Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/758d865f221404beed9946d054b7e803fcfb5980.roa
File:                     758d865f221404beed9946d054b7e803fcfb5980.roa (raw, json)
Hash identifier:          wSAoH00X9h3D2IVtiNLrIoNQd5PvNy83LeH8sFxzSzs=
Subject key identifier:   04:2C:07:0E:DD:A0:FB:B8:76:FA:59:02:27:1C:EF:38:3E:3E:F6:F4
Certificate issuer:       /CN=d46ebd602e50b2947122f994202d0ade1474b0a2
Certificate serial:       20588F
Authority key identifier: 20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/758d865f221404beed9946d054b7e803fcfb5980.roa
Signing time:             Wed 27 Dec 2023 15:27:01 +0000
ROA not before:           Wed 27 Dec 2023 15:26:58 +0000
ROA not after:            Sat 27 Dec 2025 15:26:58 +0000
asID:                     270018
IP address blocks:        200.23.75.0/24 maxlen: 24
                          2801:1da::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119823 (0x20588f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46ebd602e50b2947122f994202d0ade1474b0a2
        Validity
            Not Before: Dec 27 15:26:58 2023 GMT
            Not After : Dec 27 15:26:58 2025 GMT
        Subject: CN=758d865f221404beed9946d054b7e803fcfb5980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:18:8e:2e:d1:f3:a2:c7:63:45:db:d6:ca:
                    bd:9d:5d:9f:f9:ec:59:62:f2:21:34:4e:c1:e5:1d:
                    d9:3c:69:f0:ab:aa:6a:1b:ce:00:dd:65:74:4e:dd:
                    7d:a0:18:4e:53:7d:84:b5:45:b6:45:87:20:94:a6:
                    fb:bf:6f:ab:5c:10:83:75:78:0c:cf:f2:a2:7a:a1:
                    12:60:84:84:ac:71:81:86:10:0a:00:ed:38:2a:8c:
                    62:d8:10:6b:35:e4:0e:00:71:0a:3a:ff:66:11:e8:
                    95:c8:c3:1f:5d:5b:61:41:14:d4:fc:84:be:80:32:
                    1f:0f:0a:93:57:55:45:1c:1e:6e:2d:39:e5:7f:1a:
                    87:5f:2a:45:f5:ab:a5:49:46:48:b2:2d:ae:35:0e:
                    b5:a0:0b:5f:3e:10:22:a7:48:6f:4a:e3:87:84:80:
                    89:0e:39:bc:f7:f6:c1:24:0a:d3:fc:28:44:a7:bc:
                    e1:2b:8a:d2:f5:29:40:36:80:1e:ff:24:18:55:03:
                    ed:7a:55:62:d5:b3:c0:a3:06:e2:a9:82:1b:ef:57:
                    38:6d:eb:93:67:89:45:e4:e3:63:76:68:31:47:c2:
                    bb:df:d8:94:81:4d:38:af:48:9e:d8:43:7f:1e:2f:
                    d4:d8:ae:7b:c9:f4:c9:c5:51:8e:8f:91:6c:23:a7:
                    19:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2C:07:0E:DD:A0:FB:B8:76:FA:59:02:27:1C:EF:38:3E:3E:F6:F4
            X509v3 Authority Key Identifier:
                keyid:20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/758d865f221404beed9946d054b7e803fcfb5980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/d46ebd602e50b2947122f994202d0ade1474b0a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.75.0/24
                IPv6:
                  2801:1da::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:b1:99:97:99:c2:50:28:1d:83:88:60:67:d8:4c:fd:e9:a8:
         3c:0d:e3:8e:32:fb:7a:f4:43:59:89:e8:54:6b:d2:5c:ee:c3:
         e4:7f:3a:a9:d8:07:4c:7b:ab:11:f0:87:c6:b2:8b:f4:cf:e3:
         40:68:72:4d:b0:35:b2:26:96:ae:87:a9:55:91:8a:a8:c9:57:
         c6:87:27:ac:23:52:bb:c8:21:bb:6c:81:19:10:e7:d6:15:93:
         a4:9b:27:12:45:0c:1a:6f:87:8c:42:73:e0:8b:a5:05:4c:bf:
         e6:b7:5a:3b:ac:c3:49:29:6e:18:d9:62:3f:2b:72:b4:b4:d8:
         8d:d4:36:e6:0e:7e:ab:49:a5:04:77:96:2b:d7:4e:0d:73:87:
         a0:fc:81:6e:a1:ce:41:65:d9:cb:8f:81:be:9a:8b:de:62:dd:
         44:e8:86:6c:2a:2f:e3:bb:e5:53:68:bc:ed:56:94:01:34:87:
         d8:d4:2a:c3:a9:bb:21:2c:17:68:7e:5b:71:68:62:65:c5:44:
         9a:10:e1:a5:e2:c5:24:c0:79:11:05:06:b0:bd:71:36:da:ab:
         ce:b7:7e:e4:2d:78:69:a1:53:1d:41:19:32:fc:a6:a9:f5:be:
         4f:06:3a:19:ee:c8:35:00:6d:e4:0b:8c:e5:41:1d:1d:92:94:
         cd:b7:29:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----