Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/93ed074c13c84b8744a772772d2d036373cfe1dc.roa
File:                     93ed074c13c84b8744a772772d2d036373cfe1dc.roa (raw, json)
Hash identifier:          VSKbrGFhHM4uuZa+Yvp2IneTyiuGGoT1boC4CNxzuO8=
Subject key identifier:   7D:F8:63:B8:C5:65:A1:90:71:5F:1A:17:5D:CE:33:10:2B:3B:E8:04
Certificate issuer:       /CN=f704dcc2bd05f2f811f329995911565e1ff53e09
Certificate serial:       25D42B
Authority key identifier: 29:50:CD:67:0B:F0:D9:8B:2F:8D:D9:F4:08:53:EE:DB:28:C8:EA:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f704dcc2bd05f2f811f329995911565e1ff53e09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/93ed074c13c84b8744a772772d2d036373cfe1dc.roa
Signing time:             Wed 10 Jan 2024 11:04:49 +0000
ROA not before:           Wed 10 Jan 2024 11:04:48 +0000
ROA not after:            Sat 10 Jan 2026 11:04:48 +0000
asID:                     20015
IP address blocks:        201.219.128.0/19 maxlen: 24
                          2800:290::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2479147 (0x25d42b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f704dcc2bd05f2f811f329995911565e1ff53e09
        Validity
            Not Before: Jan 10 11:04:48 2024 GMT
            Not After : Jan 10 11:04:48 2026 GMT
        Subject: CN=93ed074c13c84b8744a772772d2d036373cfe1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:a2:82:7c:44:26:7a:38:d3:e6:28:9c:94:
                    99:98:76:23:c0:9e:4c:ea:b6:07:cb:ca:6c:74:b2:
                    d3:2b:fd:79:54:0f:5b:96:e3:89:91:63:fb:5d:bd:
                    e2:77:39:54:6e:24:eb:d8:31:55:01:aa:af:a7:53:
                    79:bd:f8:93:8e:6e:c9:67:86:f1:74:4e:13:bf:31:
                    30:1d:e2:6a:85:f1:53:85:1e:d1:3a:9b:c9:c6:7d:
                    91:21:44:7a:ec:43:05:71:27:12:35:e5:92:41:76:
                    90:f8:c9:4b:15:b1:7b:92:68:73:e8:fe:c8:d5:15:
                    b7:e6:b6:ad:62:19:a2:52:c6:fe:3a:0a:88:69:b2:
                    8e:b7:7c:25:5f:2c:7c:97:4f:8d:c6:ef:f1:d9:48:
                    29:a2:2d:f6:02:7e:46:4a:f2:47:f0:d9:ab:d5:5d:
                    85:41:cb:77:dd:f7:99:e9:07:3b:1c:88:83:1f:da:
                    4f:83:fc:19:e2:c0:21:b0:27:89:55:ec:d7:cb:7c:
                    12:15:89:a8:f0:55:b2:98:a5:dc:e4:57:f1:cc:45:
                    4f:0d:01:d6:2d:c5:50:5b:94:3b:30:43:3a:b0:36:
                    23:4e:fa:2e:f0:76:4b:2d:cd:92:f1:45:c2:56:b0:
                    f4:1d:78:d4:e7:b7:21:2b:27:51:15:10:02:c7:f3:
                    66:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F8:63:B8:C5:65:A1:90:71:5F:1A:17:5D:CE:33:10:2B:3B:E8:04
            X509v3 Authority Key Identifier:
                keyid:29:50:CD:67:0B:F0:D9:8B:2F:8D:D9:F4:08:53:EE:DB:28:C8:EA:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f704dcc2bd05f2f811f329995911565e1ff53e09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/93ed074c13c84b8744a772772d2d036373cfe1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/f704dcc2bd05f2f811f329995911565e1ff53e09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.128.0/19
                IPv6:
                  2800:290::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:e1:b3:86:a7:3f:81:f6:83:83:20:7d:59:53:94:21:3d:02:
         77:69:33:a1:8a:8f:3e:78:0f:c6:39:80:0f:31:97:78:32:a8:
         6e:c0:4f:09:b9:ce:9e:a9:95:2a:fa:39:f2:85:41:d7:fd:84:
         bb:38:16:be:82:70:9b:bd:9a:08:8e:72:cb:1d:0f:2c:f2:39:
         f5:a9:c9:2f:fa:be:55:3c:f5:f6:4a:c9:f5:62:5e:cf:d4:75:
         70:72:37:57:6e:a3:42:9f:43:0e:6a:04:5a:13:5b:51:40:c2:
         cf:29:b5:ad:3d:72:f8:09:4e:72:0b:ea:c7:ba:b8:22:64:8e:
         ad:74:89:eb:4f:de:04:29:ab:e7:b7:14:f8:76:b2:f9:8c:8e:
         c4:ec:69:62:99:72:3b:7c:69:71:dc:5c:5b:cb:e0:8d:96:b7:
         ea:7b:88:61:10:4b:2c:58:bd:92:7e:72:87:74:4d:19:fe:fd:
         6c:82:99:c3:28:b1:6d:b7:0d:cc:d5:ac:a3:0a:58:20:57:63:
         86:28:25:8c:13:40:55:2e:0b:fe:a4:e0:66:2a:f5:75:88:71:
         72:97:bc:bd:80:af:52:b6:fd:a4:08:a0:90:2a:1c:0d:68:57:
         f9:cd:54:45:e5:81:73:7f:76:7c:c9:d3:84:b8:09:e9:09:bf:
         f3:f8:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----