Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/af890463c5d4cd25b66245dc617a1dbea3085792.roa
File:                     af890463c5d4cd25b66245dc617a1dbea3085792.roa (raw, json)
Hash identifier:          pPnN5NBg7Xkr9TYvLdYMteOBwNV02RZqEPOFj3TLb0o=
Subject key identifier:   E5:95:F0:80:84:52:B8:0C:02:3B:81:50:FD:B6:1F:74:C3:F9:20:A9
Certificate issuer:       /CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
Certificate serial:       1E5ED0
Authority key identifier: C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/af890463c5d4cd25b66245dc617a1dbea3085792.roa
Signing time:             Mon 13 Feb 2023 20:43:36 +0000
ROA not before:           Tue 23 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27814
IP address blocks:        200.110.112.0/20 maxlen: 24
                          2001:13c7:6f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990352 (0x1e5ed0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
        Validity
            Not Before: Mar 23 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=af890463c5d4cd25b66245dc617a1dbea3085792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:da:94:7b:8c:f8:06:29:49:78:44:68:0d:
                    7a:ab:42:21:87:ef:b6:bd:68:9a:e7:95:74:4e:e5:
                    1d:fb:8f:52:2b:f7:d5:07:fc:df:c5:cf:8f:96:43:
                    da:64:0c:2e:69:9b:77:b3:83:f9:e3:4c:70:b9:88:
                    76:5f:c9:6e:cd:82:23:b9:05:36:52:ef:3b:a6:af:
                    87:b8:c8:0a:4c:bc:5f:6d:c6:1e:e4:77:10:3d:41:
                    03:d2:ae:28:e5:e7:ab:75:1c:f9:eb:e0:fb:f1:fc:
                    ee:7a:48:2c:92:a9:01:e7:ca:c8:8c:7b:c4:50:7a:
                    da:30:eb:4a:51:9e:a2:10:b7:57:fa:73:1f:85:4c:
                    d3:a9:03:fe:29:dc:00:39:84:c5:ee:5e:86:93:95:
                    f0:2b:13:c7:42:af:dc:6e:b5:10:62:7a:10:25:57:
                    21:62:ab:cc:e3:52:cd:ef:ad:1c:cb:86:48:d2:05:
                    b9:ca:1d:55:ae:59:b2:e9:63:27:2c:a4:a6:34:2e:
                    ea:d6:b2:03:07:c6:86:50:d7:e2:39:88:df:b6:6d:
                    0a:e8:9c:5f:43:fb:be:0f:95:11:39:78:b9:8c:99:
                    49:e2:36:dd:65:83:46:ed:9e:d6:94:88:8f:4e:8c:
                    8a:4b:b0:55:bb:84:19:c7:ee:43:31:96:4d:4b:c6:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:95:F0:80:84:52:B8:0C:02:3B:81:50:FD:B6:1F:74:C3:F9:20:A9
            X509v3 Authority Key Identifier:
                keyid:C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/af890463c5d4cd25b66245dc617a1dbea3085792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/c6e6abb9e295aea3473895245eb2e4f25f175b38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.112.0/20
                IPv6:
                  2001:13c7:6f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:7e:e8:ab:69:1f:93:53:0e:05:25:81:ba:0e:62:9c:a1:
         a0:62:a7:43:51:51:b3:90:cb:f2:3e:31:90:3b:de:fb:75:8e:
         2b:94:f4:56:87:49:68:17:40:bb:39:6e:54:7e:57:a7:93:88:
         56:b8:e1:40:3c:2c:f7:c6:4e:00:0b:71:c4:f7:62:22:cf:15:
         bb:e9:91:75:05:16:2e:85:bb:56:12:d1:71:2d:1a:3b:3a:43:
         cd:ab:ff:cd:1a:a9:eb:1e:12:f4:73:aa:72:8f:c0:3e:e1:f3:
         84:ab:79:8e:95:28:24:29:b8:0c:90:1b:58:e1:03:7c:6d:a9:
         06:b1:78:5a:16:a1:69:9f:6c:1a:38:b8:66:b2:20:e9:7a:9f:
         e0:24:1e:97:a7:dd:92:91:ed:ec:bb:d6:e8:62:24:54:11:d6:
         1b:ff:c9:c0:45:d7:6f:39:fe:8e:28:c9:cd:58:96:52:ec:e8:
         a2:16:b3:c6:67:eb:cb:49:7b:89:04:55:81:8f:5b:fd:ea:d2:
         a8:33:74:2b:2d:0f:df:14:d6:68:ea:92:35:d0:58:3d:4e:98:
         a3:1e:7f:f1:6f:e9:0c:76:37:78:81:d3:d2:32:4d:ae:f7:9c:
         86:c0:a7:75:62:3f:00:93:02:22:ed:ac:0d:cc:48:c2:a8:04:
         4a:aa:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----