Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/1cb695617adafb9a1d43102ff56a187c8751d41b.roa
File:                     1cb695617adafb9a1d43102ff56a187c8751d41b.roa (raw, json)
Hash identifier:          a2HGIBLWFJtbmmU5fK3HIppAWOLqihWXyZcf9Aw5b9s=
Subject key identifier:   84:26:3B:6A:2F:00:5C:64:74:F0:9E:DF:4E:5D:F1:02:A6:81:33:1E
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02E495
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/1cb695617adafb9a1d43102ff56a187c8751d41b.roa
Signing time:             Wed 12 Jul 2023 15:32:09 +0000
ROA not before:           Tue 11 Jul 2023 15:32:09 +0000
ROA not after:            Sat 12 Jul 2025 15:32:09 +0000
asID:                     16629
IP address blocks:        200.113.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189589 (0x2e495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:32:09 2023 GMT
            Not After : Jul 12 15:32:09 2025 GMT
        Subject: CN=1cb695617adafb9a1d43102ff56a187c8751d41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:d8:ab:c6:07:98:02:24:6c:41:6e:1c:91:
                    28:2d:f9:19:5f:07:48:eb:d6:a7:08:dd:8a:9d:1d:
                    02:74:07:45:b2:ed:d6:bf:4e:74:d6:3c:43:db:9a:
                    fc:fa:c9:b3:8f:8c:a9:e5:bf:86:0b:3c:06:5b:93:
                    e8:c3:b0:f7:ff:e5:0b:af:92:0a:7a:70:52:b0:90:
                    46:51:2f:6c:40:e8:af:13:d4:fb:1e:c2:7e:3f:b5:
                    48:99:89:45:34:c3:6a:9b:a4:ca:bf:7c:88:de:f4:
                    b8:fc:0d:1c:08:16:4e:ff:5f:36:df:72:a6:4c:aa:
                    74:91:58:f4:01:4e:28:cc:17:0b:20:bc:a9:9b:9c:
                    9d:5e:1b:bb:2f:19:38:68:43:c2:07:c1:28:61:f4:
                    6c:a6:64:57:02:7c:18:55:69:7f:1d:bf:0f:75:0d:
                    4d:9d:cc:55:54:06:31:dc:63:c5:9d:2a:2a:b4:f7:
                    e1:62:d9:82:96:e9:62:94:28:fa:ea:e8:df:03:c3:
                    a9:5b:5e:dc:e0:37:77:5c:1d:c7:ae:9d:f6:9b:f7:
                    fc:e2:64:9d:e0:da:5b:a1:2a:04:00:e8:ca:82:e2:
                    d4:6e:94:d8:c2:b5:56:da:8a:36:d9:19:fd:f9:6f:
                    8f:6c:17:4d:53:ba:ac:46:e2:18:09:45:ee:76:3c:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:26:3B:6A:2F:00:5C:64:74:F0:9E:DF:4E:5D:F1:02:A6:81:33:1E
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/1cb695617adafb9a1d43102ff56a187c8751d41b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:c5:73:11:f1:71:33:59:c4:d4:3c:49:e9:a3:f0:69:1d:62:
         49:2f:f8:c7:38:19:99:06:5f:10:27:85:5f:7b:2f:fc:cd:97:
         40:d6:48:ea:61:5b:85:c9:b1:79:0f:ea:f2:3b:81:e6:2a:4e:
         4a:51:69:09:d5:13:b0:d0:1a:fd:0c:91:d0:28:e5:ac:3c:37:
         b7:a8:51:21:67:48:12:67:f0:54:7e:3c:a4:61:5d:42:4b:81:
         68:40:67:3a:60:31:e4:a9:19:eb:49:5d:94:9e:ea:43:61:7a:
         54:65:a1:9e:39:6e:10:fd:27:98:b6:28:eb:12:62:85:a6:0e:
         30:a3:35:97:b5:c3:e4:37:4c:e1:10:fe:cc:16:0d:94:32:90:
         05:d1:d7:15:d4:50:97:f4:bb:c1:be:f4:c6:01:c9:70:a2:80:
         e9:c3:f8:37:0c:6f:71:ff:b2:0d:3f:33:98:c5:dd:38:ab:28:
         6c:50:36:80:46:a6:a2:b9:4f:72:22:f1:e6:70:01:8c:e5:72:
         eb:3b:20:9b:d1:79:ac:24:42:4e:60:2d:3e:f8:85:6a:01:7f:
         67:01:de:37:c0:da:91:4c:d1:02:44:38:0c:36:2c:d7:f0:4e:
         ab:b4:a9:f6:2c:fc:ac:df:d6:97:9d:c7:6d:4d:07:9f:2d:20:
         7a:57:a8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----