Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/ac4f99100ff1d7ef174bfc7561bbc002608feee3.roa
File:                     ac4f99100ff1d7ef174bfc7561bbc002608feee3.roa (raw, json)
Hash identifier:          syyLd7s6hNtWBIcyjdbKudc+cKeKZSrhLVtF6SjNVKM=
Subject key identifier:   DA:C6:D2:E7:CA:CA:83:80:1E:A8:5A:7D:61:DB:07:B8:36:9B:94:D8
Certificate issuer:       /CN=6de3b6ab985c62f7bde582620020b65073aceec8
Certificate serial:       2263E3
Authority key identifier: D8:E5:77:6F:5E:C3:EC:8B:3F:27:2B:63:F3:03:DA:37:C5:97:6D:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6de3b6ab985c62f7bde582620020b65073aceec8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/ac4f99100ff1d7ef174bfc7561bbc002608feee3.roa
Signing time:             Fri 18 Aug 2023 22:13:41 +0000
ROA not before:           Thu 17 Aug 2023 22:13:41 +0000
ROA not after:            Mon 18 Aug 2025 22:13:41 +0000
asID:                     28007
IP address blocks:        186.96.64.0/20 maxlen: 24
                          200.125.184.0/21 maxlen: 24
                          190.114.240.0/21 maxlen: 24
                          190.52.96.0/20 maxlen: 24
                          2800:5e0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2253795 (0x2263e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de3b6ab985c62f7bde582620020b65073aceec8
        Validity
            Not Before: Aug 17 22:13:41 2023 GMT
            Not After : Aug 18 22:13:41 2025 GMT
        Subject: CN=ac4f99100ff1d7ef174bfc7561bbc002608feee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:67:b9:45:7c:15:b5:ae:b5:4b:36:c1:2f:c6:
                    0b:9c:43:c1:e3:16:24:63:d7:a1:99:57:7a:21:f9:
                    06:7b:97:a5:f4:56:25:4b:ad:16:26:80:ab:9f:20:
                    e2:da:2c:f6:9d:d2:89:58:81:3f:24:93:ee:56:9b:
                    93:81:d6:43:69:01:33:c6:f6:d9:ed:d7:25:44:9a:
                    49:13:14:47:97:e1:71:10:05:4d:e3:02:cf:9f:22:
                    92:81:07:79:5d:33:ce:4a:ae:61:55:da:78:80:ca:
                    1f:d5:31:25:58:40:be:1f:a3:53:2a:f1:f9:01:b6:
                    e5:d5:4d:cc:93:4b:cf:b4:e5:a3:92:49:e8:b5:0f:
                    f9:88:2e:cb:0b:94:5b:dc:0a:57:ce:d2:79:15:e0:
                    65:13:1b:df:2e:47:78:a0:b9:eb:f9:91:35:f9:ed:
                    da:db:7d:fe:74:5e:ba:0d:67:f4:60:eb:df:54:6d:
                    4e:fd:ab:f1:30:0e:42:86:30:68:6d:2f:35:da:10:
                    b7:c3:e3:6c:ef:fe:0b:67:26:9d:08:8f:2d:1e:a8:
                    72:b9:63:84:2b:f5:87:32:fd:92:28:04:1c:f6:61:
                    c4:70:20:09:76:d2:a9:22:fd:57:78:ce:99:9a:9a:
                    b4:af:da:60:6a:95:3d:ed:c5:51:7d:dc:3b:a4:3c:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C6:D2:E7:CA:CA:83:80:1E:A8:5A:7D:61:DB:07:B8:36:9B:94:D8
            X509v3 Authority Key Identifier:
                keyid:D8:E5:77:6F:5E:C3:EC:8B:3F:27:2B:63:F3:03:DA:37:C5:97:6D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6de3b6ab985c62f7bde582620020b65073aceec8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/ac4f99100ff1d7ef174bfc7561bbc002608feee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/6de3b6ab985c62f7bde582620020b65073aceec8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.64.0/20
                  190.52.96.0/20
                  190.114.240.0/21
                  200.125.184.0/21
                IPv6:
                  2800:5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:16:05:9e:b5:47:be:0c:0f:bc:b0:06:6e:e6:10:c9:43:92:
         08:ef:cc:cd:34:54:d4:17:e0:93:f1:bf:a3:0a:a9:d1:19:35:
         6c:ac:d7:48:2e:3a:31:c4:3d:46:aa:58:12:91:38:d7:c8:cb:
         91:9a:6f:59:26:eb:17:d1:f1:7a:39:2a:e4:20:26:e7:5c:7d:
         e2:c2:f4:b4:3a:36:16:24:81:7d:9e:af:c9:9a:a8:63:3f:f7:
         b5:51:03:ce:d7:9b:8e:ad:6c:66:10:01:74:2f:a2:6d:89:93:
         32:65:77:56:48:46:d4:bc:f5:9a:d4:58:ce:d8:45:ad:8b:f2:
         65:29:fd:e1:98:55:9c:90:28:b8:08:31:ce:15:24:9e:ae:8a:
         30:94:d4:24:8b:79:b1:52:51:43:3b:51:82:d5:e2:69:e4:2b:
         0d:fc:65:28:58:ca:73:f3:09:16:f5:aa:92:b5:17:f1:7b:76:
         11:c5:e7:0c:1f:d4:18:e7:46:90:ef:11:06:f3:95:25:a1:71:
         51:de:7a:b3:78:67:5b:11:fb:b9:40:3a:93:fa:cd:26:d0:f5:
         60:98:d1:bf:30:bd:cd:b4:0d:7e:4e:1a:ec:4a:0d:ae:8b:24:
         4a:b2:f2:e0:d6:97:15:3a:2c:57:06:97:f4:49:f7:02:55:ca:
         84:67:79:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----