Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/f3cfaade44968d1d80367fd76df61748adc13db8.roa
File:                     f3cfaade44968d1d80367fd76df61748adc13db8.roa (raw, json)
Hash identifier:          3p/0YD6LmwXEuBehQYnxcPoFItcSAF7fBi//HsQanHs=
Subject key identifier:   14:D7:29:BE:C3:04:C1:89:01:BC:0E:EE:13:39:5D:F5:49:DF:07:97
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02FEAF
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/f3cfaade44968d1d80367fd76df61748adc13db8.roa
Signing time:             Wed 12 Jul 2023 15:36:40 +0000
ROA not before:           Tue 11 Jul 2023 15:36:40 +0000
ROA not after:            Sat 12 Jul 2025 15:36:40 +0000
asID:                     15311
IP address blocks:        200.113.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196271 (0x2feaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:36:40 2023 GMT
            Not After : Jul 12 15:36:40 2025 GMT
        Subject: CN=f3cfaade44968d1d80367fd76df61748adc13db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e3:58:da:19:4b:4b:97:e1:cd:e3:49:0b:33:
                    4b:7c:90:5d:b8:b1:f6:b6:a2:0b:9c:a4:51:89:67:
                    5b:da:a3:b9:b7:27:2c:5a:5e:7a:81:3a:b6:66:62:
                    83:02:d9:56:ff:6e:88:c1:e8:00:6e:d4:71:a8:64:
                    79:93:02:5c:39:23:f4:21:9d:10:2c:d5:c2:67:f7:
                    ca:ce:c8:8a:47:62:d0:e0:59:a9:ce:56:02:8c:3d:
                    d1:c4:ed:d0:b4:c5:09:7e:73:03:25:94:f3:b6:12:
                    9d:cc:57:67:73:f8:05:c0:ba:d3:86:ea:01:ea:fd:
                    4d:fd:8f:69:a8:38:18:87:4c:da:ae:81:c8:a3:3e:
                    20:c7:41:98:5d:76:59:62:c7:c3:6c:c3:8b:7a:98:
                    54:e4:b4:4f:20:77:ea:08:77:3b:5a:6f:da:82:07:
                    45:14:56:fe:e3:90:d6:08:eb:6a:8b:54:4b:53:ad:
                    a9:62:ab:bc:a8:69:71:f8:31:70:9d:38:1a:c5:ca:
                    1f:84:b2:e9:ee:15:63:bb:70:3a:23:40:09:9f:a7:
                    a1:20:ea:b5:9c:b9:54:d0:6e:51:c4:a1:93:c8:6c:
                    5a:be:d9:e2:0f:99:58:d6:5c:6f:a6:76:ae:39:c5:
                    bd:89:36:1c:c3:19:35:ce:05:e2:08:e6:b1:b3:58:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D7:29:BE:C3:04:C1:89:01:BC:0E:EE:13:39:5D:F5:49:DF:07:97
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/f3cfaade44968d1d80367fd76df61748adc13db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:78:a8:b2:ce:62:66:a6:2c:2e:13:0a:6e:cd:43:49:8c:90:
         dd:b5:4f:f0:90:74:c1:c2:e6:67:8f:ed:27:a9:3d:50:3e:d6:
         49:17:2e:33:1a:2a:e2:a6:a4:30:e0:e0:49:9b:27:cb:2d:4a:
         9a:a2:d6:66:77:d3:e4:87:3e:07:4d:d7:bd:77:6b:76:d1:86:
         b0:af:f5:5d:1b:37:ff:72:13:95:89:2c:aa:0e:d2:ea:72:e9:
         0c:3f:c9:7b:4b:1d:3b:7e:06:b8:33:53:e5:ff:cd:c0:26:c7:
         74:bb:b7:48:6b:86:35:73:e7:83:07:87:5d:08:b8:ea:17:6f:
         39:03:0a:2d:c5:90:e8:68:41:e4:0e:43:fb:17:17:47:35:a1:
         78:3a:b3:ee:9e:a6:2b:b0:e2:1c:40:c3:56:59:7c:b5:33:05:
         97:74:22:c2:a9:96:ee:48:9a:06:17:8b:a4:98:98:30:33:d2:
         f7:34:22:85:81:a4:1f:b0:a8:d0:7d:99:04:d2:40:19:dc:57:
         f9:e4:fa:db:bc:ae:ab:bf:05:6b:d2:8c:3e:e5:8b:e4:9e:94:
         53:9d:f7:37:45:87:df:b9:fb:a6:bd:35:d8:7f:e4:95:a2:d0:
         48:de:54:86:40:b1:9e:5e:f8:62:e3:00:cd:dc:f6:4a:c8:b1:
         96:4b:8a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----