Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/63bbd539411b574776270bc69e9109c06581f5e9.roa
File:                     63bbd539411b574776270bc69e9109c06581f5e9.roa (raw, json)
Hash identifier:          a6FawGJJWOxsTKQSxDtsqKqBCU4Wh6mNBLGWQk8Cme8=
Subject key identifier:   80:07:AC:E0:AE:1E:B2:C9:C8:25:4F:8E:AB:AB:CE:D9:57:D8:48:5A
Certificate issuer:       /CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
Certificate serial:       277520
Authority key identifier: AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/63bbd539411b574776270bc69e9109c06581f5e9.roa
Signing time:             Mon 19 Feb 2024 16:33:36 +0000
ROA not before:           Mon 19 Feb 2024 16:33:34 +0000
ROA not after:            Thu 19 Feb 2026 16:33:34 +0000
asID:                     19582
IP address blocks:        200.115.32.0/20 maxlen: 24
                          2803:8300::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2585888 (0x277520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
        Validity
            Not Before: Feb 19 16:33:34 2024 GMT
            Not After : Feb 19 16:33:34 2026 GMT
        Subject: CN=63bbd539411b574776270bc69e9109c06581f5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:19:d3:1f:06:ec:00:9c:e1:ac:06:33:a3:bc:
                    24:ee:02:b8:20:38:8d:ec:fc:22:aa:d1:02:b3:f8:
                    4a:0e:d9:44:3f:f7:c0:a1:91:72:5c:ef:e6:72:bf:
                    d2:3d:7a:bd:37:06:50:b1:00:f8:b3:f2:b5:99:1c:
                    19:5c:f8:e9:0d:a1:3c:3f:8a:b5:d1:22:42:8e:8e:
                    ba:b0:1c:88:9b:ce:eb:1e:72:83:25:5c:4d:70:3b:
                    da:cf:c8:8c:cd:d3:9d:1c:19:0a:f6:80:e4:71:74:
                    90:e2:56:cc:51:0e:9f:53:04:a6:49:f9:57:cd:8e:
                    3e:f5:3b:e9:00:f5:0b:85:ff:44:67:a2:19:d0:70:
                    91:5b:c9:24:de:e5:68:6a:3a:ea:d1:f9:36:32:80:
                    6a:1f:98:cd:91:d8:e4:e4:d5:ca:80:0b:d7:aa:81:
                    ec:f9:ae:ef:de:93:6f:42:2b:8e:65:8a:cc:64:91:
                    f9:ba:7a:11:a3:67:43:71:0e:9d:c5:36:31:d7:16:
                    cf:95:c7:e6:4e:a1:14:73:5f:9c:ed:f5:21:ad:32:
                    44:1d:36:72:c8:d4:d6:49:a4:ff:f2:34:a3:0c:be:
                    24:7a:3a:83:c5:49:c7:ef:dd:ea:60:68:b5:71:8a:
                    d1:8b:06:bc:1d:c0:78:18:94:c1:cd:bb:8c:32:7a:
                    df:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:07:AC:E0:AE:1E:B2:C9:C8:25:4F:8E:AB:AB:CE:D9:57:D8:48:5A
            X509v3 Authority Key Identifier:
                keyid:AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/63bbd539411b574776270bc69e9109c06581f5e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.32.0/20
                IPv6:
                  2803:8300::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:8a:f2:6c:1d:25:6d:3e:c2:5c:fb:47:16:82:ff:5c:a1:3e:
         c2:58:8c:f3:6a:ca:2c:ff:12:2e:c8:bd:2d:c3:02:15:dd:39:
         a8:c0:e6:54:8c:03:fa:26:54:f9:8a:d7:e1:77:00:45:a8:72:
         bc:2d:06:1e:b4:2d:e8:bc:b8:5c:4b:2c:ee:f6:d4:03:92:d0:
         1f:a6:73:9a:e1:0b:8d:fc:54:80:79:a7:14:34:61:b5:f2:05:
         d6:a2:74:1d:3f:97:f6:83:f6:dc:03:b8:fd:fa:17:72:c2:2c:
         41:3b:ac:0d:63:88:f3:25:7a:d2:ce:7c:c5:72:12:57:ed:f7:
         46:4c:7a:68:18:88:dd:c1:e5:35:f5:20:78:f9:15:90:2e:e1:
         13:d4:84:71:2c:6f:b8:c3:0d:ef:6a:54:b4:d4:bf:98:92:32:
         10:85:82:54:5d:44:4e:cc:d3:3f:a1:3c:51:9d:8e:ec:4a:d6:
         86:36:69:88:e5:9c:a6:1d:76:a2:b1:03:b9:9f:e6:ea:83:b9:
         f5:68:4f:ff:b2:12:66:42:bd:a5:79:f5:7c:88:2c:08:c8:5e:
         24:ed:8f:6b:d2:10:33:05:5d:22:29:e5:6e:c2:f7:3d:bd:1c:
         f5:e3:3a:6d:e3:8d:95:e9:b2:85:59:2f:80:a0:10:d5:c0:4a:
         51:dc:f2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----