Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/dcbbdf63c81b50601bd3fdfe109a4d9a550c1ea7.roa
File:                     dcbbdf63c81b50601bd3fdfe109a4d9a550c1ea7.roa (raw, json)
Hash identifier:          c76J9yVn2YCef/QTRhXD5ZTW1aK6bx4Xd6oGPu4QSmk=
Subject key identifier:   06:77:65:C2:12:18:AA:D3:B6:83:D3:EB:AD:08:D6:57:16:7A:A5:A7
Certificate issuer:       /CN=d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6
Certificate serial:       08D671
Authority key identifier: 01:EC:ED:84:71:BF:F5:D7:89:74:1B:59:3F:86:DA:BA:09:70:64:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/dcbbdf63c81b50601bd3fdfe109a4d9a550c1ea7.roa
Signing time:             Mon 10 Apr 2023 19:30:38 +0000
ROA not before:           Sun 09 Apr 2023 19:30:04 +0000
ROA not after:            Thu 10 Apr 2025 19:30:04 +0000
asID:                     269919
IP address blocks:        200.115.96.0/22 maxlen: 24
                          2803:42e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579185 (0x8d671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6
        Validity
            Not Before: Apr  9 19:30:04 2023 GMT
            Not After : Apr 10 19:30:04 2025 GMT
        Subject: CN=dcbbdf63c81b50601bd3fdfe109a4d9a550c1ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:a0:64:22:73:53:4b:a1:fb:1a:68:1b:34:
                    f9:63:21:fc:4c:60:59:05:10:d2:2d:45:c6:ff:e4:
                    78:c9:2e:96:e2:2b:cf:fd:9f:c9:50:ae:9f:a1:c5:
                    39:3a:7c:2d:70:df:12:89:37:a2:e6:60:fd:db:7c:
                    30:ed:b5:bb:56:bb:24:b2:db:32:bd:18:5b:6f:93:
                    5d:8e:ae:c3:a8:ad:a5:ef:03:48:3e:1d:5f:dd:85:
                    38:1b:f5:c0:fa:b7:a2:d7:72:23:df:37:74:38:d4:
                    c3:d3:92:bf:3f:b3:bc:88:60:c1:4e:cf:07:17:86:
                    42:cf:1b:b7:67:d4:cf:c2:94:7b:a3:14:db:4f:71:
                    01:f6:9a:c6:e3:ec:fb:da:20:1f:fc:9a:ed:c0:65:
                    81:7a:8d:73:fb:62:53:67:a4:03:e2:b0:de:43:ef:
                    2a:65:6a:66:0e:3b:ac:73:5c:e1:32:cf:35:51:cf:
                    aa:4e:71:f2:4c:2e:f0:cc:b3:2e:9c:01:59:97:d0:
                    f3:c2:d0:22:e0:e7:25:e1:08:71:54:b1:b0:fe:f2:
                    15:d7:ce:a1:4e:3d:bb:97:bd:f9:95:1f:b2:60:af:
                    8c:16:5e:76:fa:04:16:65:4d:4f:82:63:14:3c:dc:
                    87:b8:cc:ee:ec:3c:20:2d:ed:ad:f0:da:e2:25:60:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:65:C2:12:18:AA:D3:B6:83:D3:EB:AD:08:D6:57:16:7A:A5:A7
            X509v3 Authority Key Identifier:
                keyid:01:EC:ED:84:71:BF:F5:D7:89:74:1B:59:3F:86:DA:BA:09:70:64:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/dcbbdf63c81b50601bd3fdfe109a4d9a550c1ea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.96.0/22
                IPv6:
                  2803:42e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:92:31:16:f1:ac:4d:ee:2c:43:32:a4:6e:62:41:c9:4e:d7:
         d9:53:34:f9:87:55:d9:d5:34:4b:00:f3:e3:7a:28:2d:ba:68:
         58:d6:1f:2d:df:aa:e1:27:98:a1:1b:4c:bf:b8:f5:e2:7e:c1:
         e2:ec:5f:8a:24:df:8a:aa:4d:a8:c6:84:d3:6c:89:07:70:2f:
         6a:4b:83:80:1c:f6:20:94:29:24:f0:30:c2:99:ab:12:38:93:
         0a:80:4e:49:db:9f:bc:60:95:3c:bf:97:f1:2c:86:c5:26:56:
         9e:39:fd:79:b5:b5:cf:b1:02:6a:3c:af:2b:1a:b7:e6:2d:ba:
         90:c0:b0:90:80:81:d6:64:06:c4:97:08:f7:6a:e1:c7:7a:9a:
         6d:a3:f0:2c:2c:82:24:89:80:9d:8d:20:ca:92:04:5f:53:42:
         cc:ac:92:b9:8b:5d:a0:23:88:4e:28:05:01:22:77:72:f6:01:
         61:c2:cf:b4:87:4f:b2:f2:76:c4:13:84:09:b1:cb:1e:08:73:
         9f:c4:7b:32:5c:81:df:fb:84:a8:68:5f:2f:7b:d1:ba:3b:0e:
         fe:da:f6:6d:7c:6a:4c:c1:c1:65:0c:95:c4:f1:ec:12:fe:3e:
         1e:d5:1b:d1:44:ab:3f:75:c8:2d:89:45:91:f1:7a:0a:65:58:
         16:48:f3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----