Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/de120116d7ae6fb8b407b5957593d9a17fa8efda.roa
File:                     de120116d7ae6fb8b407b5957593d9a17fa8efda.roa (raw, json)
Hash identifier:          qsmdiLcIHLpNzofXFmKr2gA1iSsgSQ3Uts2v50JjWVE=
Subject key identifier:   9B:01:79:5D:BD:2D:EC:1F:1F:2C:D7:53:16:78:52:3F:61:88:D9:F4
Certificate issuer:       /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial:       2A6019
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/de120116d7ae6fb8b407b5957593d9a17fa8efda.roa
Signing time:             Thu 18 Jan 2024 14:39:47 +0000
ROA not before:           Thu 18 Jan 2024 14:39:31 +0000
ROA not after:            Thu 18 Jan 2029 14:39:31 +0000
asID:                     28002
IP address blocks:        200.0.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777113 (0x2a6019)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Validity
            Not Before: Jan 18 14:39:31 2024 GMT
            Not After : Jan 18 14:39:31 2029 GMT
        Subject: CN=de120116d7ae6fb8b407b5957593d9a17fa8efda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:7c:c7:d4:f9:e1:50:d4:f5:7e:44:f7:8c:
                    5b:ba:c1:93:59:4d:7e:a8:87:03:b4:f2:b1:3b:e3:
                    d1:20:08:e6:da:52:dd:04:14:f2:61:21:6f:28:83:
                    5a:22:3e:8e:94:bb:9a:04:71:ff:42:ff:c6:95:9b:
                    2a:d1:87:e6:9b:56:3a:f2:cd:7c:c2:ed:de:8b:d2:
                    0a:13:9f:ad:04:08:65:60:bc:bc:2c:db:6c:91:60:
                    09:41:88:47:9c:3b:a7:af:9e:58:23:74:33:b3:d6:
                    f1:91:6b:cb:04:9e:20:d9:7b:c7:da:f7:5e:9e:ea:
                    75:e7:7e:36:3a:b8:8e:8a:49:01:49:78:f1:3d:16:
                    30:fe:7c:eb:93:1d:cc:bc:f8:d4:4f:c4:a8:02:18:
                    c0:29:eb:86:0b:0e:05:39:67:27:24:cd:46:95:27:
                    1d:df:e0:cf:ab:65:a3:ba:eb:dd:63:32:ea:b4:e1:
                    7e:70:77:6c:f0:f6:e9:ee:1e:d9:fc:22:4f:8c:48:
                    15:f8:9d:e8:96:c6:6a:34:ff:53:1a:bb:bf:00:5d:
                    e8:b2:71:ff:f0:22:d8:e9:07:e5:35:90:17:c0:46:
                    5a:cb:ba:f1:58:b7:f7:c4:67:eb:b3:ff:45:59:a3:
                    b3:c8:eb:5f:5c:1e:e4:97:07:fb:9c:49:c3:4f:15:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:01:79:5D:BD:2D:EC:1F:1F:2C:D7:53:16:78:52:3F:61:88:D9:F4
            X509v3 Authority Key Identifier:
                keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/de120116d7ae6fb8b407b5957593d9a17fa8efda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:ec:44:8d:35:4f:13:fd:f4:67:61:39:8d:a5:43:b6:0d:
         74:e5:07:b5:fc:7b:45:eb:9c:6e:8d:b7:bb:2d:ee:01:31:e6:
         f5:22:11:51:54:7c:ac:6b:fa:a2:bb:e1:6c:e9:82:d8:86:be:
         9f:c2:39:a1:1c:6f:fc:41:05:33:7a:8c:4a:5d:64:df:f2:40:
         72:b1:51:cd:32:3f:9c:b2:39:8b:8f:4a:ad:df:51:3e:bb:36:
         8b:46:57:6e:8a:66:71:e6:42:2f:e5:a4:af:0f:e4:36:e7:98:
         e5:7b:71:22:9d:f2:b6:2e:55:c9:67:d4:cc:6d:bc:76:fb:22:
         5f:7b:e5:f8:17:8e:9f:2a:15:1e:3f:75:85:38:6f:9c:e0:61:
         58:e5:73:64:a7:9c:08:da:20:a4:35:1e:c4:ce:a5:40:6b:b8:
         f9:57:77:ad:d2:ad:78:2e:be:d5:bb:63:f9:b0:91:63:06:07:
         99:a8:e7:45:9c:ea:af:f6:bc:94:c8:b7:ca:e4:7c:a9:e5:19:
         43:d4:0a:d2:bc:49:fe:53:66:40:15:43:87:27:02:be:52:fe:
         bc:4c:f5:af:e3:f5:3e:e1:7e:eb:45:8f:d2:b7:34:89:49:ff:
         ca:cc:15:4a:28:83:6b:0e:07:25:dd:a2:5c:88:90:3b:fb:51:
         a1:85:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----