Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/e5a026881d5a0d08b0c7a1789f065ae9d5afb065.roa
File:                     e5a026881d5a0d08b0c7a1789f065ae9d5afb065.roa (raw, json)
Hash identifier:          q7wbLwvL+58pU9YFLSsUIgxv2v5XJDXEq38B83JOxx4=
Subject key identifier:   F3:3C:07:4C:3D:4C:7E:36:AB:FE:BA:44:8E:3C:98:53:73:48:DC:BC
Certificate issuer:       /CN=893407337be5ac09529c27b6e17d4d0664581246
Certificate serial:       201A95
Authority key identifier: 1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/e5a026881d5a0d08b0c7a1789f065ae9d5afb065.roa
Signing time:             Tue 27 Jun 2023 21:41:42 +0000
ROA not before:           Mon 26 Jun 2023 21:41:42 +0000
ROA not after:            Fri 27 Jun 2025 21:41:42 +0000
asID:                     26593
IP address blocks:        200.108.81.0/24 maxlen: 24
                          200.108.82.0/24 maxlen: 24
                          200.108.86.0/24 maxlen: 24
                          200.108.87.0/24 maxlen: 24
                          200.108.88.0/24 maxlen: 24
                          200.108.89.0/24 maxlen: 24
                          200.108.90.0/24 maxlen: 24
                          200.108.91.0/24 maxlen: 24
                          200.108.92.0/24 maxlen: 24
                          200.108.93.0/24 maxlen: 24
                          200.108.94.0/24 maxlen: 24
                          200.108.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103957 (0x201a95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893407337be5ac09529c27b6e17d4d0664581246
        Validity
            Not Before: Jun 26 21:41:42 2023 GMT
            Not After : Jun 27 21:41:42 2025 GMT
        Subject: CN=e5a026881d5a0d08b0c7a1789f065ae9d5afb065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:03:66:c2:36:ed:10:de:d4:95:44:0a:09:
                    af:d2:ba:c8:ae:5f:a9:6f:4a:fe:97:16:3a:01:0f:
                    35:57:a1:fc:18:cd:7f:72:69:b3:cd:9d:4c:7e:bd:
                    26:99:b8:7a:71:c8:47:f0:c2:62:33:29:74:a5:df:
                    ee:4e:48:71:c9:4f:c1:a0:f8:bc:cb:e3:d8:0f:00:
                    da:a1:59:ba:33:ab:56:9a:7a:e9:6c:6c:6e:f3:06:
                    79:37:b5:b6:d4:90:d4:10:f2:c0:f0:f8:5e:f6:0f:
                    7f:7f:46:5c:47:3b:56:47:29:31:b5:b0:71:b2:dc:
                    27:07:25:45:b9:04:13:01:b6:7b:9a:85:0a:2a:38:
                    e3:56:79:7a:09:21:87:7f:4a:cf:c0:ba:12:33:76:
                    e6:7f:e7:f3:11:07:7d:59:00:5f:b1:a2:03:5c:19:
                    9a:ec:36:7f:98:05:d7:64:65:24:b8:a9:fd:11:82:
                    ca:5f:82:6d:77:ec:41:48:7b:b9:3d:ec:9d:31:91:
                    70:ab:de:31:74:18:8e:29:3d:f8:69:f0:a5:2f:7a:
                    0e:e8:78:8b:b8:cd:8a:66:3e:ac:24:7c:31:90:fd:
                    0d:c0:df:dd:ea:f6:96:c6:06:7f:3d:ad:36:de:e4:
                    eb:d7:12:23:25:0c:c1:a6:07:26:f5:fa:34:cb:26:
                    09:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3C:07:4C:3D:4C:7E:36:AB:FE:BA:44:8E:3C:98:53:73:48:DC:BC
            X509v3 Authority Key Identifier:
                keyid:1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/e5a026881d5a0d08b0c7a1789f065ae9d5afb065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/893407337be5ac09529c27b6e17d4d0664581246.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.81.0-200.108.82.255
                  200.108.86.0-200.108.95.255

    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:4f:8c:a7:b0:60:a5:f0:9d:e0:88:2d:6c:11:74:9a:4d:
         5d:6f:73:89:2b:20:4e:48:11:2b:b6:2e:39:86:cd:a7:8c:0f:
         fe:e7:48:c2:00:91:98:d3:d3:96:28:6f:ae:69:7d:02:fa:77:
         99:43:8a:e9:8c:3f:db:2d:26:88:16:8a:0f:84:43:65:af:df:
         bb:aa:71:79:69:b0:6d:69:6b:85:39:4f:f3:3e:a9:cb:8a:7b:
         d1:2f:76:f4:39:cf:7a:7a:bd:43:7a:ba:8e:8a:72:fa:10:a0:
         f7:4a:3d:7d:fe:50:63:a5:35:49:e3:41:31:14:77:81:08:2b:
         c9:6e:1c:4b:8f:aa:d3:d6:a8:ab:39:a5:61:f1:5a:5d:da:a1:
         75:ec:7c:41:d3:a9:45:40:5d:57:c2:6c:dd:c8:ef:38:ee:c7:
         fb:d9:e8:0e:12:4f:9c:0c:e6:8b:9c:e4:ee:83:4a:e5:8e:d3:
         0f:5d:69:46:c1:9f:6d:fd:d1:7c:48:11:65:55:f2:93:7e:2d:
         76:ca:86:2e:95:d0:58:10:6b:71:eb:42:5f:68:16:e9:cf:25:
         39:fb:e9:8b:bf:97:65:91:02:1b:b9:c4:33:69:0f:91:40:92:
         ff:77:4d:cf:d2:ce:12:0f:cc:7f:7a:55:1b:87:f3:f4:82:4a:
         59:eb:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----