Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/a02aeeaa5b43e576b3a3cb5caa7ce38c8df314fe.roa
File:                     a02aeeaa5b43e576b3a3cb5caa7ce38c8df314fe.roa (raw, json)
Hash identifier:          j8eFzUYXLPt3vhEIZ4Jl1nBNaNxv0wcGZciHTh4Texk=
Subject key identifier:   B4:CA:19:FC:DD:20:39:C0:87:36:84:78:7D:46:3F:0D:35:A6:53:1D
Certificate issuer:       /CN=893407337be5ac09529c27b6e17d4d0664581246
Certificate serial:       1FECE8
Authority key identifier: 1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/a02aeeaa5b43e576b3a3cb5caa7ce38c8df314fe.roa
Signing time:             Tue 27 Jun 2023 21:35:04 +0000
ROA not before:           Mon 26 Jun 2023 21:35:04 +0000
ROA not after:            Fri 27 Jun 2025 21:35:04 +0000
asID:                     26593
IP address blocks:        200.108.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2092264 (0x1fece8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893407337be5ac09529c27b6e17d4d0664581246
        Validity
            Not Before: Jun 26 21:35:04 2023 GMT
            Not After : Jun 27 21:35:04 2025 GMT
        Subject: CN=a02aeeaa5b43e576b3a3cb5caa7ce38c8df314fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:ac:e3:f3:21:92:2c:62:da:63:6f:ff:7e:
                    1d:38:06:9e:65:37:e0:3b:48:47:c9:33:06:f3:75:
                    71:cb:f5:50:13:09:45:6b:ea:ab:39:b7:e4:ce:8b:
                    3f:b7:70:64:44:b1:33:38:b9:e7:b0:cd:f7:09:ee:
                    e8:b8:00:31:2d:18:2e:b5:e4:49:8b:d4:e4:77:94:
                    1c:33:cf:88:42:dd:a2:cf:e8:1e:3d:ec:d8:46:5c:
                    a7:5f:bd:e6:35:0d:8e:12:71:5d:d5:16:0e:2a:22:
                    c1:34:b3:9d:c7:5d:02:e4:4f:de:31:53:36:ac:4a:
                    80:6e:15:d5:bf:a9:e4:5a:f6:62:46:b2:3a:ca:aa:
                    08:67:30:af:d7:23:8d:e9:c2:0b:25:30:bc:9a:e1:
                    69:89:3b:00:40:a3:06:e3:45:28:c3:d3:b6:6c:c0:
                    a5:70:9e:c2:a6:06:4d:fa:3c:c9:38:3c:fe:0d:31:
                    87:d9:f2:a3:98:ab:80:cf:48:f2:06:54:be:6c:84:
                    01:73:61:eb:c2:4c:4a:bd:66:64:d5:9d:46:7a:c0:
                    2e:6a:76:f3:58:49:a3:1e:c1:78:82:40:c1:8c:c0:
                    4e:af:26:2d:fd:0f:9a:66:73:c9:c0:f8:b3:ef:5c:
                    17:f6:73:63:0e:c3:02:c0:d2:b4:a9:3b:78:1f:d1:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CA:19:FC:DD:20:39:C0:87:36:84:78:7D:46:3F:0D:35:A6:53:1D
            X509v3 Authority Key Identifier:
                keyid:1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/a02aeeaa5b43e576b3a3cb5caa7ce38c8df314fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/893407337be5ac09529c27b6e17d4d0664581246.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:a5:04:3b:95:0c:b4:31:c1:66:62:4b:ca:ef:02:11:95:
         05:e5:f6:d5:4d:ce:9e:b7:8b:78:76:e0:65:05:18:ac:0b:65:
         82:cd:c0:f7:33:06:b7:19:96:98:19:9a:fd:59:02:c1:79:ff:
         dd:87:93:ab:ef:4b:17:d1:96:f2:da:66:68:fa:21:97:b9:cc:
         8d:02:cb:9a:33:18:a1:e1:06:de:93:0d:15:e3:15:da:3e:f2:
         b6:6b:1f:c5:4e:40:b8:93:b5:98:a4:25:14:16:68:77:f5:2d:
         62:b0:98:3a:ce:5a:c8:d4:82:8b:01:5e:30:4d:03:ac:a0:3b:
         12:9d:56:a6:3d:e0:f7:c7:1d:a4:d4:01:41:67:33:c7:5f:7f:
         44:4e:e0:e3:4b:8e:76:45:5c:85:72:f6:08:62:b7:2d:a0:c9:
         d2:b5:52:b1:21:4f:54:eb:e6:26:f6:e6:b8:ba:e9:17:4f:3e:
         7e:10:18:15:1e:a2:26:2b:0f:fd:ec:eb:77:91:ac:b6:ba:58:
         cb:4b:b6:35:77:28:54:41:18:7f:81:be:5e:43:8a:a1:f1:81:
         27:fe:11:6a:04:2d:e0:6c:44:29:c8:44:79:4d:0d:07:e0:35:
         a4:22:c5:00:3e:eb:35:a2:b5:69:56:10:1d:68:66:5b:d6:8e:
         0d:5a:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----