Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/a6477774a8f42fb200e39cf07570e11367c50371.roa
File:                     a6477774a8f42fb200e39cf07570e11367c50371.roa (raw, json)
Hash identifier:          axmEsDNd0cPNusWPgk9IGJaqKkuPokEoh4nLWOpiOP8=
Subject key identifier:   68:8F:08:C5:C1:8C:E3:A6:44:E1:6B:DF:5C:0F:72:F4:5C:06:35:A7
Certificate issuer:       /CN=9fbfa45db21e97087d6b1789e849e148e8fceaeb
Certificate serial:       13BBF1
Authority key identifier: 3C:5C:5F:66:95:B7:9E:F0:B3:84:69:F4:66:61:8F:DA:5B:D4:A7:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fbfa45db21e97087d6b1789e849e148e8fceaeb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/a6477774a8f42fb200e39cf07570e11367c50371.roa
Signing time:             Sun 17 Sep 2023 08:30:00 +0000
ROA not before:           Sat 16 Sep 2023 08:30:00 +0000
ROA not after:            Mon 15 Sep 2025 08:30:00 +0000
asID:                     264778
IP address blocks:        200.59.184.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1293297 (0x13bbf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbfa45db21e97087d6b1789e849e148e8fceaeb
        Validity
            Not Before: Sep 16 08:30:00 2023 GMT
            Not After : Sep 15 08:30:00 2025 GMT
        Subject: CN=a6477774a8f42fb200e39cf07570e11367c50371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:db:1c:c1:83:30:4e:58:1f:fb:e5:21:8f:11:
                    31:f2:e3:44:9e:cc:f4:0f:63:9d:cf:47:2f:e0:68:
                    07:a8:45:27:71:33:37:15:06:95:ed:8b:23:fe:fc:
                    8f:d3:22:72:53:88:28:56:95:f6:e9:55:ab:a9:ab:
                    38:40:4b:a9:52:4a:73:cd:d7:97:9a:c5:23:5e:9f:
                    f8:20:50:c2:d4:3c:d7:96:af:32:f6:ce:4b:fc:7c:
                    2f:db:6a:62:54:9c:5f:f2:d1:7c:47:23:c8:76:d3:
                    7c:af:3d:38:55:2d:c8:07:83:b7:99:a5:6b:89:34:
                    d1:41:e9:60:b3:13:23:6c:01:0b:63:b7:30:b4:3f:
                    79:46:58:ff:bb:52:ab:c4:d4:c8:89:65:7a:1e:f7:
                    9d:8f:15:98:e2:d6:b4:0c:a1:4c:b4:58:4a:b9:58:
                    d9:35:90:9c:5e:87:10:32:2d:a0:2b:00:1c:ed:d1:
                    84:80:40:c2:11:e7:c7:96:73:92:54:af:9a:0c:61:
                    c8:7e:80:08:bf:8b:cd:9f:bc:75:c1:55:31:5e:31:
                    6c:5f:c7:f3:80:93:23:6d:2e:fc:4d:b9:ca:2a:ab:
                    1b:39:8b:35:2a:c2:4c:d0:7a:bf:2e:cc:14:6e:0d:
                    16:df:24:72:e4:c8:42:b1:70:28:39:d3:bc:6d:1c:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8F:08:C5:C1:8C:E3:A6:44:E1:6B:DF:5C:0F:72:F4:5C:06:35:A7
            X509v3 Authority Key Identifier:
                keyid:3C:5C:5F:66:95:B7:9E:F0:B3:84:69:F4:66:61:8F:DA:5B:D4:A7:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fbfa45db21e97087d6b1789e849e148e8fceaeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/a6477774a8f42fb200e39cf07570e11367c50371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/9fbfa45db21e97087d6b1789e849e148e8fceaeb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:67:43:92:94:20:91:74:04:ce:ae:f9:b2:98:aa:99:01:2e:
         42:ab:cd:6e:28:7e:50:eb:28:35:f7:d0:45:f2:85:e7:16:aa:
         d8:83:85:2b:79:cb:a5:4f:03:66:f2:95:ee:23:16:2c:2a:c6:
         56:2a:2f:f8:49:cd:f2:de:00:ca:61:d6:e6:cb:21:39:26:12:
         6a:92:71:82:46:01:9d:97:e0:35:2c:a2:6f:59:64:9e:63:05:
         2a:00:c2:c9:93:3c:8f:4d:da:e4:2b:02:70:72:95:81:99:2b:
         aa:56:ce:d1:ec:e0:5e:fa:19:4b:47:43:31:4b:13:9d:17:88:
         f5:46:eb:0e:6d:9b:f3:51:78:1b:9c:ca:e1:67:76:ad:cb:56:
         b4:ef:5b:ff:f2:16:b5:0d:9f:b1:97:9c:2a:d3:4a:f8:64:74:
         55:a6:9d:29:27:b3:af:02:1f:a0:45:ff:cd:65:cb:d9:99:ea:
         13:94:cd:54:ba:ad:93:95:bc:98:f0:7d:69:b5:c0:1e:4b:ac:
         ea:b4:ee:f8:05:86:09:89:6b:c1:3c:54:b2:fb:d1:21:1b:86:
         fd:f2:8f:35:d6:af:50:69:3b:20:e0:fb:92:a4:52:59:7f:48:
         23:e3:6a:39:03:20:85:d2:62:30:e8:ba:4f:49:db:16:d7:1b:
         1e:ea:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----