Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/354783d8146162ce26e7b2555494544888f88403.roa
File:                     354783d8146162ce26e7b2555494544888f88403.roa (raw, json)
Hash identifier:          dhO5OiINc69y7c3QurOuqXmTmS/mItc8bnZfHMvxWFo=
Subject key identifier:   80:92:E7:45:00:64:51:43:55:E7:EC:20:29:56:38:B8:06:FF:B7:9E
Certificate issuer:       /CN=64b3bc09828cc99775b2fc1d0a01fbd5c59ce506
Certificate serial:       120916
Authority key identifier: C9:C7:25:65:61:A4:18:31:42:B1:54:83:EE:32:85:84:66:7A:AC:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/354783d8146162ce26e7b2555494544888f88403.roa
Signing time:             Thu 04 Jan 2024 07:30:00 +0000
ROA not before:           Thu 04 Jan 2024 07:30:00 +0000
ROA not after:            Sat 03 Jan 2026 07:30:00 +0000
asID:                     269981
IP address blocks:        200.215.248.0/22 maxlen: 24
                          2803:4ee0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1181974 (0x120916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b3bc09828cc99775b2fc1d0a01fbd5c59ce506
        Validity
            Not Before: Jan  4 07:30:00 2024 GMT
            Not After : Jan  3 07:30:00 2026 GMT
        Subject: CN=354783d8146162ce26e7b2555494544888f88403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:19:99:e5:d6:20:68:2f:61:c3:c0:8b:be:
                    81:c4:83:58:85:4f:89:bc:d9:78:bf:87:f3:70:2c:
                    3e:34:98:53:3b:2b:97:6d:e3:cc:15:e7:29:6f:55:
                    2c:da:76:d9:39:a3:02:81:87:36:c9:5f:71:e4:81:
                    c7:0a:f9:f5:6f:39:56:cd:4b:c4:66:53:aa:b4:2f:
                    d6:ce:27:fc:4b:c8:fe:45:a3:58:28:60:9c:96:1b:
                    78:3a:5e:b3:cc:f3:44:3b:4a:0e:d1:e6:e7:04:0c:
                    df:1c:24:11:f7:6f:d9:ee:de:d1:24:cf:da:76:6a:
                    be:52:38:1a:69:a5:4c:d6:d1:1c:7b:82:bc:96:37:
                    fa:89:d5:90:9c:6d:6b:bc:67:9f:40:e7:58:f8:4c:
                    52:f3:63:2d:bd:57:c8:ee:df:1d:b2:27:88:a1:22:
                    72:56:4b:36:0b:40:d6:6f:00:53:91:17:46:db:78:
                    28:99:e5:bf:ae:1a:61:9b:f1:84:57:d6:a3:5f:62:
                    66:09:d9:1b:0e:d6:6f:c1:05:2c:6b:ce:4e:14:66:
                    7e:f1:82:02:6f:01:5e:d0:3b:9f:31:aa:ad:84:e8:
                    65:61:2f:65:1f:68:4b:9f:c3:8f:57:74:75:76:80:
                    08:e6:e3:f5:a8:a3:18:3c:de:77:f2:f2:8f:8b:ad:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:92:E7:45:00:64:51:43:55:E7:EC:20:29:56:38:B8:06:FF:B7:9E
            X509v3 Authority Key Identifier:
                keyid:C9:C7:25:65:61:A4:18:31:42:B1:54:83:EE:32:85:84:66:7A:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/354783d8146162ce26e7b2555494544888f88403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.248.0/22
                IPv6:
                  2803:4ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:08:14:f8:69:06:54:f9:d7:83:6b:a2:6a:0f:b5:dc:a7:3c:
         57:39:7a:f2:da:55:68:83:62:1c:f1:e3:b9:69:f7:f8:97:56:
         dd:70:1b:50:e8:b4:be:11:9e:ed:22:f0:bd:ed:6c:d1:1e:ae:
         dd:dd:5c:38:25:42:04:11:af:76:c5:ba:15:c8:5e:80:4e:1b:
         95:f6:96:a1:1b:ed:b7:d7:2b:5a:04:3d:1f:91:3c:ee:04:28:
         c6:78:79:78:32:2c:c7:fb:0f:17:ee:df:a3:b9:ea:e5:40:5c:
         a4:d3:6e:be:4b:56:8c:9a:e2:83:5d:f8:ba:19:fb:dd:ef:a6:
         b0:4d:6e:c5:80:9b:93:21:63:2a:33:e9:95:bf:3a:d8:ce:52:
         37:09:b7:a7:e0:56:2d:66:7d:da:b0:cd:71:83:4e:b2:9a:ee:
         e1:d8:99:ce:8b:c4:7b:b4:28:f5:87:0a:07:7b:66:12:75:e0:
         89:bc:b8:b9:09:42:8f:01:b4:9b:e5:2d:f8:ff:22:ca:d2:09:
         e0:94:63:f4:d9:ab:35:1e:91:78:aa:20:b1:52:e4:e7:2e:be:
         ea:5a:dd:94:ac:07:7f:8d:7f:7c:64:9b:1b:31:0e:f6:8c:67:
         80:d5:49:da:c7:4d:7e:7f:6a:89:05:1a:61:60:a6:1d:d4:a0:
         00:8d:fc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----