Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/4abf95d7660d19ff22b0114656426d9e7b26cfba.roa
File:                     4abf95d7660d19ff22b0114656426d9e7b26cfba.roa (raw, json)
Hash identifier:          /xdELE+pMWGV6VsGwbavwX6vmeXBtSumAYZ/PHfaWt4=
Subject key identifier:   99:78:E2:29:76:20:5E:93:37:9F:D8:66:04:9E:E7:4A:24:EA:4D:D3
Certificate issuer:       /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial:       12C754
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/4abf95d7660d19ff22b0114656426d9e7b26cfba.roa
Signing time:             Thu 22 Jun 2023 19:12:30 +0000
ROA not before:           Wed 21 Jun 2023 19:12:29 +0000
ROA not after:            Sun 22 Jun 2025 19:12:29 +0000
asID:                     27989
IP address blocks:        200.1.175.0/24 maxlen: 24
                          201.221.124.0/23 maxlen: 24
                          179.0.27.0/24 maxlen: 24
                          2801:15:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1230676 (0x12c754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
        Validity
            Not Before: Jun 21 19:12:29 2023 GMT
            Not After : Jun 22 19:12:29 2025 GMT
        Subject: CN=4abf95d7660d19ff22b0114656426d9e7b26cfba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:f9:5b:3e:9b:f5:ba:36:22:f6:c1:1f:cf:
                    c6:4f:43:2a:2e:cc:70:7d:dd:68:2f:a2:45:2c:52:
                    7d:16:38:df:c7:7d:f5:58:85:96:47:a3:a6:55:f7:
                    11:f8:0b:d7:57:5a:b3:37:d6:7f:4c:8b:5b:5a:16:
                    e5:59:ee:60:57:f7:c2:22:73:b8:c5:53:39:63:77:
                    9d:13:dd:6d:14:0b:2e:99:33:63:0d:1c:20:bf:44:
                    e5:e7:94:74:84:99:d9:57:75:00:f1:32:33:a4:af:
                    1b:e4:f7:39:c2:21:e8:64:f0:cf:fd:32:9c:03:96:
                    f1:d4:5a:ec:cd:bb:b4:9b:e8:c3:30:a6:6b:04:aa:
                    0f:47:a6:17:79:26:3e:9f:1b:3c:52:c3:bb:b6:4e:
                    3f:23:f2:8a:cc:5f:fb:42:52:66:13:b9:9c:c4:6d:
                    ee:4f:31:20:6e:c4:bd:e8:84:76:4b:d4:d4:91:ca:
                    9c:81:fe:92:ac:c2:92:72:6e:bc:1b:13:92:e4:5e:
                    20:54:5e:20:60:2b:f4:da:88:0a:d7:85:06:a2:8e:
                    4d:7d:29:fd:01:5c:1b:b0:36:ca:76:f1:91:cd:17:
                    82:1f:4e:cb:f6:c3:55:35:54:5b:a9:82:af:5d:7b:
                    c3:1c:fb:ae:a1:c4:0a:a7:ef:70:8e:c2:1e:e9:32:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:78:E2:29:76:20:5E:93:37:9F:D8:66:04:9E:E7:4A:24:EA:4D:D3
            X509v3 Authority Key Identifier:
                keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/4abf95d7660d19ff22b0114656426d9e7b26cfba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.27.0/24
                  200.1.175.0/24
                  201.221.124.0/23
                IPv6:
                  2801:15:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:1e:26:f2:2e:2e:3c:58:aa:13:5d:87:50:eb:c9:6f:da:1d:
         1d:3a:b1:b4:c5:a4:2b:42:87:74:bc:47:a0:fb:61:d4:d0:b2:
         71:ae:cf:f0:11:5f:7b:18:7d:8f:39:83:33:eb:1f:2d:eb:c0:
         10:9b:c2:f5:99:86:7c:7e:5d:84:ce:76:db:78:34:b8:b0:60:
         75:30:6a:f5:4b:36:79:0f:90:f3:37:c1:41:93:b7:11:fa:c8:
         4f:09:8c:47:d7:b6:45:8f:62:ed:55:99:47:eb:c0:4d:3e:a6:
         2b:be:8f:2f:02:23:f0:c1:82:09:34:42:92:db:59:9a:1f:aa:
         81:09:a8:9e:f0:42:6c:39:ae:26:00:bc:14:be:35:22:a9:8d:
         94:26:61:1a:3b:62:ee:dd:d8:04:fa:df:42:fd:a3:40:7e:f4:
         a9:ba:27:04:e3:56:92:0a:27:52:86:06:43:32:1c:6d:9c:c2:
         b0:3f:2e:fc:92:ce:c2:d5:48:ad:56:a7:8d:ee:c5:e9:04:01:
         f8:a9:7a:8e:f8:21:fc:e3:90:83:f2:fc:01:8a:00:db:ac:d2:
         57:74:84:92:82:74:5c:e6:69:c9:b6:be:00:87:60:9c:9a:50:
         82:31:51:66:1b:2f:01:f9:d6:d5:09:3b:0e:2d:f4:d0:8d:44:
         6c:10:0a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----