Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/1258d40e163749062a9e2fa31f609086dbb86f18.roa
File:                     1258d40e163749062a9e2fa31f609086dbb86f18.roa (raw, json)
Hash identifier:          ZZPBMaEBX5y9VwNc6Mjb4qlbRqZWEJ7wqU4Mhk2nx70=
Subject key identifier:   80:9B:E3:18:E2:1D:44:7F:A5:C8:05:8C:09:9B:3C:F0:C6:9D:A3:2B
Certificate issuer:       /CN=b1eadf44e23f1448be60c0468eb9f4738d5692ba
Certificate serial:       11E990
Authority key identifier: E2:F3:81:5E:62:68:44:E2:76:86:2B:C2:EE:C5:28:ED:89:97:0F:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1eadf44e23f1448be60c0468eb9f4738d5692ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/1258d40e163749062a9e2fa31f609086dbb86f18.roa
Signing time:             Thu 27 Oct 2022 16:36:27 +0000
ROA not before:           Tue 23 Mar 2021 14:43:12 +0000
ROA not after:            Tue 24 Mar 2026 14:43:12 +0000
asID:                     28504
IP address blocks:        200.33.111.0/24 maxlen: 24
                          2001:13c7:7014::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173904 (0x11e990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1eadf44e23f1448be60c0468eb9f4738d5692ba
        Validity
            Not Before: Mar 23 14:43:12 2021 GMT
            Not After : Mar 24 14:43:12 2026 GMT
        Subject: CN=1258d40e163749062a9e2fa31f609086dbb86f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:e1:c7:a2:72:4b:60:b6:3f:b9:55:da:4d:
                    b7:f2:da:4d:16:3f:f3:6e:8a:15:e6:33:f4:fd:1c:
                    f2:ba:25:f0:39:2d:af:e6:31:d6:ba:82:d1:5a:c5:
                    02:7f:ed:74:d6:4c:89:49:df:70:78:a1:95:45:65:
                    08:a7:f4:a3:79:ed:d0:09:bc:c3:27:eb:ef:70:0a:
                    ea:21:63:74:75:6a:aa:af:1b:20:49:64:85:32:9b:
                    0e:9d:3e:20:b5:f4:cb:5e:f0:5b:5e:cf:a4:cd:c6:
                    44:b0:a2:34:01:74:f6:9a:6d:f0:98:0e:a6:07:e8:
                    1a:6f:bc:70:0d:b5:87:74:13:aa:b8:78:37:11:67:
                    87:2a:40:b3:ff:b1:37:80:11:c8:c9:25:4a:9d:e4:
                    f1:2d:17:d0:5c:7d:9f:51:08:dc:c0:e4:6e:c3:42:
                    82:1d:27:6f:a2:ef:73:2f:5d:41:2a:f8:61:b4:fd:
                    76:19:82:3f:fd:ed:62:b3:c8:a0:bb:4c:f1:3c:6a:
                    f1:11:09:80:5e:e5:65:1c:13:18:22:67:72:c3:07:
                    cb:d1:99:c4:dd:29:e5:da:b2:3f:43:2b:e8:b8:e1:
                    3d:82:56:b8:17:22:59:73:65:fd:73:d5:4b:74:fb:
                    d1:d2:f4:90:52:c5:4c:bd:80:88:40:75:8a:07:10:
                    fa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9B:E3:18:E2:1D:44:7F:A5:C8:05:8C:09:9B:3C:F0:C6:9D:A3:2B
            X509v3 Authority Key Identifier:
                keyid:E2:F3:81:5E:62:68:44:E2:76:86:2B:C2:EE:C5:28:ED:89:97:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1eadf44e23f1448be60c0468eb9f4738d5692ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/1258d40e163749062a9e2fa31f609086dbb86f18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/b1eadf44e23f1448be60c0468eb9f4738d5692ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.111.0/24
                IPv6:
                  2001:13c7:7014::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:9c:04:fc:b8:c4:17:35:b2:85:e1:cb:7f:c5:cd:a3:5e:
         83:19:d5:a8:b5:1b:4f:01:9b:65:a0:52:97:65:4a:53:22:3b:
         5f:c6:27:b9:b5:f4:d9:77:3e:b4:f4:8b:ab:40:78:cb:be:4f:
         78:65:de:d5:49:04:f0:42:95:62:42:72:94:ed:bc:28:44:09:
         3f:e8:49:1f:72:fe:8b:b9:d6:54:b5:8c:53:b2:93:f7:d7:e5:
         a9:6d:8d:42:69:95:4c:81:8d:d9:60:c0:ce:b9:8a:d9:e3:ad:
         28:b2:ef:32:f5:49:93:98:85:05:94:4b:d1:9f:65:fe:d9:58:
         9e:65:af:5f:d3:00:fd:27:32:8c:cc:45:13:b9:a8:e8:a7:11:
         58:b6:d5:4c:d0:c1:f0:26:0e:da:38:21:1d:7a:bf:23:93:8a:
         00:f4:d3:b4:92:0d:89:0a:04:03:38:59:09:6b:57:77:cb:79:
         28:3b:a3:d2:98:c6:f8:38:75:ef:55:64:b8:7d:9c:52:f3:fd:
         80:ce:fb:3a:c5:77:df:77:3c:83:56:8e:33:7d:7d:ab:51:01:
         2a:af:1b:42:b1:c0:d3:46:41:6a:02:1c:43:29:ce:e7:62:83:
         fa:e6:62:82:c7:62:cd:20:dc:32:14:fb:5b:d3:b6:17:4d:9b:
         dc:98:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----