Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/87026918a867d0bb81d05e236eef0682481a4f60.roa
File:                     87026918a867d0bb81d05e236eef0682481a4f60.roa (raw, json)
Hash identifier:          SMJX/vaOVUTsSAGY23FPbiMCNePWx85d0uQXDRgOGlk=
Subject key identifier:   04:AE:36:19:E7:1A:D9:C7:04:0D:6B:E2:10:67:40:4A:AC:09:4B:C4
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02FC31
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/87026918a867d0bb81d05e236eef0682481a4f60.roa
Signing time:             Wed 12 Jul 2023 15:36:07 +0000
ROA not before:           Tue 11 Jul 2023 15:36:07 +0000
ROA not after:            Sat 12 Jul 2025 15:36:07 +0000
asID:                     16629
IP address blocks:        200.113.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195633 (0x2fc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:36:07 2023 GMT
            Not After : Jul 12 15:36:07 2025 GMT
        Subject: CN=87026918a867d0bb81d05e236eef0682481a4f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:6c:a4:75:06:11:0a:f3:3f:55:6b:d7:1c:
                    ae:4b:60:b2:df:59:6c:a8:d0:aa:ee:3d:7e:ee:34:
                    82:d2:8f:8a:fd:2d:98:69:dc:cc:5f:75:d5:20:9a:
                    f7:5b:28:da:4e:9d:46:46:a8:f0:5e:e7:f9:57:1b:
                    a4:1c:db:1d:2a:bf:30:d7:1e:e6:65:97:f1:10:89:
                    86:c6:82:5d:43:81:74:d7:97:d0:58:6a:15:e0:f2:
                    88:a9:bc:8f:a3:43:be:1d:66:36:54:2e:76:1f:7e:
                    90:09:dd:b3:2c:ec:84:09:7a:6d:fc:4d:a9:04:41:
                    09:c9:6a:28:aa:c4:8c:11:e7:34:de:45:06:37:cb:
                    7d:dc:7d:b3:45:bc:99:6a:ec:d7:fb:e2:89:6e:df:
                    3c:47:5b:e2:33:9c:32:69:a7:29:4b:43:d0:f6:df:
                    69:d1:ef:4d:12:99:a3:cf:6b:01:cf:61:73:03:0f:
                    0c:88:7c:0a:15:32:18:00:87:20:51:4f:cd:2d:42:
                    b4:2b:ee:ef:9e:c3:07:a7:86:e1:92:9e:c8:e5:e7:
                    f4:6f:52:71:db:2b:a2:2b:15:c7:39:34:9d:f3:79:
                    0a:56:8f:e1:54:65:b6:df:72:f8:05:21:c9:d6:4c:
                    ba:20:e3:5e:e7:f3:ac:bd:06:b8:e7:e3:af:29:d3:
                    ec:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AE:36:19:E7:1A:D9:C7:04:0D:6B:E2:10:67:40:4A:AC:09:4B:C4
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/87026918a867d0bb81d05e236eef0682481a4f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5e:ec:67:24:1c:05:82:37:6d:a1:9f:98:a2:a8:21:c3:1f:16:
         be:1f:a4:68:b0:37:51:75:19:2e:ae:14:49:ef:6b:e8:cb:c3:
         91:ef:a9:ff:54:a7:73:c3:c7:ad:0b:51:1a:48:42:1f:e6:b5:
         8a:96:42:76:a0:9f:6d:7f:e0:ce:a4:98:4f:3a:af:74:28:15:
         a6:b9:eb:e5:4d:a3:3c:25:ff:26:8d:ab:ff:e0:55:7a:7a:5e:
         78:31:54:48:40:b6:a8:4a:32:59:a4:52:d1:63:a2:56:88:76:
         0f:93:c7:48:52:25:72:bf:3c:67:e6:89:ef:94:ab:51:05:37:
         62:7a:8d:88:23:64:63:e5:5a:cc:39:8b:94:c9:02:3b:bc:70:
         ba:42:fe:f7:b8:fd:cb:dd:4c:ec:eb:21:f2:a8:50:b7:26:a8:
         b5:47:24:33:9d:14:44:ed:06:2b:79:5f:bb:24:13:51:e0:df:
         fa:ac:13:d7:ec:38:61:79:1e:3f:30:60:16:e8:56:ad:50:22:
         61:c9:72:60:ef:27:12:09:f4:6a:d6:b2:39:99:93:e9:af:7e:
         73:ff:2b:d0:a6:1d:23:2e:ef:e7:92:b6:a9:17:85:5b:9e:4d:
         04:69:d2:ee:43:9b:89:d4:44:7a:47:1b:2d:4a:ab:32:61:83:
         a1:c3:c1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----