Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/280a03f8133d515d5d90bc36e29aa5cc6f7c7309.roa
File:                     280a03f8133d515d5d90bc36e29aa5cc6f7c7309.roa (raw, json)
Hash identifier:          S8qigArgkZkR1MZ0t5LR3KJjP3iHWEaQ0PyA+i317SE=
Subject key identifier:   D1:77:72:19:3E:E2:C1:D2:C8:CD:04:E6:C3:B3:40:4D:EE:A8:EE:91
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       24E7E3
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/280a03f8133d515d5d90bc36e29aa5cc6f7c7309.roa
Signing time:             Tue 26 Sep 2023 17:12:55 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     264801
IP address blocks:        200.93.226.0/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2418659 (0x24e7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=280a03f8133d515d5d90bc36e29aa5cc6f7c7309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:df:c3:63:e3:6e:94:df:c9:b5:ae:5c:c2:
                    c3:6d:57:fd:a6:ca:01:8f:07:fc:49:e8:c5:90:43:
                    37:e8:d0:3a:6a:18:d5:88:29:f7:76:8b:27:66:49:
                    ae:be:90:e4:b1:22:ee:a2:11:93:29:d1:89:61:73:
                    e9:6c:44:d5:14:3b:fa:62:cc:42:92:e6:58:8b:d6:
                    c0:f7:54:b4:f3:45:bf:29:4e:62:1d:4d:c9:39:99:
                    89:f1:c2:b0:c9:02:cf:3f:20:11:77:74:fa:26:aa:
                    51:d4:1d:aa:3d:8d:09:11:16:f4:a9:c9:e7:8e:b5:
                    19:8e:72:82:fd:c8:79:17:64:b8:2a:62:da:3c:3d:
                    2f:2a:bc:47:b0:70:5a:be:7d:5d:3c:1a:2e:59:95:
                    52:9e:ac:a5:74:33:b9:39:37:f1:e2:2e:6c:f9:e9:
                    7c:1e:a3:98:1b:b8:6c:4e:eb:62:34:65:d8:44:e9:
                    81:18:da:58:07:b2:bd:5e:21:1c:bf:8a:78:6b:db:
                    d5:7a:a1:18:bf:c9:b7:9b:1d:6a:93:52:9f:94:46:
                    94:c2:bd:8a:4e:5d:f2:bd:15:3e:25:2e:2f:b6:e3:
                    5f:f1:a7:51:b6:31:2b:35:7d:43:3d:5a:5a:da:89:
                    f4:2f:57:05:b4:d7:8e:dd:08:45:54:4a:57:3e:07:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:77:72:19:3E:E2:C1:D2:C8:CD:04:E6:C3:B3:40:4D:EE:A8:EE:91
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/280a03f8133d515d5d90bc36e29aa5cc6f7c7309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.226.0/25

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:94:c2:83:76:63:17:f1:38:66:db:07:12:bd:6f:77:52:
         e2:71:bd:b7:18:c9:60:a5:3e:af:70:46:6d:2b:0f:6b:db:d2:
         ab:34:cf:64:9a:8a:01:c9:ae:3c:5e:ea:4a:ff:54:84:be:13:
         0a:bf:28:91:92:e9:74:2b:3d:7f:8c:71:e4:21:22:1f:45:3d:
         06:21:60:0e:a2:56:b6:70:98:09:87:af:2f:f3:56:52:4d:f9:
         6f:b5:98:c4:25:36:ce:93:7e:a4:09:eb:a6:c5:86:74:b6:ee:
         b1:8a:4c:02:97:16:00:ed:66:c3:0e:07:cf:22:3a:fc:1f:f3:
         5b:57:40:98:68:81:7b:0e:9d:7c:a3:ea:2a:18:66:f9:a0:4b:
         91:fe:82:39:43:55:3b:c4:45:02:56:94:bf:b8:5c:4e:32:70:
         16:c4:4c:92:0d:0f:c6:83:03:ec:a5:bd:ce:10:ae:d2:ba:a2:
         a9:72:cc:6c:87:01:8f:87:f3:85:f2:71:cd:f9:90:c1:1a:ad:
         85:99:1b:c4:4e:6b:21:13:67:a8:5c:bc:83:bb:fa:be:77:77:
         e6:c6:f4:0c:eb:f4:8a:28:a2:6b:c5:15:b6:f7:10:28:2c:5b:
         da:8c:fc:13:ea:9c:8d:a0:34:63:77:15:94:0f:59:ca:ff:17:
         29:cd:72:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----