Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/917936d0c2aed95db98cde7813848afff06e8d97.roa
File:                     917936d0c2aed95db98cde7813848afff06e8d97.roa (raw, json)
Hash identifier:          uVWmWM3K46M3L1RC+8r6YfKzGIBWUcureJ7qfb8XXBw=
Subject key identifier:   84:AF:97:E0:63:BA:4D:E2:2E:5B:3A:8E:5E:29:0D:D5:DF:5D:BF:E7
Certificate issuer:       /CN=893407337be5ac09529c27b6e17d4d0664581246
Certificate serial:       1FE88A
Authority key identifier: 1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/917936d0c2aed95db98cde7813848afff06e8d97.roa
Signing time:             Tue 27 Jun 2023 21:34:24 +0000
ROA not before:           Mon 26 Jun 2023 21:34:24 +0000
ROA not after:            Fri 27 Jun 2025 21:34:24 +0000
asID:                     26593
IP address blocks:        200.108.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091146 (0x1fe88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893407337be5ac09529c27b6e17d4d0664581246
        Validity
            Not Before: Jun 26 21:34:24 2023 GMT
            Not After : Jun 27 21:34:24 2025 GMT
        Subject: CN=917936d0c2aed95db98cde7813848afff06e8d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a2:3e:ef:0d:b6:85:2f:82:ea:1e:19:7e:20:
                    4c:fd:5b:53:f0:20:82:18:a2:ab:91:fb:5a:9d:89:
                    01:53:b9:db:ff:3c:da:ee:c0:60:a4:cf:85:0f:7d:
                    7d:45:86:15:65:68:5a:b4:56:fd:6e:88:bd:7f:2e:
                    36:21:7d:82:b2:31:0d:1c:3a:de:18:da:30:0b:24:
                    8f:70:7c:b1:6d:4f:24:99:f1:80:c7:03:ba:cc:0b:
                    eb:2d:f9:19:8b:0e:ff:f0:6a:d3:0e:a4:ca:64:41:
                    e6:9d:28:4f:92:86:b2:8a:55:b5:06:70:d8:3c:92:
                    7d:9a:4b:b2:c8:fe:c7:91:37:6d:a6:e4:fc:8c:2c:
                    ff:af:42:93:28:1c:b7:28:be:b0:49:5d:fe:d6:02:
                    32:ae:ed:d3:56:f6:4c:f4:b7:0f:93:b9:ea:aa:fc:
                    8b:57:65:42:5a:88:62:57:04:9a:e0:e7:18:fb:77:
                    29:3c:f7:a1:86:1f:42:01:53:ac:45:cb:4d:a9:35:
                    26:4f:9f:22:22:81:2c:31:70:59:fa:db:c4:52:45:
                    b6:80:41:30:d4:d6:d1:3b:66:d4:b5:ae:49:7f:b6:
                    2c:e0:88:dc:29:c7:e9:c6:f5:dd:3c:3f:45:a3:6c:
                    63:a9:01:a8:b7:4f:58:d9:c4:7d:b5:5e:23:d9:0e:
                    7d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AF:97:E0:63:BA:4D:E2:2E:5B:3A:8E:5E:29:0D:D5:DF:5D:BF:E7
            X509v3 Authority Key Identifier:
                keyid:1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/917936d0c2aed95db98cde7813848afff06e8d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/893407337be5ac09529c27b6e17d4d0664581246.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:b0:a9:3c:36:8d:69:c5:1c:f4:39:a1:99:cd:17:ac:c1:c5:
