Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/36f04478a83bf2078f3b6d645dfd172fc7084755.roa
File:                     36f04478a83bf2078f3b6d645dfd172fc7084755.roa (raw, json)
Hash identifier:          v8yP31PzTs+OfeJXxzCASodejx97K78/CckYW9u5vpI=
Subject key identifier:   4A:29:28:D9:DF:EA:C1:58:E4:73:AC:AE:29:16:AA:E2:5B:81:C3:89
Certificate issuer:       /CN=4213629bff1656b039692adab742735c1703764c
Certificate serial:       28D7DA
Authority key identifier: 14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/36f04478a83bf2078f3b6d645dfd172fc7084755.roa
Signing time:             Mon 19 Feb 2024 17:00:42 +0000
ROA not before:           Mon 19 Feb 2024 17:00:37 +0000
ROA not after:            Mon 19 Feb 2029 17:00:37 +0000
asID:                     64124
IP address blocks:        200.25.80.0/24 maxlen: 24
                          2800:1e0:2430::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2676698 (0x28d7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4213629bff1656b039692adab742735c1703764c
        Validity
            Not Before: Feb 19 17:00:37 2024 GMT
            Not After : Feb 19 17:00:37 2029 GMT
        Subject: CN=36f04478a83bf2078f3b6d645dfd172fc7084755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:ba:e8:80:1d:67:e9:c9:57:c1:48:8b:52:
                    3f:df:49:7b:c2:06:a0:ba:99:15:b3:fc:b5:a7:a8:
                    31:e9:34:07:30:d1:d8:63:52:05:81:35:4b:6b:d6:
                    01:ad:e7:ab:95:af:13:77:19:4f:45:97:7c:c4:47:
                    ba:3d:53:16:26:23:0b:f0:7c:f0:e0:93:0c:a5:05:
                    e0:33:c2:98:ed:5f:9e:7e:da:a8:c2:75:17:36:a6:
                    4e:c1:3b:07:f2:e9:e4:47:a9:25:29:24:67:47:52:
                    38:1d:5d:f5:71:0c:89:66:f4:e6:11:5d:c0:b7:ef:
                    91:b1:82:05:b6:77:d6:b8:6e:ff:c9:9b:42:12:34:
                    5e:fe:80:8d:4f:87:08:9a:0e:84:96:4f:96:37:21:
                    8c:21:3b:94:26:c6:70:97:11:fb:6b:f0:c3:59:00:
                    60:0a:dd:b3:2f:d2:e1:25:14:90:e4:13:0f:9b:79:
                    29:58:9a:d4:bd:af:6e:44:7e:0b:52:11:cc:de:3c:
                    54:a0:b9:e6:c2:77:86:64:57:b0:1d:83:70:8d:1c:
                    07:31:bd:94:04:9f:54:71:8f:36:8c:fa:6b:2d:f1:
                    e8:df:ae:26:26:40:a0:d0:b3:9b:43:d2:86:4b:ee:
                    be:ba:a9:dd:54:e0:a3:3b:a9:9e:13:7e:d9:06:fb:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:29:28:D9:DF:EA:C1:58:E4:73:AC:AE:29:16:AA:E2:5B:81:C3:89
            X509v3 Authority Key Identifier:
                keyid:14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/36f04478a83bf2078f3b6d645dfd172fc7084755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4213629bff1656b039692adab742735c1703764c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.80.0/24
                IPv6:
                  2800:1e0:2430::/44

    Signature Algorithm: sha256WithRSAEncryption
         6e:52:4c:41:6c:c6:7b:c1:69:1b:77:f9:0d:83:b2:bd:ec:fd:
         8b:01:86:c8:9c:11:8e:38:a2:f5:81:89:6e:ae:4c:77:d6:a8:
         f6:ff:da:c8:bc:25:75:19:ef:92:bd:1a:25:54:47:63:ae:ca:
         e1:89:3b:8c:47:11:97:24:4c:72:05:1a:bc:c4:31:0e:89:48:
         28:87:49:2c:f5:c3:46:78:4b:d8:47:c1:75:a2:15:ba:94:6e:
         e3:e0:b0:64:7b:88:50:dc:7b:12:03:d1:22:95:f2:67:25:61:
         e0:b6:7f:18:bd:11:4d:70:c6:ca:da:23:b6:4d:2f:0d:d7:73:
         f3:1b:5e:33:34:77:f3:e7:6a:6d:9a:f5:89:0e:c9:24:ee:05:
         60:1e:57:2a:1b:43:ac:6a:b6:e8:f6:37:e6:bf:78:27:1e:c8:
         e8:29:27:c2:2e:e9:8f:4c:9a:6a:4d:cd:0d:82:bc:36:12:20:
         4c:39:c0:db:f1:e3:50:eb:f0:1a:9d:b8:99:3c:91:f1:3e:29:
         4e:d3:87:a6:ed:ca:d1:6d:7b:43:00:14:68:f9:09:2e:de:3b:
         ef:85:f7:23:2b:1c:50:40:85:3f:b8:c3:d1:7a:52:74:c9:7a:
         02:f2:2b:a0:0b:1f:60:61:31:48:24:78:f2:09:97:6a:ea:c6:
         e8:2e:57:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----