Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/067f60cfff18826b2b239a84af2037157a310787.roa
File:                     067f60cfff18826b2b239a84af2037157a310787.roa (raw, json)
Hash identifier:          ZoZ25XJTLa5y7uyw2om3/gyP4oij8gW/yBUzHnooUmA=
Subject key identifier:   34:3A:97:CF:E4:96:E5:85:32:6F:C9:AC:0D:05:7D:90:E5:82:53:87
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       116656
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/067f60cfff18826b2b239a84af2037157a310787.roa
Signing time:             Thu 22 Jun 2023 19:24:26 +0000
ROA not before:           Wed 21 Jun 2023 19:24:26 +0000
ROA not after:            Sun 22 Jun 2025 19:24:26 +0000
asID:                     834
IP address blocks:        200.26.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1140310 (0x116656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: Jun 21 19:24:26 2023 GMT
            Not After : Jun 22 19:24:26 2025 GMT
        Subject: CN=067f60cfff18826b2b239a84af2037157a310787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0e:cb:09:72:97:4d:28:8d:98:29:fd:8d:d8:
                    a5:e5:d4:43:cf:bc:f1:f3:53:81:8e:8e:55:be:a9:
                    94:6f:ac:8f:ab:c2:97:e6:44:42:b6:f9:7c:72:2e:
                    bd:b7:de:ed:bc:e3:ac:dd:2b:5e:46:0e:15:c4:ae:
                    05:8f:e4:04:77:c0:d6:b3:c0:99:1b:a1:2b:e8:d7:
                    14:84:66:54:9d:3e:fb:ce:b1:38:d0:36:86:06:70:
                    d7:9b:17:78:49:bf:5d:a2:30:70:f4:d6:be:2d:2d:
                    a4:f4:69:d9:ae:89:b2:87:7d:97:ea:92:a7:f4:b0:
                    bf:5a:a6:77:3f:ce:5b:c9:b5:aa:57:8a:7f:5d:4f:
                    bd:d1:63:48:d3:57:0e:ad:85:76:8e:60:6a:b8:17:
                    be:26:3b:07:2b:f8:68:f8:fe:4a:ec:06:1b:bd:d0:
                    ae:1d:a0:46:fd:bf:f3:ce:f4:53:3e:63:a4:ce:c7:
                    33:c2:5c:57:28:f6:ff:07:d7:15:8c:5b:3f:fa:18:
                    97:42:c8:61:ec:f3:92:2c:3e:a8:74:5b:b7:cf:70:
                    11:45:35:20:15:04:bf:84:ca:2a:cb:d8:22:f6:4f:
                    b5:c2:75:eb:d8:94:4d:0e:be:e1:33:a1:0e:5d:af:
                    70:57:0f:00:6c:63:cd:2a:5b:58:11:5b:6c:a3:06:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3A:97:CF:E4:96:E5:85:32:6F:C9:AC:0D:05:7D:90:E5:82:53:87
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/067f60cfff18826b2b239a84af2037157a310787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f0:65:3d:c4:f4:08:27:15:c1:38:95:8d:9f:33:f6:bb:93:
         6f:65:e4:80:0f:90:3d:05:89:98:a7:73:f0:e9:f2:9f:0e:ec:
         25:c9:e9:c4:66:36:fa:80:df:80:70:55:c0:a0:3b:bb:8b:77:
         fe:0d:8e:c5:ea:02:84:bd:47:7b:82:e4:96:6c:16:fa:5b:79:
         73:58:03:37:a7:8c:f3:4a:ac:4d:32:ed:af:a8:a3:1b:6a:33:
         9e:84:58:6b:f7:1a:d5:28:0a:a9:e2:92:49:42:a7:2d:17:26:
         d6:17:f2:40:aa:1c:76:cf:48:47:fa:1a:bb:bd:88:da:33:08:
         81:94:4e:df:f5:b7:4a:17:73:ae:7c:27:cb:42:50:64:51:87:
         2e:00:6a:f4:33:b7:3f:6f:8a:99:80:6a:62:60:04:6b:3f:45:
         63:2b:93:2b:f9:de:88:03:29:aa:10:38:6d:91:cc:8e:43:df:
         84:5e:92:f4:2b:4f:18:67:51:69:ec:b8:e3:eb:83:ca:68:c1:
         3d:db:1b:70:cc:86:7c:aa:e6:a9:27:58:c0:0a:97:90:b5:f2:
         9a:bf:37:74:f6:99:17:40:b2:38:da:88:8f:a7:be:84:eb:4c:
         cd:c2:8f:91:8f:13:a6:f2:77:33:de:49:de:b5:f3:01:06:be:
         4f:25:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----