Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/4606e0b2593e09f4e59b25dba5ea86c253ac6579.roa
File:                     4606e0b2593e09f4e59b25dba5ea86c253ac6579.roa (raw, json)
Hash identifier:          kVQchcF/HA4RxnzoO7C/RI1aw7iq1+hRC1pBC/pwMHM=
Subject key identifier:   3F:C5:2D:53:AD:14:38:3A:32:E8:19:49:F8:D0:61:D5:FB:AE:0C:FD
Certificate issuer:       /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial:       2780EF
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/4606e0b2593e09f4e59b25dba5ea86c253ac6579.roa
Signing time:             Tue 13 Feb 2024 16:39:14 +0000
ROA not before:           Tue 13 Feb 2024 16:39:14 +0000
ROA not after:            Fri 13 Feb 2026 16:39:14 +0000
asID:                     6471
IP address blocks:        200.11.64.0/19 maxlen: 24
                          200.11.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2588911 (0x2780ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
        Validity
            Not Before: Feb 13 16:39:14 2024 GMT
            Not After : Feb 13 16:39:14 2026 GMT
        Subject: CN=4606e0b2593e09f4e59b25dba5ea86c253ac6579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:72:ed:e3:8e:11:1d:51:99:22:3c:92:64:
                    68:9e:5c:03:fc:39:ad:11:e5:e1:1b:b1:c2:b0:e2:
                    2c:5a:9b:34:9d:b2:06:45:27:4a:27:ec:52:3a:64:
                    70:0e:be:35:56:88:ef:bc:f7:38:55:da:2d:5a:24:
                    84:44:a1:1f:00:9e:82:56:ae:62:c2:a4:2b:af:99:
                    7f:5e:79:43:29:55:e0:21:b0:57:90:a3:1a:93:ee:
                    d2:ce:9e:1d:df:8b:16:5b:56:27:a8:a7:d3:81:66:
                    1c:8d:50:3b:29:78:f8:c0:84:fc:32:92:22:1b:37:
                    8a:38:30:f4:74:b6:c8:20:0b:4c:f3:b9:45:02:00:
                    e0:e6:a3:a2:3b:06:eb:8c:45:2a:38:67:a0:d7:7e:
                    3c:14:8c:ae:95:79:84:b8:37:52:60:06:2e:80:66:
                    c2:cb:37:8b:8c:e0:54:87:1f:f5:54:66:47:f7:05:
                    bd:3f:a2:b9:1e:4c:85:d5:17:16:37:00:00:0f:b3:
                    5b:1f:b8:d6:5f:9c:d6:97:70:81:58:7f:cb:7a:24:
                    fa:0f:54:e9:51:cb:3b:35:6f:1a:c1:49:d1:3b:08:
                    52:ab:ca:0d:e5:69:48:e1:12:62:2a:e3:b2:c4:df:
                    e8:ce:8b:0a:0d:6f:81:85:fe:70:c3:70:b0:c2:67:
                    3b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C5:2D:53:AD:14:38:3A:32:E8:19:49:F8:D0:61:D5:FB:AE:0C:FD
            X509v3 Authority Key Identifier:
                keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/4606e0b2593e09f4e59b25dba5ea86c253ac6579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.64.0-200.11.103.255

    Signature Algorithm: sha256WithRSAEncryption
         67:e6:d4:a7:c6:ec:0a:b9:ec:2a:8e:de:c8:84:95:19:7c:6b:
         fa:53:44:11:82:fc:8c:21:a2:20:89:4d:a0:40:3b:69:06:03:
         29:d3:0d:b5:74:c5:4c:ad:91:ca:e0:b6:11:8b:c2:70:28:64:
         37:8a:2e:1b:e4:f4:b8:85:a4:4a:46:40:34:32:6e:69:6d:7d:
         22:d8:74:40:e9:1c:87:39:f2:0b:81:bd:3f:f7:4f:bd:a8:3b:
         ba:e9:d0:4b:a1:2b:4f:34:bd:d3:e4:fe:ff:65:db:ca:0f:14:
         73:0e:8e:7d:dd:e2:a8:4e:c5:17:7e:e6:fe:d9:88:86:79:aa:
         b8:b5:80:fe:b6:7f:57:48:74:9b:d8:6c:18:36:fc:7c:73:1c:
         fb:91:26:e4:b4:b9:49:c2:79:43:ac:1f:23:3b:de:b6:56:a7:
         f1:ae:28:4d:4f:fd:8e:88:bd:3b:02:ca:d2:1a:1d:73:3c:1f:
         eb:51:9f:6b:b7:b7:1e:35:da:03:91:1c:39:af:51:1c:19:5b:
         e4:6a:ac:51:55:d3:83:6b:09:3f:49:99:d4:34:04:2f:ba:dd:
         8d:a0:36:1f:e6:13:6e:1c:18:b9:73:10:ae:cb:46:6c:42:f1:
         9e:07:ce:ca:a7:d7:cf:06:5b:23:3b:fb:4d:9d:13:88:62:57:
         fa:dd:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----