Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1d170b9-8a92-4943-bf9a-80c50cc59f4b/b3231009afe403551c207aea64e5ec9ae206e23f.roa
File:                     b3231009afe403551c207aea64e5ec9ae206e23f.roa (raw, json)
Hash identifier:          I+pV8Ndii8g2OrcKuuku+FMnYP8wdAqglrvhy39ohK8=
Subject key identifier:   13:66:5D:89:15:2A:87:C6:FD:2F:60:E7:A5:E9:85:EF:A3:BA:09:E6
Certificate issuer:       /CN=951ba54fe923a031f2cdd9c6bc26d2f6606cd26f
Certificate serial:       11FCED
Authority key identifier: 3C:4C:E2:F6:4F:8D:E0:9C:36:F6:26:35:BC:41:58:A3:49:24:D3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/951ba54fe923a031f2cdd9c6bc26d2f6606cd26f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1d170b9-8a92-4943-bf9a-80c50cc59f4b/b3231009afe403551c207aea64e5ec9ae206e23f.roa
Signing time:             Thu 26 Oct 2023 07:30:01 +0000
ROA not before:           Thu 26 Oct 2023 07:30:01 +0000
ROA not after:            Sat 25 Oct 2025 07:30:01 +0000
asID:                     52378
IP address blocks:        200.124.112.0/21 maxlen: 24
                          2801:0:1d0::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178861 (0x11fced)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951ba54fe923a031f2cdd9c6bc26d2f6606cd26f
        Validity
            Not Before: Oct 26 07:30:01 2023 GMT
            Not After : Oct 25 07:30:01 2025 GMT
        Subject: CN=b3231009afe403551c207aea64e5ec9ae206e23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:e1:e1:a7:d6:0e:a4:8a:bd:14:00:d1:47:
                    e5:43:dd:95:fe:f9:80:a8:2e:44:33:f6:e0:34:3c:
                    8a:21:c8:2c:cf:26:21:21:e4:ff:47:48:26:b2:e6:
                    b0:c8:86:2c:ec:28:db:74:b8:f8:e7:8e:65:39:60:
                    fb:bb:0f:de:2d:10:84:f2:0e:13:a7:c8:60:35:3f:
                    00:05:a9:e0:90:f4:d0:f1:7d:4f:81:60:14:4a:55:
                    37:da:37:34:27:7d:02:2b:94:19:a2:65:41:8c:89:
                    0b:68:4f:63:ab:4d:78:21:49:d4:d4:87:a6:8b:29:
                    ea:86:4f:3e:93:3b:e9:55:9b:5b:dd:3c:08:da:80:
                    e0:46:13:bb:d7:b5:41:98:f5:a7:c3:d1:78:2e:7a:
                    23:27:5b:67:3e:b5:5f:49:8f:49:67:ab:fc:d0:b1:
                    2b:51:33:1c:27:61:0f:58:fb:ee:87:c2:49:6b:bc:
                    ab:dd:1e:c6:72:a3:2b:ad:fd:a8:8f:6b:06:f4:e9:
                    fd:bc:11:32:fe:f7:a3:9c:bf:af:25:eb:d2:34:95:
                    42:b8:64:e2:ad:fc:12:6a:4e:e6:81:be:35:93:c1:
                    6d:0f:fa:cc:17:49:b1:ef:6b:18:35:c4:f8:32:d2:
                    c8:4b:cd:59:c0:0e:fa:b2:21:31:3a:53:15:d2:ff:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:66:5D:89:15:2A:87:C6:FD:2F:60:E7:A5:E9:85:EF:A3:BA:09:E6
            X509v3 Authority Key Identifier:
                keyid:3C:4C:E2:F6:4F:8D:E0:9C:36:F6:26:35:BC:41:58:A3:49:24:D3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/951ba54fe923a031f2cdd9c6bc26d2f6606cd26f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1d170b9-8a92-4943-bf9a-80c50cc59f4b/b3231009afe403551c207aea64e5ec9ae206e23f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1d170b9-8a92-4943-bf9a-80c50cc59f4b/951ba54fe923a031f2cdd9c6bc26d2f6606cd26f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.112.0/21
                IPv6:
                  2801:0:1d0::/45

    Signature Algorithm: sha256WithRSAEncryption
         05:78:6a:5e:5d:3f:e1:5d:30:b2:df:45:2f:b2:7a:4b:a9:0a:
         b9:a1:63:1e:e9:f7:cb:9a:8d:75:be:1d:89:ff:93:87:c4:26:
         2f:88:b6:ca:66:5b:cd:ce:b3:d4:ca:1a:c3:9f:f5:07:35:43:
         f7:16:24:20:a2:06:3a:86:2b:87:3b:1a:b0:e3:11:7b:78:cb:
         61:81:09:2f:9b:a7:5f:44:52:22:56:9d:6d:5f:bf:6c:88:59:
         f8:06:82:55:e7:00:b7:15:82:1f:fc:aa:c4:af:b2:88:39:79:
         21:a4:7b:b5:b9:e0:8d:6e:4f:03:b1:26:ce:a5:86:79:2f:7f:
         5b:08:3f:40:e1:20:4e:36:60:f3:76:a9:70:43:01:13:f4:66:
         52:a0:ab:06:a5:02:81:1b:0e:b0:a6:20:d9:ee:be:97:b2:6a:
         85:2d:f1:d6:a2:27:a2:af:49:c7:a4:dd:83:73:a9:d7:2f:d4:
         f3:36:6f:b8:0a:cb:ed:4b:ac:22:a9:ac:8f:01:a2:7d:67:01:
         8f:3b:21:4d:81:b8:8b:c9:a5:f0:bc:3e:e4:73:8e:fa:9d:9e:
         9f:65:bb:f9:76:af:27:ef:cc:23:57:87:8b:d1:9a:90:31:fe:
         16:5a:d3:5a:5b:29:63:98:ba:b1:a5:19:52:89:8f:9b:aa:13:
         7f:e3:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----