Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/dead084aec32e2d55b23f553f1208e1ec363be98.roa
File:                     dead084aec32e2d55b23f553f1208e1ec363be98.roa (raw, json)
Hash identifier:          9okhH5s/kBV4P9AP3LM6OWWBNgtOAFNkgkEXBN44vNc=
Subject key identifier:   2A:A8:74:AC:8A:5C:B5:62:23:30:53:25:55:A5:99:F5:7C:84:FB:81
Certificate issuer:       /CN=893407337be5ac09529c27b6e17d4d0664581246
Certificate serial:       1FEAD5
Authority key identifier: 1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/dead084aec32e2d55b23f553f1208e1ec363be98.roa
Signing time:             Tue 27 Jun 2023 21:34:42 +0000
ROA not before:           Mon 26 Jun 2023 21:34:42 +0000
ROA not after:            Fri 27 Jun 2025 21:34:42 +0000
asID:                     26593
IP address blocks:        200.108.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091733 (0x1fead5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893407337be5ac09529c27b6e17d4d0664581246
        Validity
            Not Before: Jun 26 21:34:42 2023 GMT
            Not After : Jun 27 21:34:42 2025 GMT
        Subject: CN=dead084aec32e2d55b23f553f1208e1ec363be98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:b7:0e:33:bc:14:7c:7b:76:7e:d6:a8:82:
                    9e:4b:82:af:58:50:72:f3:fa:aa:f5:65:aa:c7:07:
                    0a:f2:60:48:92:ea:5c:f0:91:c7:b7:ab:96:bc:56:
                    c4:4b:98:c0:52:fb:07:60:0e:df:aa:15:c1:e7:33:
                    cf:c8:8a:c3:57:65:02:38:1e:3c:e3:0e:2b:53:e2:
                    6e:e3:5f:0b:10:45:c6:8e:f4:35:02:aa:18:61:e6:
                    fc:d2:ad:00:82:32:7e:7a:93:46:18:d6:ec:73:ae:
                    ce:37:50:41:03:69:b5:50:30:85:55:b4:d5:d7:bb:
                    ef:36:a5:3f:be:ca:c5:6d:33:95:81:a9:fc:57:8f:
                    4c:21:80:a4:9d:f1:5d:cd:54:8f:3a:01:d5:cd:f5:
                    92:24:33:df:8c:0b:f6:7e:c8:c1:fd:68:61:99:66:
                    61:35:28:3a:cc:c2:1f:70:a5:ac:68:db:4b:bc:fc:
                    06:37:93:ea:8e:2c:17:27:2a:36:4d:59:f2:cd:d4:
                    ef:0d:a2:46:4b:6b:0a:a2:9b:56:3d:51:d5:bd:98:
                    ee:ca:2a:8a:d1:f1:30:e6:e4:30:64:75:26:06:1d:
                    6a:43:fa:fe:d8:32:2a:5d:9a:b5:a1:b7:00:b3:85:
                    89:4b:5f:76:0b:5f:dc:c0:1e:78:f3:56:9a:e0:f5:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A8:74:AC:8A:5C:B5:62:23:30:53:25:55:A5:99:F5:7C:84:FB:81
            X509v3 Authority Key Identifier:
                keyid:1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/dead084aec32e2d55b23f553f1208e1ec363be98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/893407337be5ac09529c27b6e17d4d0664581246.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:75:7b:7d:27:dc:19:81:4e:e4:29:a5:c9:fd:17:4f:af:4b:
         32:c5:be:e5:e6:a1:dc:c9:7e:39:32:e9:50:16:66:be:50:64:
         3d:1b:b3:97:0c:31:14:03:29:b7:47:d9:a4:65:e8:5c:a1:b8:
         9d:16:22:1f:cd:ac:be:54:34:87:26:c2:b3:2f:dc:c6:1a:bf:
         0e:99:19:b9:e1:33:ba:71:f0:43:48:3d:c0:55:1c:86:75:2e:
         69:c6:73:9b:c6:3f:df:3c:72:62:76:63:c6:b1:b8:ad:ea:61:
         b5:a4:0b:a9:c2:04:22:cf:76:49:ac:ae:f7:ed:21:4a:9f:de:
         be:a3:68:bd:8f:7c:5b:90:a7:0a:69:ef:7d:f9:ec:c6:f3:cc:
         7e:4f:d9:ab:03:cf:a9:4b:b3:7f:06:92:a8:cc:47:1d:0b:fb:
         1a:f7:12:16:8c:dc:d8:03:ff:9a:d9:6d:4e:6b:fb:28:fc:6d:
         a1:71:99:78:d7:7b:60:00:39:95:81:9c:27:8d:e9:16:ce:3c:
         26:43:88:c0:8f:94:28:26:86:58:9a:0d:b9:f6:ff:fc:6d:4b:
         8c:c4:05:9f:9d:92:ba:d5:cd:a1:e2:1d:03:15:0d:cb:fb:08:
         33:b2:7d:cd:70:dd:2d:ea:33:33:ef:55:32:18:45:61:15:33:
         ef:4f:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org