Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/d564923a1ca3ac15d01bc29b191fca6dd17d4886.roa
File:                     d564923a1ca3ac15d01bc29b191fca6dd17d4886.roa (raw, json)
Hash identifier:          BxS+a6irnSUwgMdPnxLmOHCtouDBZ1l12AcKbdAp/7o=
Subject key identifier:   AD:EC:51:64:9E:56:99:62:B6:3D:66:21:2C:6D:85:B6:66:45:2F:2A
Certificate issuer:       /CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
Certificate serial:       239E69
Authority key identifier: C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/d564923a1ca3ac15d01bc29b191fca6dd17d4886.roa
Signing time:             Tue 19 Sep 2023 19:22:49 +0000
ROA not before:           Mon 18 Sep 2023 19:22:48 +0000
ROA not after:            Fri 19 Sep 2025 19:22:48 +0000
asID:                     52483
IP address blocks:        200.110.120.0/24 maxlen: 24
                          2001:13c7:6f80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2334313 (0x239e69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
        Validity
            Not Before: Sep 18 19:22:48 2023 GMT
            Not After : Sep 19 19:22:48 2025 GMT
        Subject: CN=d564923a1ca3ac15d01bc29b191fca6dd17d4886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:8c:4e:24:92:4b:f4:74:ca:2d:66:29:4f:
                    28:69:6b:01:c8:1e:4c:c7:86:46:9a:28:10:44:0b:
                    5a:e1:a4:c9:43:07:47:d9:fd:c7:a9:65:70:c8:8e:
                    16:36:42:b0:8e:ae:92:9b:7d:92:6a:fa:40:52:c6:
                    de:1b:50:3c:1a:64:39:c1:ad:2a:c0:98:5e:ba:32:
                    01:58:4a:fb:8b:b6:43:43:6a:b9:82:f2:a4:33:f5:
                    b7:ab:de:fd:f3:a8:b7:52:fc:50:f7:4f:b5:be:53:
                    2f:2f:21:90:f6:96:9f:cd:71:e9:c9:af:4f:2f:df:
                    d4:65:b7:d6:31:7b:23:0d:f4:42:71:0f:6d:2b:f9:
                    49:70:a6:17:0c:13:51:16:8c:1b:bb:83:65:bd:df:
                    2d:20:cf:8b:fa:b8:1b:1e:d6:d5:30:32:59:05:fc:
                    f5:11:b0:f6:28:54:ea:6c:3a:1f:7e:fc:53:54:5a:
                    47:3b:c0:1e:97:7f:f8:cd:94:b9:7c:ee:4e:93:98:
                    3a:47:d4:6b:6c:bf:c6:36:1d:2b:03:1e:71:70:95:
                    ab:89:5a:9e:35:4c:39:e1:9c:f1:f1:0b:79:be:e9:
                    9b:a8:84:a8:35:5a:87:f6:7f:d1:04:e7:b4:1a:b9:
                    c2:cc:b6:36:8c:d1:60:d5:23:65:ef:d7:6d:77:2d:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EC:51:64:9E:56:99:62:B6:3D:66:21:2C:6D:85:B6:66:45:2F:2A
            X509v3 Authority Key Identifier:
                keyid:C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/d564923a1ca3ac15d01bc29b191fca6dd17d4886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/c6e6abb9e295aea3473895245eb2e4f25f175b38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.120.0/24
                IPv6:
                  2001:13c7:6f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:7b:2e:2c:8e:93:f1:72:6b:cf:48:ec:49:2e:f2:a6:58:d2:
         4e:04:6b:a7:08:d4:11:89:8b:94:9d:4e:61:ca:01:ea:3f:71:
         5c:e0:6c:27:07:5b:f8:28:90:3d:1e:72:41:14:8d:e9:ff:85:
         ec:34:6e:4e:e1:e2:64:c3:6e:6c:cc:71:a0:e5:39:ed:e3:0c:
         da:49:a3:de:7b:a8:ab:dc:e2:dc:12:e7:1d:4b:0b:0d:99:74:
         34:54:9d:e4:8e:4f:98:00:11:78:a7:83:cc:13:df:28:45:47:
         ed:58:fa:0e:2c:4b:52:d0:05:0d:e4:60:30:91:e5:94:cf:a9:
         09:4f:0a:2c:eb:a5:f5:ff:2d:37:21:a6:f9:bd:c2:d6:8e:d9:
         05:46:e5:49:bf:5f:1d:58:41:77:8f:c3:0e:31:cd:e8:6b:d2:
         4e:5c:b3:b2:ba:c0:40:90:f3:48:a6:e1:0e:b2:de:b0:31:46:
         03:a0:69:14:1c:e3:de:69:ad:69:ca:db:b7:59:09:99:01:3a:
         68:3f:a6:56:91:92:4a:8e:b9:35:c1:5b:88:56:da:04:3f:85:
         10:a2:6f:e3:0e:ba:2e:c8:9f:68:98:02:56:12:6e:7c:a4:16:
         7c:a8:9b:bb:70:ba:b0:29:97:b5:e2:a3:12:94:22:ad:c9:a5:
         1f:01:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----