Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/41dd6f6b10e5591688abc709db88245967fce3ae.roa
File:                     41dd6f6b10e5591688abc709db88245967fce3ae.roa (raw, json)
Hash identifier:          Etf45jzlzOfBx/1uyBKDxy8JUN2DuO8UTpV1TvRPY+8=
Subject key identifier:   C2:25:80:1B:95:58:31:CC:47:F6:72:F4:E0:24:51:A2:2A:5E:1A:AA
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02D5FF
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/41dd6f6b10e5591688abc709db88245967fce3ae.roa
Signing time:             Wed 12 Jul 2023 15:30:23 +0000
ROA not before:           Tue 11 Jul 2023 15:30:23 +0000
ROA not after:            Sat 12 Jul 2025 15:30:23 +0000
asID:                     7418
IP address blocks:        200.113.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185855 (0x2d5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:30:23 2023 GMT
            Not After : Jul 12 15:30:23 2025 GMT
        Subject: CN=41dd6f6b10e5591688abc709db88245967fce3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d3:b2:7e:70:db:01:e2:20:81:c7:d8:c7:aa:
                    c8:12:10:dd:c2:fb:f2:9f:95:89:bc:59:51:cd:59:
                    9a:cc:1d:89:99:28:7b:a9:34:1d:ce:40:4a:13:7b:
                    e4:00:25:ff:1e:43:7e:fc:0e:79:39:fd:5d:be:03:
                    ae:e8:53:ca:94:7a:17:18:a7:b1:d0:55:6e:13:97:
                    02:fc:2a:d1:7e:2b:d9:97:b6:a9:ce:1b:36:19:0e:
                    3e:e9:e5:86:be:dd:16:da:3c:f4:2b:fe:d7:b1:39:
                    1e:db:b8:de:9d:98:64:66:9e:62:63:d2:dd:87:70:
                    9f:a6:74:da:07:6a:4b:2c:12:ad:b5:32:46:f8:27:
                    6b:c7:d6:05:f1:25:a8:b3:9b:79:69:41:00:e0:df:
                    81:5c:46:05:55:39:5d:ee:39:cb:84:97:bc:20:08:
                    cd:1c:83:43:fc:5f:f6:a9:99:00:c8:20:6f:58:3a:
                    c6:b3:06:0d:25:70:f7:77:ec:ad:dd:cb:a3:e2:7c:
                    88:16:48:95:0f:97:29:99:0e:02:cf:48:b1:d9:7d:
                    0d:15:77:28:64:a5:d2:96:f8:bd:70:6a:f1:4c:5e:
                    f7:bf:ef:14:24:fc:49:41:4e:4f:a7:6b:f8:be:32:
                    0e:a2:d4:6f:cd:d0:32:db:66:7a:9a:0c:6a:52:4b:
                    08:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:25:80:1B:95:58:31:CC:47:F6:72:F4:E0:24:51:A2:2A:5E:1A:AA
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/41dd6f6b10e5591688abc709db88245967fce3ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ee:68:a9:9d:fd:a7:7f:78:bd:19:9c:d9:ef:60:bb:3b:1f:af:
         d1:39:28:fb:b3:50:de:15:e9:11:3b:c5:43:01:7f:95:b4:f7:
         96:bf:b6:50:5f:d6:4b:f0:e7:99:8d:4c:42:92:92:81:e6:12:
         6e:02:b1:6a:17:81:46:2a:ca:a3:b5:41:bd:95:1f:04:2e:e1:
         e6:91:32:7a:7a:cb:0a:41:5e:27:a8:a8:4f:2f:c3:bd:eb:cb:
         ea:c9:20:57:2b:d5:5a:1e:0a:73:d6:8a:3b:b9:30:6c:2b:c3:
         30:5b:2a:09:f2:43:e9:11:6e:69:13:1e:50:92:4f:76:c9:2b:
         41:58:6a:82:ab:b1:f7:c0:ba:48:a3:f5:4b:82:00:73:70:fc:
         28:a5:21:76:13:11:8f:90:37:18:0e:6e:ca:64:2b:68:ee:59:
         c3:b6:ed:38:1d:d3:7c:d5:36:90:26:53:67:fd:2b:d1:21:a7:
         ca:59:5f:48:0d:4e:20:42:8d:a4:01:19:7e:d1:e3:9e:8e:2b:
         00:cf:c3:29:7a:b9:d9:04:ff:5c:0f:ea:28:7f:a6:0a:c3:81:
         8e:7f:91:50:d0:a1:25:70:6b:d5:f9:1e:88:39:18:09:e4:a3:
         0d:1d:ab:ca:04:12:4d:dd:ca:df:32:5f:ac:08:0f:39:fc:da:
         d3:10:85:67
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAtX/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1
ZDQyOGVkNzY2NzAxYjU5MzU1OGEyMmUxZmMwOGMxN2FjYzZlMjcwHhcNMjMwNzEx
MTUzMDIzWhcNMjUwNzEyMTUzMDIzWjAzMTEwLwYDVQQDEyg0MWRkNmY2YjEwZTU1
OTE2ODhhYmM3MDlkYjg4MjQ1OTY3ZmNlM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAldOyfnDbAeIggcfYx6rIEhDdwvvyn5WJvFlRzVmazB2JmSh7
qTQdzkBKE3vkACX/HkN+/A55Of1dvgOu6FPKlHoXGKex0FVuE5cC/CrRfivZl7ap
zhs2GQ4+6eWGvt0W2jz0K/7XsTke27jenZhkZp5iY9Ldh3CfpnTaB2pLLBKttTJG
+Cdrx9YF8SWos5t5aUEA4N+BXEYFVTld7jnLhJe8IAjNHIND/F/2qZkAyCBvWDrG
swYNJXD3d+yt3cuj4nyIFkiVD5cpmQ4Cz0ix2X0NFXcoZKXSlvi9cGrxTF73v+8U
JPxJQU5Pp2v4vjIOotRvzdAy22Z6mgxqUksIqwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMIlgBuVWDHMR/Zy9OAkUaIqXhqqMB8GA1UdIwQYMBaAFJWVjQpUS4dtXXTJ
+maZxquWcU7TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODVkNDI4
ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDlmNGQzMTYtOTAxYy00YzZiLWJiZDYtNGNiYjcw
M2IwY2ZkLzQxZGQ2ZjZiMTBlNTU5MTY4OGFiYzcwOWRiODgyNDU5NjdmY2UzYWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWY0ZDMxNi05MDFjLTRjNmItYmJkNi00Y2Ji
NzAzYjBjZmQvODVkNDI4ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBMhxMDANBgkqhkiG9w0BAQsFAAOCAQEA7mipnf2nf3i9GZzZ
72C7Ox+v0Tko+7NQ3hXpETvFQwF/lbT3lr+2UF/WS/DnmY1MQpKSgeYSbgKxaheB
RirKo7VBvZUfBC7h5pEyenrLCkFeJ6ioTy/DvevL6skgVyvVWh4Kc9aKO7kwbCvD
MFsqCfJD6RFuaRMeUJJPdskrQVhqgqux98C6SKP1S4IAc3D8KKUhdhMRj5A3GA5u
ymQraO5Zw7btOB3TfNU2kCZTZ/0r0SGnyllfSA1OIEKNpAEZftHjno4rAM/DKXq5
2QT/XA/qKH+mCsOBjn+RUNChJXBr1fkeiDkYCeSjDR2rygQSTd3K3zJfrAgPOfza
0xCFZw==
-----END CERTIFICATE-----