Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/599519a445097bb3e8c5f16e3f7a86ddb50c3405.roa
File:                     599519a445097bb3e8c5f16e3f7a86ddb50c3405.roa (raw, json)
Hash identifier:          GEHso03Xqy3xw9ytDcD4VxkSrrxO/C8eE9KN8/2cz4A=
Subject key identifier:   06:28:DF:CC:D0:83:CE:28:AE:B6:79:E4:2D:A0:B6:FB:B6:08:19:D7
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       044316
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/599519a445097bb3e8c5f16e3f7a86ddb50c3405.roa
Signing time:             Wed 12 Jul 2023 15:12:57 +0000
ROA not before:           Tue 11 Jul 2023 15:12:57 +0000
ROA not after:            Sat 12 Jul 2025 15:12:57 +0000
asID:                     16629
IP address blocks:        201.246.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279318 (0x44316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 11 15:12:57 2023 GMT
            Not After : Jul 12 15:12:57 2025 GMT
        Subject: CN=599519a445097bb3e8c5f16e3f7a86ddb50c3405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:ac:c0:8a:7b:90:ae:41:10:50:51:88:93:
                    2b:a1:0a:5d:2d:29:a4:92:3d:9f:ef:2d:b7:03:c3:
                    4c:e3:38:04:e3:cc:0f:60:50:40:31:3d:5f:f5:44:
                    d7:18:ed:8b:0a:bd:6c:e8:6f:c7:bb:0f:92:de:fa:
                    2a:6e:08:5c:00:8f:37:c9:8f:9e:63:d0:0c:b8:02:
                    01:67:3b:e8:e1:0a:23:bc:bf:2e:ad:35:cf:d0:ac:
                    e6:64:e6:63:c4:5d:99:99:c4:c6:68:89:43:4c:e4:
                    00:dd:02:85:43:ad:af:88:f9:e0:e7:74:26:4f:bb:
                    e3:de:f6:3f:d8:cc:e6:80:9f:45:92:41:19:ab:fb:
                    a8:20:99:ad:dc:06:01:5c:b7:39:a1:9e:e0:26:2f:
                    96:b1:b7:bc:47:28:2c:0c:8a:14:cf:a3:0d:63:c7:
                    63:cc:81:b4:c8:2c:73:1e:84:8b:69:b6:b2:3e:74:
                    f9:48:7e:e1:01:99:10:45:15:79:79:93:fc:d6:77:
                    fa:08:de:ee:16:ea:f1:cc:60:fc:2f:e8:93:62:ad:
                    69:a1:fd:26:bb:63:1e:0c:f4:ab:7e:88:0d:59:c5:
                    25:23:dc:1e:87:a6:e7:a2:c2:27:c2:39:c3:ee:b7:
                    ce:7e:b0:29:1b:56:8d:69:a9:52:e4:f2:a0:91:a6:
                    12:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:28:DF:CC:D0:83:CE:28:AE:B6:79:E4:2D:A0:B6:FB:B6:08:19:D7
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/599519a445097bb3e8c5f16e3f7a86ddb50c3405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.246.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         30:74:be:74:36:9a:00:9a:e8:11:25:83:25:06:92:7d:af:fd:
         1a:7c:29:7a:cc:63:e3:2f:ca:3a:bb:86:ce:18:b7:39:30:7f:
         be:1c:aa:ae:f5:a1:1f:b4:9c:d0:11:2a:ed:3e:11:19:30:fe:
         0f:49:66:2e:67:05:5e:3f:62:52:da:d0:72:7c:2a:af:c4:de:
         f8:9f:d4:cb:f4:1d:e5:64:5f:13:4d:d6:6d:c1:08:33:26:7c:
         26:f8:b9:d9:55:41:b1:cf:58:1d:ae:fe:2f:d8:c1:cc:bd:d7:
         00:d4:b5:e2:cf:fb:87:ba:cd:da:d8:09:99:65:46:a5:07:38:
         0e:a4:76:b5:58:80:5e:3f:f3:7f:07:fb:ac:44:b7:34:5c:68:
         2e:21:a1:f4:35:b0:a9:9f:bc:90:bf:d5:f6:38:a5:ec:3c:06:
         62:20:97:d3:9c:e8:7d:82:df:d9:e2:13:0e:ae:59:af:02:f0:
         cc:f3:a2:b4:50:4d:3a:4a:24:87:2d:f6:d1:f0:6c:09:3e:0c:
         a9:28:bf:17:f5:9f:e5:71:a1:3d:e5:65:9f:6b:19:9d:47:82:
         34:44:03:11:14:87:69:86:74:49:25:29:60:6c:cd:0b:c2:5d:
         cc:2c:dc:0b:aa:cd:45:a2:6a:ed:38:97:69:79:fc:c2:11:fc:
         49:88:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----