                    bd:7c:fe:2d:67:39:cc:d6:a0:3b:3c:ed:49:27:c0:
                    25:19:c0:5f:3e:bc:18:ce:a6:b4:b4:29:31:ca:f0:
                    7c:c8:3b:9f:6a:4d:17:87:99:a3:d9:c9:06:12:38:
                    03:7e:b6:27:75:04:eb:d5:28:65:44:c0:fb:dc:22:
                    0f:f5:91:80:b7:cf:60:f8:37:66:62:d6:e4:77:f9:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:74:B6:91:95:EC:5A:15:32:05:18:CA:91:1B:5B:E4:7B:6B:D4:E1
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/034277fe14e023924fecf026a539e1c77caded0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:48:cc:ef:78:35:e1:4f:d3:b2:c8:e4:77:db:87:fa:6e:4d:
         bf:57:c5:3f:f3:48:c1:2c:f3:a9:2b:7b:cf:08:a3:79:af:67:
         e6:53:11:58:3f:5a:31:26:6f:46:ab:7b:cb:eb:47:8a:57:16:
         13:c2:4d:6d:f3:96:6b:63:6f:9d:54:6d:79:64:49:28:e1:01:
         a7:2f:3a:a9:63:b0:1d:36:ea:f2:4e:0e:08:0f:28:4a:99:2d:
         f4:17:c9:6f:c6:bb:bb:18:15:3b:1a:4f:db:e4:59:4a:c7:e0:
         a3:c7:d1:f7:41:52:7e:7b:12:b0:4b:78:b4:d4:64:da:4c:8e:
         31:d9:6c:da:fc:d2:ed:c9:d9:28:d3:03:02:12:66:28:63:31:
         77:eb:ec:b5:ec:59:2d:cc:cd:f1:f0:7e:fe:19:42:01:ef:fd:
         4a:ba:7c:97:5a:80:ee:48:49:56:f0:ee:c0:45:f3:b3:cf:40:
         ca:14:c9:eb:b8:92:e6:c2:ee:0a:b3:91:4d:03:b1:db:81:c4:
         81:3d:37:ff:0b:41:1f:5e:8d:38:3a:2f:24:b5:ed:30:25:90:
         3e:6d:39:d7:aa:14:56:a0:e9:34:5b:08:8a:d5:5f:8b:9f:01:
         3b:1c:4b:3d:a9:10:37:d2:4c:3d:1b:b4:72:a8:76:f5:33:5e:
         14:54:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----