Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/cdd5ab94219acb51a7ee5f04f1a8fe75b9882773.roa
File:                     cdd5ab94219acb51a7ee5f04f1a8fe75b9882773.roa (raw, json)
Hash identifier:          AccWPHVVu7WzAJ+iU/V5sHoso+npu+oJhaUqpz8BRyU=
Subject key identifier:   90:2F:6F:AD:5F:F7:77:1A:F4:60:B0:75:D7:BB:6E:25:CD:F7:70:BB
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       031F36
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/cdd5ab94219acb51a7ee5f04f1a8fe75b9882773.roa
Signing time:             Wed 12 Jul 2023 15:45:00 +0000
ROA not before:           Tue 11 Jul 2023 15:45:00 +0000
ROA not after:            Sat 12 Jul 2025 15:45:00 +0000
asID:                     15311
IP address blocks:        200.90.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204598 (0x31f36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:45:00 2023 GMT
            Not After : Jul 12 15:45:00 2025 GMT
        Subject: CN=cdd5ab94219acb51a7ee5f04f1a8fe75b9882773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:06:48:0a:a5:52:e9:07:51:f5:80:95:2e:46:
                    5b:ca:d2:24:ff:d6:b8:71:e5:c8:f2:ba:ff:a4:b1:
                    fa:8e:11:1c:a7:d2:2f:97:49:d6:22:f6:d3:86:74:
                    10:fb:3f:32:51:6e:7e:72:a4:50:f6:80:82:81:0c:
                    e6:d7:d6:02:3c:e8:d0:4c:cd:ac:95:a0:bf:27:6f:
                    14:90:63:c6:9c:29:20:29:18:22:4f:75:9e:88:22:
                    0f:92:da:16:3e:81:f9:60:3a:f5:e1:03:9b:76:fe:
                    c5:df:10:14:24:d0:79:59:7d:e5:a5:5a:9d:08:f7:
                    b2:42:b4:e5:60:dc:27:4c:2a:4f:28:09:a1:6d:82:
                    2a:19:ec:5e:e8:78:9b:1c:5e:90:7a:9c:5c:9d:e8:
                    ff:f7:38:57:b2:12:16:02:48:30:de:d6:5d:c6:4f:
                    fd:cb:90:f9:11:e7:69:fe:00:8c:57:9f:76:b6:16:
                    46:ec:4f:69:75:04:34:f8:b4:66:79:01:62:87:38:
                    4c:28:1b:7e:d1:5f:0f:ae:ed:ba:e1:e8:2a:24:79:
                    68:d4:70:21:04:63:d4:6a:46:d1:07:4a:2d:32:f8:
                    aa:ea:12:6c:d2:a2:47:9f:40:42:34:3d:82:2c:94:
                    4d:3f:4d:b1:a3:da:c0:bc:49:fb:57:d2:b4:9c:4f:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2F:6F:AD:5F:F7:77:1A:F4:60:B0:75:D7:BB:6E:25:CD:F7:70:BB
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/cdd5ab94219acb51a7ee5f04f1a8fe75b9882773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:44:f5:06:f8:8f:3f:47:59:ef:e9:13:0f:7a:73:4b:02:bd:
         60:9e:fc:c3:17:ad:cd:fb:72:7c:f4:07:34:95:02:5c:90:6e:
         d0:15:53:ed:83:22:89:6f:11:f5:7a:a4:02:b8:cd:9e:19:4f:
         1c:8f:de:6a:e1:77:a5:3f:75:f1:ef:43:b0:34:6b:dc:34:fa:
         fb:7a:f6:f7:28:38:53:c1:da:51:eb:61:e3:94:fb:57:26:e6:
         d5:34:df:2d:db:9c:b0:8c:41:78:eb:64:f0:9c:34:64:73:fb:
         55:e9:72:4a:c8:ac:3d:b1:f6:dd:76:04:08:10:83:34:9e:33:
         ac:1b:03:7a:fb:f1:a1:af:df:66:b2:23:0c:a3:0e:4e:08:bc:
         58:66:3a:ba:71:b5:7d:c4:a7:0c:0d:d8:c7:bf:44:fc:7f:54:
         fc:30:21:40:8d:ef:b9:67:a4:cb:18:a8:2d:e4:7e:26:d0:63:
         f6:a7:9c:99:9b:a0:a3:87:7d:91:82:f5:ec:09:31:a5:01:6a:
         d5:2c:7b:4b:a4:8d:99:91:5c:67:0c:ab:06:5e:e2:70:d8:e8:
         47:5a:46:28:b3:0e:1e:18:57:de:07:bb:08:c3:30:da:09:7a:
         9d:5c:61:fa:5d:6a:9c:53:27:3b:80:da:4e:7f:63:96:e6:3f:
         42:18:dc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----