Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/8e669ee20278baee19db85dce3f8cff71440e80a.roa
File:                     8e669ee20278baee19db85dce3f8cff71440e80a.roa (raw, json)
Hash identifier:          PsTb+7vsK/zxR32BiuFmYrlfjFGh6hHewuVpdb5TR0s=
Subject key identifier:   18:48:81:AB:0E:1A:0A:46:ED:91:F0:DF:5E:9F:FC:CC:9F:DD:1C:DD
Certificate issuer:       /CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
Certificate serial:       239BA7
Authority key identifier: C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/8e669ee20278baee19db85dce3f8cff71440e80a.roa
Signing time:             Tue 19 Sep 2023 19:22:49 +0000
ROA not before:           Mon 18 Sep 2023 19:22:48 +0000
ROA not after:            Fri 19 Sep 2025 19:22:48 +0000
asID:                     52482
IP address blocks:        200.1.6.0/24 maxlen: 24
                          2001:13c7:6006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333607 (0x239ba7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
        Validity
            Not Before: Sep 18 19:22:48 2023 GMT
            Not After : Sep 19 19:22:48 2025 GMT
        Subject: CN=8e669ee20278baee19db85dce3f8cff71440e80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:5d:a6:8e:74:15:ba:a5:8d:54:e8:55:e6:
                    49:78:e1:2e:5b:ab:5b:a9:78:4f:80:46:13:7c:e2:
                    b3:65:43:31:c2:82:48:2a:57:2b:b5:1c:48:bf:15:
                    0a:c9:4f:91:a3:20:5d:9b:b3:44:02:9d:f4:2e:54:
                    27:81:cb:4a:00:47:10:9e:a2:b5:66:a9:98:7b:bf:
                    49:da:b1:8f:7a:ca:c2:56:c4:23:a3:35:5d:e9:5b:
                    db:31:3f:eb:f6:fb:a4:fc:40:e8:8c:1d:b7:db:dd:
                    eb:a9:88:ba:c2:f0:59:a8:f4:0a:98:b9:a5:90:50:
                    e1:e1:35:69:db:63:37:02:be:b0:b4:38:3c:e8:2e:
                    e7:98:a4:78:7a:87:5a:35:0a:25:44:b0:cb:b9:ae:
                    29:75:55:3e:17:df:0d:cf:2c:cc:81:c0:74:06:3b:
                    53:0b:37:4e:ea:e5:0c:18:a0:32:21:9f:f8:66:74:
                    90:0f:c7:43:41:7e:82:41:5e:11:af:92:0d:49:30:
                    aa:46:e9:53:0d:b3:64:3d:36:96:f1:3e:9b:e6:e3:
                    e7:73:2d:14:23:7e:0a:37:0d:5c:cf:fa:fa:31:bb:
                    99:17:8f:64:ab:fd:52:fd:90:42:73:34:40:2f:79:
                    7e:e1:fb:8f:4c:54:59:6c:f8:ee:27:71:9c:c0:86:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:48:81:AB:0E:1A:0A:46:ED:91:F0:DF:5E:9F:FC:CC:9F:DD:1C:DD
            X509v3 Authority Key Identifier:
                keyid:C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/8e669ee20278baee19db85dce3f8cff71440e80a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/c6e6abb9e295aea3473895245eb2e4f25f175b38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.6.0/24
                IPv6:
                  2001:13c7:6006::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:16:44:89:eb:7d:48:f9:e5:a7:96:02:65:13:bf:b7:db:4e:
         e4:0e:bb:b3:85:cc:63:07:c5:fd:cd:96:6c:3f:61:92:2b:e7:
         2c:2b:1c:cf:1c:38:44:93:6e:b9:b2:52:e5:d5:5d:15:6c:45:
         90:07:22:18:dc:6e:4b:f3:fc:17:7b:87:0c:73:62:d0:43:2f:
         23:26:6f:3e:73:c3:d2:2e:b9:e7:d8:9c:4e:3b:6c:3f:ba:5e:
         05:44:29:34:ae:97:f8:19:45:d6:d9:5f:0b:2e:27:c6:b6:6e:
         96:03:2b:2a:4f:68:eb:4b:bb:bb:66:ed:a9:88:4e:8c:4c:8c:
         92:df:fe:50:ca:84:34:22:d4:cf:8a:58:33:69:69:95:71:b9:
         b9:78:d6:e9:54:fc:9b:00:72:8c:3d:3e:69:5c:5e:59:25:1b:
         aa:5b:38:c8:1c:6e:41:b1:97:a0:79:ed:8a:50:67:4e:b8:7b:
         c1:57:de:b5:fb:d2:fe:4e:de:23:c2:c8:13:3a:cd:75:94:30:
         52:6c:78:8f:27:7d:91:3a:ab:9b:d0:e5:2c:11:26:95:7f:4b:
         e9:fa:ec:b0:b6:d2:c1:b4:d7:2b:66:2e:cc:1e:ee:f4:58:87:
         a3:7a:19:59:0c:93:a6:95:93:38:9d:11:b5:e3:f2:5d:60:98:
         12:65:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----