Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/e70b72b07bbb2e0cc6c6b0914f7c0c703e5d385e.roa
File:                     e70b72b07bbb2e0cc6c6b0914f7c0c703e5d385e.roa (raw, json)
Hash identifier:          N5x8zmn2IVZYUUa+JX52MDLovyGTCT8iqY61qiziyRU=
Subject key identifier:   34:18:32:3C:1D:F3:95:3E:51:4C:D1:E1:5F:00:2D:7D:4E:62:D3:3B
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       264CAE
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/e70b72b07bbb2e0cc6c6b0914f7c0c703e5d385e.roa
Signing time:             Fri 27 Oct 2023 16:04:05 +0000
ROA not before:           Fri 27 Oct 2023 16:04:05 +0000
ROA not after:            Mon 27 Oct 2025 16:04:05 +0000
asID:                     269955
IP address blocks:        200.7.210.176/28 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2509998 (0x264cae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Oct 27 16:04:05 2023 GMT
            Not After : Oct 27 16:04:05 2025 GMT
        Subject: CN=e70b72b07bbb2e0cc6c6b0914f7c0c703e5d385e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:01:9f:ca:9d:9b:d6:d5:60:75:ba:56:e8:24:
                    a2:29:e3:a4:e0:ff:f9:4b:89:2d:b0:f2:9c:f3:23:
                    a0:30:6a:69:49:8a:97:e5:37:a1:d4:a3:80:47:93:
                    f0:d7:b7:a4:fb:ab:56:9b:49:9f:76:18:3e:5d:28:
                    e8:1e:13:ea:90:83:22:8c:b9:71:7f:c8:56:5b:5e:
                    38:0d:b4:b9:e2:a2:50:f0:f8:14:79:f4:1c:15:50:
                    2e:06:b6:5f:25:e2:91:ef:7d:5f:f3:20:ef:08:11:
                    d9:ec:49:05:76:08:bd:85:cc:61:49:b0:74:a0:08:
                    8b:09:de:84:02:7b:e4:45:13:f7:5c:65:18:71:29:
                    29:c6:b0:06:50:4d:ac:e6:ca:03:ad:b2:69:dc:b5:
                    8e:b1:f1:a2:68:5d:36:c7:d0:47:e9:42:a1:ee:91:
                    73:21:77:12:a3:2d:3c:d7:2f:3b:c6:b1:fe:0b:d8:
                    9d:c3:d0:39:08:22:02:b9:9b:ca:5a:7b:4d:65:c6:
                    e0:6b:14:ae:47:f6:df:20:3a:3b:76:95:49:ab:ac:
                    e1:e6:5a:75:68:fb:2e:a8:ae:8a:36:11:f8:e1:ac:
                    1e:a9:e4:eb:d1:9d:b5:34:91:f9:b2:c2:3f:57:4d:
                    45:e6:d6:89:85:2b:15:3c:ad:87:84:0b:d7:9b:6c:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:18:32:3C:1D:F3:95:3E:51:4C:D1:E1:5F:00:2D:7D:4E:62:D3:3B
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/e70b72b07bbb2e0cc6c6b0914f7c0c703e5d385e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.210.176/28

    Signature Algorithm: sha256WithRSAEncryption
         36:81:e7:8f:7f:86:a3:2f:0b:49:e0:24:d6:e2:04:23:c5:72:
         93:91:cd:ae:66:76:24:b6:31:44:92:2f:db:31:2c:6d:a9:b5:
         3a:0e:c1:22:2e:8d:fa:2f:02:9b:70:5e:80:c1:b8:c0:3a:c9:
         4c:29:d1:08:78:6f:ff:df:39:95:5d:0d:56:f1:65:51:a7:66:
         a1:d1:1f:37:14:c3:67:64:8f:f7:48:27:63:03:35:37:7c:2b:
         a1:c5:80:48:0b:e4:02:c3:eb:e9:2f:b0:9e:52:a6:20:fc:86:
         3e:9d:5e:6c:f8:19:26:f7:1f:61:65:06:d1:0f:05:ae:d4:2b:
         e8:2e:d0:3d:b7:81:ed:41:16:8b:6c:a5:ce:c2:22:70:8b:e0:
         fb:1d:f0:da:4e:f6:7d:fc:de:98:2b:33:84:68:34:5c:7a:b4:
         26:3c:93:4f:0c:16:b9:48:8a:b8:ac:89:95:2d:a9:3e:2a:e2:
         f9:5e:c4:64:10:e0:94:ed:4e:0f:08:62:0b:fe:f8:5b:dc:72:
         38:df:8b:c7:dc:ab:78:cd:37:6f:f6:56:14:0f:27:48:25:84:
         e2:0c:41:e3:4e:88:e2:56:42:13:25:64:56:95:3d:c1:cd:11:
         01:5e:cd:c3:66:0a:72:2a:6c:2f:20:2b:ed:4a:eb:5f:69:ff:
         a0:c7:46:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----