Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/803bafefd5522fe041376f428b88dc9b340062eb.roa
File:                     803bafefd5522fe041376f428b88dc9b340062eb.roa (raw, json)
Hash identifier:          YIe87+vWOud+fBzpqUlLNL+4HqXvt1ceBtr1v6+yIlc=
Subject key identifier:   B1:90:FB:17:50:2B:88:22:0D:EE:70:0A:26:05:CA:1E:90:8F:69:99
Certificate issuer:       /CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Certificate serial:       05A2B6
Authority key identifier: 5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/803bafefd5522fe041376f428b88dc9b340062eb.roa
Signing time:             Fri 23 Feb 2024 09:59:02 +0000
ROA not before:           Fri 23 Feb 2024 09:59:02 +0000
ROA not after:            Mon 23 Feb 2026 09:59:02 +0000
asID:                     13999
IP address blocks:        201.159.200.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369334 (0x5a2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
        Validity
            Not Before: Feb 23 09:59:02 2024 GMT
            Not After : Feb 23 09:59:02 2026 GMT
        Subject: CN=803bafefd5522fe041376f428b88dc9b340062eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1c:13:e9:98:ef:fb:b9:ad:f8:28:35:db:6c:
                    c6:bb:10:07:e3:76:77:04:62:b6:da:1e:73:e7:24:
                    d2:77:00:3b:4a:d4:9c:a0:01:9d:8d:88:45:6f:64:
                    75:ad:f8:b3:51:ff:c6:dc:4a:0e:d4:6f:25:d9:87:
                    e2:86:46:8b:d2:4b:66:a7:4d:c1:f8:6e:7a:5e:47:
                    9a:0c:27:ee:b4:b8:8e:dc:f9:8a:6a:f5:02:5a:0a:
                    48:71:7b:c6:da:c7:09:3a:d9:f0:4f:60:c4:b5:0a:
                    e1:f2:16:52:40:34:a5:55:17:fd:83:6d:80:82:d9:
                    bd:23:e1:06:83:aa:b0:36:c5:67:4c:3a:e8:f5:43:
                    a3:36:2b:cb:08:61:40:d4:fa:b3:6c:d9:2e:bb:eb:
                    c8:d5:f7:b7:85:69:c9:88:1c:99:a8:9c:55:d6:24:
                    f3:3b:05:43:81:e4:49:0e:7d:c1:05:35:54:eb:35:
                    fc:0d:48:6b:35:f8:a4:ea:90:90:6c:c9:5d:00:0c:
                    70:7f:18:cb:72:de:78:88:cf:4a:5f:4e:a4:57:83:
                    df:16:c0:11:60:b7:e3:88:94:2e:24:f3:d7:c2:d7:
                    15:9f:cb:28:df:85:7c:9a:9c:59:8a:f9:e1:d1:d4:
                    9c:1e:ba:85:9d:34:57:da:a2:59:62:d1:e8:29:81:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:90:FB:17:50:2B:88:22:0D:EE:70:0A:26:05:CA:1E:90:8F:69:99
            X509v3 Authority Key Identifier:
                keyid:5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/803bafefd5522fe041376f428b88dc9b340062eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:16:a1:16:1e:e7:46:b8:e8:ae:36:ed:a2:2d:84:e8:da:0b:
         36:6a:65:70:09:5b:96:a5:8c:52:c7:7a:f0:6f:8e:bf:9d:c3:
         87:23:44:93:ab:31:21:f2:2b:05:c7:10:99:e5:fe:a5:ad:c4:
         76:d1:8e:31:6c:56:97:a8:bc:89:04:23:65:2c:14:fe:44:46:
         08:36:93:27:9f:ad:e4:70:45:9b:29:c0:ac:c0:14:9a:16:91:
         cc:e7:03:50:84:32:94:0b:e7:57:1c:d1:2f:18:bf:a6:f9:ef:
         8a:e0:ef:07:55:08:d2:92:7b:df:38:cd:e4:50:8b:a8:e4:48:
         a5:f4:f8:ca:c8:93:5e:02:ff:8a:5a:31:90:43:81:14:d1:ca:
         2f:22:a1:77:a7:4b:9c:8a:67:f1:d8:d8:45:26:42:77:42:02:
         fc:24:aa:48:11:ca:c7:c6:e7:32:a4:0c:d5:74:82:c8:57:c1:
         ea:d6:7c:6a:1d:d5:42:50:38:91:f1:95:9d:99:cc:da:19:0b:
         32:ec:2f:e6:3e:ae:37:20:4d:8f:1a:8b:0a:86:fe:6e:48:93:
         c1:54:cc:44:24:db:46:11:c9:23:64:e2:16:32:7b:58:fa:17:
         a4:80:53:23:e6:23:1c:95:6a:f3:96:d1:03:7e:b9:ca:1b:29:
         ad:1d:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----