Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/c8e25f86e74f5f378a6f8ab8ffbf1346535d4ceb.roa
File:                     c8e25f86e74f5f378a6f8ab8ffbf1346535d4ceb.roa (raw, json)
Hash identifier:          GkL0dG73IvcxbXf7FJ0bBfXI5MqUqZBq/KSzfRmtHQI=
Subject key identifier:   D4:21:E0:68:A3:B9:4B:4C:0F:96:EB:13:05:60:F5:18:72:9F:15:69
Certificate issuer:       /CN=fd59a2161d14de91096d6cf6cd532d586f95771c
Certificate serial:       1D50D1
Authority key identifier: 45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/c8e25f86e74f5f378a6f8ab8ffbf1346535d4ceb.roa
Signing time:             Thu 24 Aug 2023 08:30:00 +0000
ROA not before:           Wed 23 Aug 2023 08:30:00 +0000
ROA not after:            Fri 22 Aug 2025 08:30:00 +0000
asID:                     269924
IP address blocks:        207.191.164.0/22 maxlen: 22
                          2803:12e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921233 (0x1d50d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd59a2161d14de91096d6cf6cd532d586f95771c
        Validity
            Not Before: Aug 23 08:30:00 2023 GMT
            Not After : Aug 22 08:30:00 2025 GMT
        Subject: CN=c8e25f86e74f5f378a6f8ab8ffbf1346535d4ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:b4:0c:ea:3b:b7:4e:4d:4a:f4:c1:7e:5d:
                    6e:29:10:c9:d1:04:ed:a2:25:04:c5:e2:c3:6e:17:
                    ed:97:f4:ec:15:7b:a8:ac:87:ff:54:7c:6e:43:53:
                    c2:e6:07:b3:82:d9:80:d9:d0:5e:a5:54:0e:04:83:
                    26:d4:d6:0c:d6:95:d8:3a:ad:67:8f:b0:ba:76:ef:
                    d0:72:60:98:7e:11:35:94:96:16:a3:64:d5:d6:ba:
                    24:8a:d2:5f:66:8b:83:e9:a7:aa:7e:83:e2:d5:fd:
                    8b:4c:2b:92:dc:21:30:42:32:4e:fa:69:e5:0f:ec:
                    28:7c:07:ca:e8:2f:8f:05:84:ed:2c:61:5f:e8:24:
                    dc:c6:35:f9:4b:d2:2d:1d:41:7b:eb:5f:e0:13:1e:
                    eb:26:da:d7:42:ea:eb:55:18:da:15:b2:9a:03:c0:
                    a7:94:7b:88:17:5e:73:c2:e7:63:b7:0b:2e:05:ca:
                    14:e1:e3:45:cb:9f:7b:e8:9c:9c:25:9b:d0:08:96:
                    66:3a:11:fa:30:b7:c3:b3:01:b9:a9:e1:1a:c2:e2:
                    9b:f7:6e:47:6b:e8:a8:76:e7:c0:52:bd:40:00:ef:
                    59:8a:c0:51:3e:93:62:d5:47:c1:c1:60:02:4b:a6:
                    cf:97:07:af:98:d2:5f:74:bb:41:58:a3:e3:b2:82:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:21:E0:68:A3:B9:4B:4C:0F:96:EB:13:05:60:F5:18:72:9F:15:69
            X509v3 Authority Key Identifier:
                keyid:45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/c8e25f86e74f5f378a6f8ab8ffbf1346535d4ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/fd59a2161d14de91096d6cf6cd532d586f95771c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.164.0/22
                IPv6:
                  2803:12e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:34:f6:cf:c3:2b:85:6b:87:6b:e8:5d:c0:d8:6d:36:7d:81:
         1f:6a:5f:79:4f:ad:f3:96:bc:2a:e6:98:71:41:81:c5:88:55:
         62:4d:da:d5:59:b2:d8:07:9d:0c:88:a7:d3:d5:86:c7:d1:f0:
         ff:68:41:35:c5:88:0b:73:ef:cc:4a:88:da:7d:58:ef:45:13:
         ed:54:3b:88:1a:38:d6:03:22:d4:9e:04:95:61:d9:1e:31:e8:
         ec:16:f4:ed:40:4f:94:bc:ed:18:8f:c2:95:12:4c:b9:30:7a:
         4b:69:cc:72:56:e7:df:2d:8d:7a:ae:2c:5c:2c:54:25:da:39:
         26:31:42:e5:64:d2:6f:79:75:08:08:50:98:0f:1c:52:db:00:
         71:70:0a:d7:70:cc:32:e9:ce:12:59:e1:02:6d:56:b3:93:f2:
         03:7a:f2:cd:65:10:97:a9:98:13:5e:a4:58:c8:e3:b2:e0:68:
         3a:44:ee:94:c1:ac:61:2c:db:0e:55:de:59:f3:1b:44:09:46:
         f8:d7:48:87:4c:07:6a:47:76:58:ea:04:8a:72:9a:b7:17:a0:
         f1:f1:0a:6a:f3:cf:7c:61:71:21:a6:ea:fc:cc:d2:7d:e7:24:
         37:00:26:37:3f:80:4a:7e:b9:0e:8d:da:0a:d6:43:fd:b5:16:
         ef:d6:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----