Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/6360e55f052497baf7f8e8d0ce2d2e1c58bcc5cf.roa
File:                     6360e55f052497baf7f8e8d0ce2d2e1c58bcc5cf.roa (raw, json)
Hash identifier:          zCywVQyIzfzi2nJu4l1Zzdq6ZFa8iTMXrQTn67Is9ug=
Subject key identifier:   32:E4:EA:65:44:94:D3:7B:79:0D:8A:C8:75:6B:EF:73:1C:C5:35:47
Certificate issuer:       /CN=a736ecb08742dd36c47f8758266a50eba82e7909
Certificate serial:       20157C
Authority key identifier: F6:EB:DC:97:F8:05:97:89:02:10:A8:21:FE:99:74:D8:A1:7F:F6:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/6360e55f052497baf7f8e8d0ce2d2e1c58bcc5cf.roa
Signing time:             Fri 12 May 2023 18:54:42 +0000
ROA not before:           Thu 11 May 2023 18:54:42 +0000
ROA not after:            Mon 12 May 2025 18:54:42 +0000
asID:                     264633
IP address blocks:        200.10.141.0/24 maxlen: 24
                          2801:11:1000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102652 (0x20157c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a736ecb08742dd36c47f8758266a50eba82e7909
        Validity
            Not Before: May 11 18:54:42 2023 GMT
            Not After : May 12 18:54:42 2025 GMT
        Subject: CN=6360e55f052497baf7f8e8d0ce2d2e1c58bcc5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:2d:4d:fc:26:fb:2a:e7:cc:0c:21:74:cc:
                    ee:8a:18:5a:9a:da:b2:44:99:c8:db:3a:af:f8:bc:
                    10:35:d9:fa:d1:ad:61:e7:49:07:02:d9:6a:e5:7b:
                    13:d7:3f:7a:d6:8d:26:18:c6:15:61:9e:96:ae:41:
                    bc:e5:19:d7:6b:70:9a:a1:52:33:cb:1e:81:1a:95:
                    24:aa:49:5a:47:43:9a:e1:3f:93:af:54:fa:06:f5:
                    99:fb:15:e3:ad:16:be:15:1a:5a:09:3e:b4:79:b6:
                    f0:c9:7a:a6:c5:8c:54:82:0d:1c:8a:54:bc:2b:f2:
                    d4:57:11:f4:07:33:15:7a:19:4f:1d:d4:c9:3d:00:
                    c1:00:3d:aa:65:6e:34:a5:1a:fb:81:0a:3c:37:fd:
                    40:db:b5:ae:a1:09:3c:28:90:18:f9:51:11:ab:c9:
                    be:98:54:30:8b:18:57:3b:e6:8e:0d:66:49:a3:93:
                    3d:0e:9a:d2:33:f2:f2:60:0a:da:3b:90:b0:3c:98:
                    1c:e0:87:e1:a8:a7:d3:44:91:fd:79:62:c4:7c:43:
                    59:bf:29:43:fb:4f:3f:24:0f:f2:2d:34:82:49:3d:
                    05:d5:45:c0:d7:8c:3f:61:90:30:68:56:77:ee:24:
                    25:6d:2d:f3:44:ac:60:5f:3d:f9:81:27:a3:7a:d8:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E4:EA:65:44:94:D3:7B:79:0D:8A:C8:75:6B:EF:73:1C:C5:35:47
            X509v3 Authority Key Identifier:
                keyid:F6:EB:DC:97:F8:05:97:89:02:10:A8:21:FE:99:74:D8:A1:7F:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/6360e55f052497baf7f8e8d0ce2d2e1c58bcc5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.141.0/24
                IPv6:
                  2801:11:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:95:48:e7:9d:2c:eb:42:f4:1b:c9:b9:ee:04:b7:f4:b1:51:
         6e:7d:0a:6e:d5:84:ca:40:d0:eb:9a:11:65:38:f8:bc:b8:18:
         95:00:42:73:ab:93:aa:e3:8e:fe:45:98:3b:f5:f2:0c:70:e9:
         98:eb:dc:f8:7b:ea:6c:49:98:a4:06:87:0f:c9:20:e9:f5:83:
         ef:2d:ac:29:8d:cc:0b:7d:4d:5e:6d:51:ed:52:21:3a:3e:71:
         9e:a5:84:a9:eb:92:84:bd:42:cc:cd:77:1d:1b:7c:7d:7f:a3:
         85:c5:22:72:4e:66:32:3f:c0:27:b7:d0:5d:ef:e6:33:6c:f7:
         c1:82:d8:b9:1c:09:6c:2e:30:87:e0:d8:2e:3b:f8:6c:d4:bf:
         c8:b8:63:47:4f:6f:6e:21:d6:5c:0a:11:6d:f3:f3:0d:bd:c5:
         75:02:12:8d:4c:53:47:84:8d:05:f6:e8:80:1e:2a:ac:f8:16:
         d4:a2:97:dd:14:d0:2e:8e:bc:40:75:5d:c6:38:29:50:04:03:
         d7:c1:61:3c:c4:78:f4:29:a6:ce:f1:ba:f0:37:56:15:f2:26:
         e0:b5:32:86:cc:53:83:8b:c4:83:33:af:d3:92:c8:0e:dd:68:
         6c:39:ea:22:df:16:0b:ad:03:72:af:ca:3a:21:d9:4b:e6:d5:
         01:cc:e4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----