         41:6e:4d:47:bb:b9:a8:b9:57:26:9e:5c:de:93:c7:ed:cd:56:
         51:93:cc:48:fa:75:62:9d:63:4e:c4:e0:8f:4f:48:0b:da:81:
         e8:54:cc:83:b4:b0:6c:95:dc:d6:e1:41:4c:17:87:dd:86:0a:
         7c:ee:cf:44:dd:e4:85:93:e2:fe:84:85:a8:21:be:21:e0:dd:
         a6:34:cc:f6:a7:b9:90:db:e7:c5:77:e2:d8:37:c6:f7:64:28:
         dc:08:13:23:55:94:9c:21:b5:2f:3a:9e:86:45:03:d4:da:71:
         0e:e4:45:43:93:4d:81:e9:93:b9:9d:3d:cb:5d:df:43:96:b5:
         f2:3f:a1:9c:dd:20:46:17:7c:20:56:fd:80:62:99:f3:b7:da:
         0d:5f:0a:41:33:aa:c6:1a:82:1b:5a:fc:e4:a0:fb:c9:5c:a6:
         ed:52:b2:72:1f:00:52:f4:19:19:e4:c0:cb:32:94:94:ae:ec:
         64:03:e3:54:49:29:98:cc:df:eb:d2:34:72:74:06:2e:65:bb:
         76:eb:b8:87:80:26:7f:e2:ea:f2:97:f0:73:e3:aa:c0:91:78:
         c5:0c:e1:73:99:7e:c3:8c:6b:de:85:6b:5e:f7:cc:63:d5:c0:
         53:ff:ce:cc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH+iKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5
MzQwNzMzN2JlNWFjMDk1MjljMjdiNmUxN2Q0ZDA2NjQ1ODEyNDYwHhcNMjMwNjI2
MjEzNDI0WhcNMjUwNjI3MjEzNDI0WjAzMTEwLwYDVQQDEyg5MTc5MzZkMGMyYWVk
OTVkYjk4Y2RlNzgxMzg0OGFmZmYwNmU4ZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgaI+7w22hS+C6h4ZfiBM/VtT8CCCGKKrkftanYkBU7nb/zza
7sBgpM+FD319RYYVZWhatFb9boi9fy42IX2CsjENHDreGNowCySPcHyxbU8kmfGA
xwO6zAvrLfkZiw7/8GrTDqTKZEHmnShPkoayilW1BnDYPJJ9mkuyyP7HkTdtpuT8
jCz/r0KTKBy3KL6wSV3+1gIyru3TVvZM9LcPk7nqqvyLV2VCWohiVwSa4OcY+3cp
PPehhh9CAVOsRctNqTUmT58iIoEsMXBZ+tvEUkW2gEEw1NbRO2bUta5Jf7Ys4Ijc
KcfpxvXdPD9Fo2xjqQGot09Y2cR9tV4j2Q59wQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFISvl+Bjuk3iLls6jl4pDdXfXb/nMB8GA1UdIwQYMBaAFBxFKWylTzNMiRHK
Do6SMwk7wiMMMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODkzNDA3
MzM3YmU1YWMwOTUyOWMyN2I2ZTE3ZDRkMDY2NDU4MTI0Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzkwZTc1YmUtMDliMS00ZjQ1LTg3OGUtOTRhMjRm
NGJiYjQ2LzkxNzkzNmQwYzJhZWQ5NWRiOThjZGU3ODEzODQ4YWZmZjA2ZThkOTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zOTBlNzViZS0wOWIxLTRmNDUtODc4ZS05NGEy
NGY0YmJiNDYvODkzNDA3MzM3YmU1YWMwOTUyOWMyN2I2ZTE3ZDRkMDY2NDU4MTI0
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhsQTANBgkqhkiG9w0BAQsFAAOCAQEANrCpPDaNacUc9Dmh
mc0XrMHFQW5NR7u5qLlXJp5c3pPH7c1WUZPMSPp1Yp1jTsTgj09IC9qB6FTMg7Sw
bJXc1uFBTBeH3YYKfO7PRN3khZPi/oSFqCG+IeDdpjTM9qe5kNvnxXfi2DfG92Qo
3AgTI1WUnCG1LzqehkUD1NpxDuRFQ5NNgemTuZ09y13fQ5a18j+hnN0gRhd8IFb9
gGKZ87faDV8KQTOqxhqCG1r85KD7yVym7VKych8AUvQZGeTAyzKUlK7sZAPjVEkp
mMzf69I0cnQGLmW7duu4h4Amf+Lq8pfwc+OqwJF4xQzhc5l+w4xr3oVrXvfMY9XA
U//OzA==
-----END CERTIFICATE-----