Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4ab92eb1aa934414cf2dfeb8813730a66a1670b0.roa
File:                     4ab92eb1aa934414cf2dfeb8813730a66a1670b0.roa (raw, json)
Hash identifier:          Ee4cuyyW3PFLufbySUozzP29KN46aHbdIIpwFxOwF5g=
Subject key identifier:   73:C7:68:80:F6:F1:66:47:22:06:59:92:20:57:75:02:60:43:60:FC
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       0313B0
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4ab92eb1aa934414cf2dfeb8813730a66a1670b0.roa
Signing time:             Wed 12 Jul 2023 15:43:15 +0000
ROA not before:           Tue 11 Jul 2023 15:43:15 +0000
ROA not after:            Sat 12 Jul 2025 15:43:15 +0000
asID:                     15311
IP address blocks:        200.90.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201648 (0x313b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:43:15 2023 GMT
            Not After : Jul 12 15:43:15 2025 GMT
        Subject: CN=4ab92eb1aa934414cf2dfeb8813730a66a1670b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2d:c3:e0:32:93:f1:04:6f:68:b6:17:1d:05:
                    2d:c8:9e:e6:3c:06:62:ac:2b:c7:ed:71:72:4e:52:
                    17:5b:44:ee:b4:ae:bd:f5:5a:71:c3:29:fc:5f:96:
                    3f:b5:88:d1:79:2b:0f:fb:8e:83:a3:be:c1:ca:34:
                    bf:d4:de:be:77:d7:9f:ea:e7:df:f9:d8:ae:c9:76:
                    d2:9e:37:bc:5a:2d:e6:90:aa:2e:2b:8d:cd:69:ed:
                    be:fe:98:33:c2:04:c1:f2:bd:de:07:cd:32:ad:f5:
                    29:a6:aa:66:e0:84:35:32:e9:60:ff:a8:7a:73:af:
                    fc:b8:53:3f:6d:47:44:54:fd:53:1d:ff:d4:fc:d5:
                    a5:2d:78:d3:d0:85:4d:54:b3:8b:b9:8c:00:c9:cf:
                    4b:4f:a8:70:5b:7c:8f:77:44:82:ff:3a:89:b3:ab:
                    ae:34:6f:56:a8:f7:80:7c:63:0c:18:1b:f9:9d:c9:
                    eb:05:7f:83:71:6b:5b:42:ca:52:b5:48:2c:78:e2:
                    42:b6:a2:ea:e9:5a:6d:9d:c4:8e:f7:d0:5b:c1:89:
                    a6:3a:b3:ad:02:a7:cd:15:ed:9c:d2:46:08:72:19:
                    8c:aa:d5:26:ce:67:29:f2:1d:e1:24:1f:b2:33:f9:
                    16:c9:65:26:96:44:2e:e3:23:51:40:8a:3c:09:bf:
                    84:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C7:68:80:F6:F1:66:47:22:06:59:92:20:57:75:02:60:43:60:FC
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4ab92eb1aa934414cf2dfeb8813730a66a1670b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:1a:14:ae:f4:11:6f:0c:d3:97:aa:a9:02:b9:b4:78:3d:bf:
         df:ee:d2:8a:3d:6d:07:28:5c:be:13:5e:e5:6d:b4:49:80:20:
         33:d2:80:a3:f8:96:6f:63:f3:67:c9:d4:1a:57:8d:f2:ab:f2:
         d7:fa:c3:ba:45:cb:b9:6f:cf:8e:ed:b7:7f:b0:c8:ed:01:e0:
         24:b3:1b:87:ae:46:e6:52:da:dc:cf:95:cb:37:c5:e5:37:15:
         9c:fa:b4:7b:be:0b:57:e5:00:52:c9:cb:b5:60:ca:51:bc:45:
         57:cc:9f:eb:9a:2e:75:18:22:9e:59:32:f9:a5:be:d2:64:7e:
         f6:cb:30:7c:2d:3a:21:20:03:05:3f:a3:e0:0b:d0:2a:35:00:
         d6:f5:49:9c:d6:be:36:33:dd:fd:63:9e:e4:c0:ec:73:f4:cd:
         6f:15:5e:61:11:ae:b8:7a:cc:16:d7:49:9f:c4:e3:d9:08:95:
         54:aa:89:08:2b:04:4f:cd:ee:b3:35:9b:c2:f1:54:28:c0:36:
         c3:fb:88:64:83:f7:7b:90:51:96:9b:f4:93:c5:01:16:40:ee:
         6b:ee:75:9e:31:c6:a3:96:aa:45:b3:f8:58:a3:5e:a7:f7:15:
         dc:5b:a8:98:78:26:8e:59:16:00:fc:3d:f5:74:c2:c9:5a:3d:
         03:72:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----