Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/cfe35c654fc51177ed1585c9f2856170f42560a0.roa
File:                     cfe35c654fc51177ed1585c9f2856170f42560a0.roa (raw, json)
Hash identifier:          jswz+BzvzCXxHeJoNcn5XLectQLOB+74EZku0d5dn90=
Subject key identifier:   E5:E7:C0:C6:B0:9F:AA:66:2C:2C:19:E7:83:F6:67:12:0F:6C:49:01
Certificate issuer:       /CN=f704dcc2bd05f2f811f329995911565e1ff53e09
Certificate serial:       25CF0D
Authority key identifier: 29:50:CD:67:0B:F0:D9:8B:2F:8D:D9:F4:08:53:EE:DB:28:C8:EA:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f704dcc2bd05f2f811f329995911565e1ff53e09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/cfe35c654fc51177ed1585c9f2856170f42560a0.roa
Signing time:             Wed 10 Jan 2024 11:04:48 +0000
ROA not before:           Wed 10 Jan 2024 11:04:48 +0000
ROA not after:            Sat 10 Jan 2026 11:04:48 +0000
asID:                     265554
IP address blocks:        201.219.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2477837 (0x25cf0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f704dcc2bd05f2f811f329995911565e1ff53e09
        Validity
            Not Before: Jan 10 11:04:48 2024 GMT
            Not After : Jan 10 11:04:48 2026 GMT
        Subject: CN=cfe35c654fc51177ed1585c9f2856170f42560a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:48:20:74:06:ea:20:b3:4f:55:7e:81:17:
                    94:27:de:35:86:3f:04:09:13:43:08:04:85:a1:42:
                    55:f0:97:7e:5a:c1:9f:31:c5:37:2b:53:f9:70:89:
                    a5:8e:39:7d:50:c8:4b:8b:da:15:f6:4d:8e:b1:1b:
                    81:7b:4e:1e:c1:fc:fd:e5:55:83:00:ed:1f:41:59:
                    89:8a:cb:36:ad:42:01:e3:5e:0e:84:0e:7e:7f:20:
                    8e:6e:9d:18:be:2f:c3:68:85:34:71:96:80:c5:21:
                    34:4e:57:d3:82:42:f4:b2:1a:d8:e0:df:11:2a:94:
                    8c:38:1f:2d:09:92:66:8a:b7:b5:ca:35:2c:15:6b:
                    c0:76:6b:3b:3a:de:dc:49:08:79:78:90:81:bf:a3:
                    05:1b:ac:ec:6f:88:3f:56:71:3f:0d:55:76:25:79:
                    cb:97:df:de:03:3d:03:df:00:13:8c:cd:87:43:b8:
                    d9:b3:91:61:7f:b4:78:89:91:f4:d5:68:3b:ad:24:
                    b4:d3:bc:4c:8e:ae:70:6e:4c:d8:30:00:67:86:c3:
                    48:45:b0:99:ad:fc:d3:8b:af:98:f8:d3:47:4d:a6:
                    be:f7:19:b8:90:54:94:af:9b:3b:b6:02:ad:2d:78:
                    c1:56:31:99:4a:cf:8b:0a:52:e4:39:85:e6:c8:92:
                    99:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E7:C0:C6:B0:9F:AA:66:2C:2C:19:E7:83:F6:67:12:0F:6C:49:01
            X509v3 Authority Key Identifier:
                keyid:29:50:CD:67:0B:F0:D9:8B:2F:8D:D9:F4:08:53:EE:DB:28:C8:EA:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f704dcc2bd05f2f811f329995911565e1ff53e09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/cfe35c654fc51177ed1585c9f2856170f42560a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/822de167-46f2-49af-b15c-d5b386e60cc2/f704dcc2bd05f2f811f329995911565e1ff53e09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:65:a2:f4:df:1e:44:c9:c4:c9:32:72:1b:64:47:cb:e3:
         9d:01:c2:65:38:5d:08:0a:9e:d3:a5:36:41:eb:25:12:61:da:
         ed:61:9e:5a:60:e2:a5:95:75:ab:8e:f1:d0:66:9b:9f:ab:f6:
         d0:ed:16:05:06:b2:2e:cc:57:08:fd:4b:c9:46:fb:45:e4:f4:
         13:22:2f:d9:bf:27:d7:14:50:09:55:62:69:47:f1:59:64:20:
         b5:9b:c6:2c:9b:df:dc:31:ca:8c:54:bb:2a:a1:44:4b:b7:09:
         6e:3b:45:b2:ec:b7:77:0d:88:ea:52:be:41:66:cb:dc:4f:dd:
         aa:77:ff:38:e9:f4:95:b3:73:9a:cb:c7:bb:9a:4c:06:54:7f:
         3b:bf:6c:e3:93:6a:67:8c:2e:b7:44:17:cd:86:ce:4f:f4:da:
         c7:eb:3a:df:7f:95:ef:d5:ee:12:27:fa:ab:b2:8a:01:97:23:
         2a:b2:d1:87:03:23:d3:45:bd:79:ac:e4:4d:97:57:e9:b3:4a:
         c3:4e:10:1e:0b:2a:e1:76:59:e4:46:24:e2:52:ec:c9:9d:69:
         b2:e0:a1:d9:84:73:f6:3a:59:7e:5c:8f:66:de:b9:59:ef:f5:
         13:0c:a5:b2:3e:87:7b:5d:2b:5d:9a:4a:50:ed:71:a6:0c:92:
         8d:37:32:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----