Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/3aaa19d1d109bab3a2342e5e215bf20c2e115cb2.roa
File:                     3aaa19d1d109bab3a2342e5e215bf20c2e115cb2.roa (raw, json)
Hash identifier:          2Ujjn6l4on0FgBEjaxzrwx6LB7e6fNHtc2NSR+/3UWE=
Subject key identifier:   B8:3C:3C:28:65:56:AA:AD:B2:D3:E6:BC:5F:7B:E7:D7:EC:CA:48:D9
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02CD38
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/3aaa19d1d109bab3a2342e5e215bf20c2e115cb2.roa
Signing time:             Wed 12 Jul 2023 15:29:47 +0000
ROA not before:           Tue 11 Jul 2023 15:29:47 +0000
ROA not after:            Sat 12 Jul 2025 15:29:47 +0000
asID:                     15311
IP address blocks:        200.113.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183608 (0x2cd38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:29:47 2023 GMT
            Not After : Jul 12 15:29:47 2025 GMT
        Subject: CN=3aaa19d1d109bab3a2342e5e215bf20c2e115cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:bf:f4:28:b2:86:27:70:14:ae:58:1b:5c:
                    ff:e1:f6:86:84:57:6c:dd:5d:3a:fb:75:fc:46:f2:
                    47:d2:62:d4:6d:91:1a:6d:1c:16:08:4e:2b:4b:cb:
                    4c:9a:9b:ca:bb:0e:e0:41:d9:a2:cd:e6:d2:26:8c:
                    19:12:64:18:95:6b:b1:75:56:aa:89:8a:25:58:e3:
                    0b:44:02:73:69:00:5a:94:68:b8:a9:9c:9f:e7:ef:
                    89:26:27:73:31:e1:3d:3c:df:bc:21:9e:4a:b2:ab:
                    68:57:7e:f6:e3:0b:81:ae:e2:79:69:02:d1:78:7f:
                    8d:54:f0:e2:17:88:e8:f7:d5:75:85:e4:48:0f:36:
                    a7:71:57:29:1b:aa:71:36:5d:87:af:12:d7:07:ec:
                    69:97:4d:61:9c:d2:d3:0b:98:2c:b4:4b:e9:92:fb:
                    ed:b4:fd:ca:df:2d:34:5d:00:30:81:32:67:3b:98:
                    03:cd:d1:ce:35:69:48:ea:6e:cc:ca:fb:19:5b:41:
                    b3:a1:47:cb:7b:1c:8a:cf:2f:b3:f2:9d:55:c2:f2:
                    10:24:0d:ea:25:4f:98:91:52:fb:da:e2:2b:0c:17:
                    f7:7d:e3:a3:5d:f7:dd:14:3d:15:1a:99:ce:1a:e5:
                    cd:80:4f:a6:17:f9:d4:eb:00:24:eb:cf:37:1c:69:
                    9a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3C:3C:28:65:56:AA:AD:B2:D3:E6:BC:5F:7B:E7:D7:EC:CA:48:D9
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/3aaa19d1d109bab3a2342e5e215bf20c2e115cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:20:55:43:ba:af:19:35:60:83:42:e7:c6:8b:b0:ae:7b:82:
         68:23:f8:1c:b4:8e:8f:6d:e4:ab:01:fd:6a:89:ce:06:02:46:
         5c:7e:ce:1c:34:a0:88:3f:e7:fc:da:e7:50:a3:f2:ff:80:a2:
         a2:8c:53:94:37:05:6d:33:05:0a:c4:f5:0c:d4:41:5e:a5:26:
         2b:8c:7f:36:07:f3:13:a2:09:b5:82:4a:ae:93:2e:20:96:a1:
         50:94:c9:34:b2:d2:2f:85:e3:08:92:c7:81:4e:40:94:60:81:
         b0:1b:ac:36:6b:54:c7:cd:26:af:85:6f:3e:b7:4f:09:d0:a2:
         b2:53:9f:f8:74:01:d5:cc:93:40:93:cb:61:fe:63:d3:35:87:
         97:dc:ce:75:7a:a7:70:47:32:f6:6c:92:fe:5f:94:34:0d:8d:
         ad:64:59:41:11:83:fa:88:9d:1b:94:5e:3f:93:4e:3d:aa:2c:
         45:6b:06:b2:e4:76:5d:8b:ef:01:ab:20:e2:5c:99:3e:f3:a5:
         4a:f2:97:b9:be:65:ca:87:56:97:9c:ec:35:74:4a:f6:94:3e:
         40:2d:5d:94:40:1d:63:7e:6b:d3:9c:3c:3f:41:c6:95:02:e0:
         35:44:11:61:fa:b2:91:93:b0:b8:04:84:58:0d:63:63:2a:c9:
         52:d7:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----