Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/758fa66c-3dbc-4185-ba01-eda69e79e86a/ef9d59583541325facec6123bd64defd390e9481.roa
File:                     ef9d59583541325facec6123bd64defd390e9481.roa (raw, json)
Hash identifier:          HinXZebEUfAHdHwcG3Olt/8Ue25nm1cVIVaKhiUiS7k=
Subject key identifier:   BD:17:7B:79:33:2C:DA:DC:DC:E4:C8:A0:63:9D:2E:60:94:B5:8E:5A
Certificate issuer:       /CN=5c7013b2a2f9960ed4d3a4a2b977739b9f30979e
Certificate serial:       12FF70
Authority key identifier: DF:4F:8B:18:CF:F1:0F:F3:AC:86:06:69:B7:36:4B:78:40:56:EA:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c7013b2a2f9960ed4d3a4a2b977739b9f30979e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/758fa66c-3dbc-4185-ba01-eda69e79e86a/ef9d59583541325facec6123bd64defd390e9481.roa
Signing time:             Sun 14 May 2023 17:39:02 +0000
ROA not before:           Sat 13 May 2023 17:39:02 +0000
ROA not after:            Wed 14 May 2025 17:39:02 +0000
asID:                     271898
IP address blocks:        200.39.60.0/22 maxlen: 24
                          2803:4210::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245040 (0x12ff70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c7013b2a2f9960ed4d3a4a2b977739b9f30979e
        Validity
            Not Before: May 13 17:39:02 2023 GMT
            Not After : May 14 17:39:02 2025 GMT
        Subject: CN=ef9d59583541325facec6123bd64defd390e9481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:5b:37:a4:a1:7b:db:2a:f9:0f:62:5b:7d:
                    e7:f0:44:f9:1f:41:f0:5a:eb:44:5c:f3:f0:50:32:
                    e7:20:96:03:ad:57:7e:82:ed:1d:8b:3b:72:27:10:
                    64:73:72:69:d1:74:bb:59:2a:d7:c9:6a:27:ae:33:
                    7d:df:c0:c9:68:60:af:17:bc:f2:ea:0b:ba:94:1f:
                    8f:5b:68:42:e2:1a:cf:47:d8:6b:a6:d1:df:e8:af:
                    0b:b8:3f:bf:94:4d:3e:8f:d8:58:bd:2e:7b:bb:03:
                    24:a0:74:04:fb:62:bf:d4:3f:8b:8d:a7:41:79:8c:
                    5a:f7:e2:cd:94:0c:7b:2b:87:33:08:de:8c:1f:f5:
                    1e:93:e3:fc:f3:fd:a1:76:49:ac:ce:43:fe:cb:29:
                    45:6b:b1:a6:4f:ba:08:02:15:b4:3d:ae:ad:de:24:
                    32:db:7b:6f:e8:00:33:f5:dc:4c:e6:c1:0a:5f:93:
                    71:4e:f0:0e:4a:98:54:c5:fc:c0:78:b8:59:5d:78:
                    f0:32:7f:87:38:ae:83:a7:65:b8:8b:95:95:22:ed:
                    52:f3:77:f3:96:43:d4:2a:b8:e9:27:c1:3b:77:a2:
                    0d:bf:c8:db:c8:c4:99:77:f4:bd:c7:50:64:f8:01:
                    0c:73:72:93:b1:05:9c:7b:a5:a0:f5:d9:cd:12:bf:
                    7a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:17:7B:79:33:2C:DA:DC:DC:E4:C8:A0:63:9D:2E:60:94:B5:8E:5A
            X509v3 Authority Key Identifier:
                keyid:DF:4F:8B:18:CF:F1:0F:F3:AC:86:06:69:B7:36:4B:78:40:56:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c7013b2a2f9960ed4d3a4a2b977739b9f30979e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/758fa66c-3dbc-4185-ba01-eda69e79e86a/ef9d59583541325facec6123bd64defd390e9481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/758fa66c-3dbc-4185-ba01-eda69e79e86a/5c7013b2a2f9960ed4d3a4a2b977739b9f30979e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.60.0/22
                IPv6:
                  2803:4210::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:1c:0b:1c:80:8b:60:f9:98:19:fc:89:5b:fe:02:0d:d5:18:
         72:fe:ea:8a:a3:23:de:21:d7:04:e7:bb:1f:8f:6a:77:d6:05:
         3a:7f:86:5a:ad:8a:72:f1:d6:fa:d9:e6:4b:ef:10:d4:de:73:
         fc:6e:a2:a2:07:bc:14:4b:e8:60:27:c1:00:63:08:c7:d0:3c:
         69:5a:1b:fb:1d:50:96:4d:63:79:00:69:ad:6c:6e:db:d9:2f:
         56:83:aa:04:22:f2:7a:2f:c6:5e:91:e9:8d:ad:fb:f6:b8:e6:
         b3:b6:0c:bd:2b:e9:35:24:64:7f:ac:2f:79:34:92:64:3a:76:
         44:a7:34:26:37:3f:3e:b8:0a:6d:4e:09:34:b5:68:b6:94:36:
         4c:ec:f2:b0:2b:5a:1c:a9:de:da:1b:9f:4d:1f:cc:09:4f:81:
         51:d6:43:7c:d9:99:5a:a2:88:e4:be:26:2e:8e:b7:c9:f2:90:
         57:30:7a:6e:9d:44:76:d8:3e:c0:dc:5b:de:ae:d5:c8:1a:fa:
         07:5e:f7:f1:5f:70:e2:f7:83:4e:8a:44:84:a0:00:91:bd:0c:
         6f:d5:26:3c:e1:e3:6d:49:18:dd:57:78:eb:d5:5c:ec:fb:ac:
         ca:51:0b:e8:8e:b4:19:c5:b5:ea:f0:27:4b:99:96:b0:ee:40:
         fe:e1:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----