Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2add6dd455deb152a54ffa4a1128c8200e040ca8.roa
File:                     2add6dd455deb152a54ffa4a1128c8200e040ca8.roa (raw, json)
Hash identifier:          iyQvv9Rdinm2E0QzXVH85c+pPCBWX9FLJEJpqa9EM/4=
Subject key identifier:   90:FE:30:69:49:56:63:F7:64:1A:FD:6D:9A:54:7D:A6:48:0D:19:67
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       030A73
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2add6dd455deb152a54ffa4a1128c8200e040ca8.roa
Signing time:             Wed 12 Jul 2023 15:38:10 +0000
ROA not before:           Tue 11 Jul 2023 15:38:10 +0000
ROA not after:            Sat 12 Jul 2025 15:38:10 +0000
asID:                     7418
IP address blocks:        200.113.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199283 (0x30a73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:38:10 2023 GMT
            Not After : Jul 12 15:38:10 2025 GMT
        Subject: CN=2add6dd455deb152a54ffa4a1128c8200e040ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:04:3c:e3:ce:a0:e0:9e:e2:68:6b:18:03:
                    cf:fe:76:fa:31:57:de:c0:75:fb:a8:19:74:fb:53:
                    84:e3:19:fb:dc:7f:6e:7d:d1:56:c5:e5:0e:bd:e3:
                    71:02:e6:4c:77:58:f3:39:45:43:16:b5:c5:07:88:
                    e0:42:21:a8:2e:d9:a1:e2:12:ae:5e:53:14:8d:f9:
                    66:44:a6:b8:64:0c:30:80:af:02:01:26:af:46:e0:
                    5b:56:9d:ed:8a:6f:b3:43:c7:c2:41:05:c5:1e:60:
                    c0:12:9f:ee:41:fd:20:7e:1b:7a:3a:43:3e:51:0f:
                    3f:14:58:99:c7:db:52:53:15:4d:a2:42:f4:58:c3:
                    6c:67:eb:ab:a8:40:fe:34:4f:be:3c:b7:14:04:5d:
                    0a:c0:11:65:8e:58:e2:19:34:7b:f1:84:22:b1:ae:
                    3d:6a:f8:19:47:6f:50:81:95:d4:a9:3d:f0:ae:83:
                    a5:41:5b:89:95:93:50:d2:90:c3:5a:5c:07:da:58:
                    66:cf:06:74:b2:7c:1a:5a:0b:57:4e:24:4f:53:81:
                    f5:10:19:9f:bb:07:00:09:21:5f:6c:fa:d0:e3:a6:
                    73:bd:46:90:19:2a:f0:8d:98:12:94:87:67:8b:f8:
                    6b:71:85:67:d0:11:24:a3:58:23:53:50:39:cf:fc:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FE:30:69:49:56:63:F7:64:1A:FD:6D:9A:54:7D:A6:48:0D:19:67
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2add6dd455deb152a54ffa4a1128c8200e040ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:f6:1d:6a:3d:f7:00:68:74:9a:9a:77:13:fa:b5:f0:d0:4c:
         f7:51:fc:c1:01:ad:be:d7:e4:ee:c5:0d:1b:b6:67:4d:2a:32:
         db:74:f7:f2:c9:4b:fa:2d:e2:96:70:2d:a4:29:94:ff:b0:fc:
         a8:ed:5b:d5:cd:d1:6e:0e:c1:6d:32:a8:9b:51:3a:a0:e1:8b:
         ed:81:76:c7:46:02:d8:e6:5b:14:68:05:81:d0:cb:47:d2:ae:
         e0:59:c4:ce:0b:42:19:f6:e8:90:8e:62:0d:5c:07:e3:a6:28:
         f7:a4:64:37:ed:53:65:58:be:1e:bf:a9:19:d8:7c:fe:ff:d5:
         27:3b:7e:63:73:5b:f2:26:be:24:89:b3:3c:88:4a:67:14:99:
         e6:12:92:de:c2:13:74:20:cf:67:59:f1:fc:15:6a:03:d0:e8:
         d0:4d:2f:0b:51:99:d1:5c:f7:7f:34:9b:c0:12:f0:60:26:f7:
         f1:ce:7f:98:90:17:29:d8:35:29:2b:96:bb:f4:b2:9a:d6:0a:
         09:83:2a:a5:7e:39:23:83:75:fe:e9:78:e9:d0:e4:91:8f:75:
         a7:c3:e5:94:48:27:d6:8c:5e:c6:47:b7:20:38:dd:90:38:a8:
         c0:63:53:8d:e1:d2:bf:a9:78:b9:b0:77:a6:94:8b:52:3b:ee:
         ac:54:df:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----