Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/e4c6b98b87e01c1746fc08a4779c122122497235.roa
File:                     e4c6b98b87e01c1746fc08a4779c122122497235.roa (raw, json)
Hash identifier:          tRCdKyBnIleYq6B78BaPinRdKSwMu1QWwMXdIgGzyng=
Subject key identifier:   33:A4:D7:2D:02:DB:DF:AD:89:A2:B4:83:DA:22:B9:10:B3:6C:1D:46
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02C316
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/e4c6b98b87e01c1746fc08a4779c122122497235.roa
Signing time:             Wed 12 Jul 2023 15:28:57 +0000
ROA not before:           Tue 11 Jul 2023 15:28:57 +0000
ROA not after:            Sat 12 Jul 2025 15:28:57 +0000
asID:                     7418
IP address blocks:        200.113.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181014 (0x2c316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:28:57 2023 GMT
            Not After : Jul 12 15:28:57 2025 GMT
        Subject: CN=e4c6b98b87e01c1746fc08a4779c122122497235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:76:a4:78:6a:e3:8a:e4:55:34:a7:81:ba:
                    46:0d:68:86:e5:ab:31:78:d8:5a:b9:58:3d:9a:d3:
                    69:b6:b1:25:c7:0c:eb:f9:f0:e0:3b:29:ea:97:6e:
                    a2:a5:aa:0c:d2:b7:1d:b6:84:b1:87:a5:df:d6:9b:
                    ba:8b:c8:45:c9:81:04:b4:9f:31:8e:8a:7b:01:5a:
                    38:a3:01:4a:77:42:42:44:58:3b:5f:b7:ec:22:a4:
                    81:73:00:70:60:b5:16:5c:c6:32:63:62:e9:a6:11:
                    3a:cd:05:31:8e:76:4d:8c:e8:9c:30:aa:29:b3:6f:
                    9b:e2:06:11:1f:b1:a5:96:3f:87:73:0f:94:b3:cb:
                    1e:93:71:24:c5:f3:16:f8:67:a7:9b:4d:5e:db:7c:
                    9d:0a:6f:ef:c7:6d:de:98:84:68:d5:19:14:04:45:
                    fb:50:0a:05:82:11:07:6a:41:b5:ab:59:94:f9:f2:
                    c6:55:41:6f:be:65:40:9e:47:30:02:74:ef:7c:9e:
                    56:a2:1e:11:86:7c:fd:ee:7f:d3:a8:cf:a5:46:2a:
                    2a:56:c2:8c:d4:71:bd:16:13:97:16:65:02:d5:77:
                    5b:c5:59:b8:4c:30:61:f9:a8:15:12:bc:26:b3:30:
                    51:11:fe:66:8c:dc:1d:c8:1d:38:1c:ef:4e:6f:e6:
                    2f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A4:D7:2D:02:DB:DF:AD:89:A2:B4:83:DA:22:B9:10:B3:6C:1D:46
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/e4c6b98b87e01c1746fc08a4779c122122497235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:57:5d:c8:95:0a:d6:63:14:3c:ff:71:17:a5:ed:cb:fd:0e:
         8a:c9:98:4a:28:21:d9:e5:98:0e:16:ec:a6:26:45:d7:fe:7e:
         aa:1b:9d:1c:56:fa:1e:2d:fd:40:bb:32:21:ec:57:6f:6b:38:
         c0:2c:f9:28:12:f9:47:45:d7:b6:b9:a6:ed:2c:1c:42:6a:b2:
         c8:6c:0a:77:91:bc:13:27:7a:8b:f2:3f:0d:50:76:c4:d0:41:
         f2:de:9a:44:07:b7:ef:7e:0f:7f:ce:1b:0f:8f:96:86:83:c0:
         a0:93:01:1c:be:61:b9:87:4c:e1:11:5d:35:0a:ff:73:ce:50:
         64:0b:a9:fd:02:e2:54:59:e7:58:3c:65:7d:1e:a3:96:33:cf:
         18:c3:35:db:61:b5:9c:5f:f6:89:99:7a:27:54:86:91:0c:13:
         f5:12:b8:33:96:33:d1:05:a3:65:e3:63:38:81:5b:9a:f5:5d:
         df:fe:dd:89:58:39:e2:62:bd:c6:83:07:c5:b8:f8:e4:4a:eb:
         9f:1b:70:23:28:96:f9:a2:58:30:f8:18:e4:42:9e:fd:af:1a:
         1f:a3:1e:6e:11:06:e2:b0:64:22:42:3c:6c:dd:7f:a4:8f:fc:
         84:e6:6b:e6:b5:fa:86:5e:16:e4:60:7c:03:30:ae:fe:64:c5:
         d7:a5:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----