Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/e121add3a27526b95e4188140a3e325b5d1fe6a1.roa
File:                     e121add3a27526b95e4188140a3e325b5d1fe6a1.roa (raw, json)
Hash identifier:          YsW90xx0Y0IzMlC5TKXhlCNSTcuzo8fuVxylQeHdN7I=
Subject key identifier:   FF:4F:58:0B:E1:C7:35:4B:31:28:35:5F:0E:D0:E1:D6:5E:DA:57:40
Certificate issuer:       /CN=d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6
Certificate serial:       0919D3
Authority key identifier: 01:EC:ED:84:71:BF:F5:D7:89:74:1B:59:3F:86:DA:BA:09:70:64:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/e121add3a27526b95e4188140a3e325b5d1fe6a1.roa
Signing time:             Wed 19 Apr 2023 02:23:48 +0000
ROA not before:           Tue 18 Apr 2023 02:23:48 +0000
ROA not after:            Sat 19 Apr 2025 02:23:48 +0000
asID:                     269919
IP address blocks:        200.115.96.0/22 maxlen: 24
                          2803:42e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596435 (0x919d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6
        Validity
            Not Before: Apr 18 02:23:48 2023 GMT
            Not After : Apr 19 02:23:48 2025 GMT
        Subject: CN=e121add3a27526b95e4188140a3e325b5d1fe6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:e8:94:da:f7:5f:27:b0:2a:13:58:71:41:
                    d9:be:7b:5b:19:02:aa:ae:fc:8a:dc:b0:cc:f7:06:
                    53:8e:27:8c:13:de:78:37:61:8f:58:05:15:e6:9c:
                    13:85:37:e5:0b:20:8a:4c:1a:f1:42:f4:d7:25:4f:
                    2a:a6:ce:3e:76:d1:cb:df:fd:ef:6b:48:10:21:31:
                    59:3c:3b:0f:a7:e9:fe:64:b6:89:f3:eb:f5:ea:bc:
                    cc:2b:6f:5f:a1:9c:ad:6e:34:33:62:b9:71:23:52:
                    14:8c:db:f7:07:79:03:4b:9e:a4:ac:bd:b9:95:6f:
                    97:96:ff:6a:79:87:86:57:98:60:8f:e2:9a:6e:a1:
                    85:28:ae:96:47:53:69:ac:23:8c:a6:88:cd:f9:6c:
                    33:f3:33:e9:72:df:64:d2:37:b5:b6:0e:fc:c5:be:
                    51:b0:25:dd:43:f8:f0:ba:48:48:89:b6:79:01:a4:
                    95:a7:18:23:04:c6:47:de:27:2e:2a:2a:42:ca:af:
                    d5:e1:49:08:81:0c:41:d8:9a:f3:3f:0e:70:e8:96:
                    c0:75:33:33:e7:47:2a:69:d8:58:db:00:d3:4b:bf:
                    e6:e9:62:52:ae:6f:38:74:95:09:37:46:a7:9e:6e:
                    40:c9:d2:48:d9:18:26:85:ab:03:9a:bc:94:3f:77:
                    65:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4F:58:0B:E1:C7:35:4B:31:28:35:5F:0E:D0:E1:D6:5E:DA:57:40
            X509v3 Authority Key Identifier:
                keyid:01:EC:ED:84:71:BF:F5:D7:89:74:1B:59:3F:86:DA:BA:09:70:64:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/e121add3a27526b95e4188140a3e325b5d1fe6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.96.0/22
                IPv6:
                  2803:42e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:2c:6f:9c:68:9b:92:db:49:9c:8c:6d:eb:7c:6f:30:22:e3:
         7a:a6:bd:54:13:ec:4c:8a:50:1b:26:ee:22:e8:e1:66:8d:ad:
         1e:e2:f3:13:a4:94:9e:e4:52:cc:ab:96:d0:02:e5:cd:a5:1a:
         68:93:9c:64:85:eb:9c:3a:e3:6f:8e:9d:96:e3:e0:80:fb:16:
         5c:1a:0f:72:be:9d:7b:e2:09:21:94:b8:48:e9:0e:2e:c8:d8:
         a9:4c:ff:31:3e:a6:8f:e9:04:b6:90:1e:1c:f8:5a:78:89:8f:
         f0:9e:2c:9e:b9:ed:9b:3e:a0:d6:7f:ad:e6:cf:17:14:9f:5e:
         09:47:a3:dc:de:cf:6b:f2:0a:0c:59:b4:c3:7d:b1:97:d0:e5:
         d7:49:46:bd:40:11:c0:aa:93:52:d0:8f:79:0a:99:6a:8f:a1:
         69:db:13:c6:97:5c:2d:43:8a:61:a6:6d:ad:7d:47:8e:22:d0:
         a7:2a:20:35:c7:50:87:01:25:e6:21:69:c5:25:50:ea:da:4d:
         50:8e:fe:ca:99:84:ac:8d:27:d7:6f:c2:b0:1f:34:ad:71:3b:
         54:c5:91:01:f0:37:56:3e:12:e6:c3:87:f5:17:a8:32:77:19:
         bc:82:c4:22:4e:46:24:18:a0:25:52:37:65:cb:40:92:9c:30:
         ea:89:89:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----