Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/e204aff0197ee868cf79220447ce12e27c83fc09.roa
File:                     e204aff0197ee868cf79220447ce12e27c83fc09.roa (raw, json)
Hash identifier:          e5QQ/Swg7lvcTCuc3qmuDPyTfQ8WFcO6WZHvWbkU+3s=
Subject key identifier:   6D:1E:45:A4:5C:E5:38:4F:F7:4D:AC:C1:59:4A:FD:BF:B9:AF:8B:B4
Certificate issuer:       /CN=8999a5bb1c665f3c628fb53842304cdf432ef4d1
Certificate serial:       1E3A3D
Authority key identifier: 6E:73:F1:01:D6:37:41:BB:04:10:00:51:85:18:BE:C9:85:62:1F:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8999a5bb1c665f3c628fb53842304cdf432ef4d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/e204aff0197ee868cf79220447ce12e27c83fc09.roa
Signing time:             Thu 16 Feb 2023 14:14:16 +0000
ROA not before:           Wed 15 Feb 2023 14:13:15 +0000
ROA not after:            Sun 16 Feb 2025 14:13:15 +0000
asID:                     27817
IP address blocks:        201.131.90.0/23 maxlen: 23
                          2801:0:4c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1980989 (0x1e3a3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8999a5bb1c665f3c628fb53842304cdf432ef4d1
        Validity
            Not Before: Feb 15 14:13:15 2023 GMT
            Not After : Feb 16 14:13:15 2025 GMT
        Subject: CN=e204aff0197ee868cf79220447ce12e27c83fc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:92:a1:4e:1e:49:a8:29:dc:17:4b:6c:b5:e7:
                    a5:fd:b0:15:8a:c7:85:e4:3b:69:0d:9d:d2:b0:9e:
                    e5:d7:ca:c6:ad:7f:60:b3:6a:95:44:8b:ca:01:f9:
                    06:dd:4e:38:63:93:f2:f1:48:22:91:79:69:d6:a9:
                    97:09:33:29:38:99:c8:2a:cd:d0:48:18:ea:90:c2:
                    78:81:e9:16:5b:7a:1d:b1:9c:ad:d7:c6:ac:01:00:
                    b5:3b:fc:8a:0f:d0:d2:09:c7:e0:30:83:0c:19:58:
                    db:e6:e9:59:e8:af:1b:b2:c6:04:fb:dc:e4:6e:2a:
                    2b:3e:69:52:ae:77:11:0a:9d:d9:be:29:de:b9:a0:
                    fe:23:51:4a:52:08:fd:e2:e3:fc:6f:42:14:e6:a1:
                    69:cd:7b:a0:a6:f7:0f:83:63:82:61:70:2c:22:1e:
                    8d:08:65:e8:71:f7:a4:de:b2:34:06:56:4f:83:57:
                    cb:29:9c:3e:81:4b:97:db:8f:4b:f9:8c:69:3d:4e:
                    76:5b:40:e1:a5:bf:2e:cd:c5:18:93:a9:5d:17:03:
                    14:f0:14:89:92:97:31:8e:ff:7c:d2:08:c6:10:ff:
                    31:71:cb:0b:83:bc:d2:77:35:86:2e:73:f1:06:1a:
                    7f:ef:d1:60:73:6e:36:ae:a1:3c:24:7f:0f:09:af:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1E:45:A4:5C:E5:38:4F:F7:4D:AC:C1:59:4A:FD:BF:B9:AF:8B:B4
            X509v3 Authority Key Identifier:
                keyid:6E:73:F1:01:D6:37:41:BB:04:10:00:51:85:18:BE:C9:85:62:1F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8999a5bb1c665f3c628fb53842304cdf432ef4d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/e204aff0197ee868cf79220447ce12e27c83fc09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/8999a5bb1c665f3c628fb53842304cdf432ef4d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.90.0/23
                IPv6:
                  2801:0:4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:6f:2e:12:c4:01:4d:10:bb:f4:4c:7d:af:36:f7:00:19:4c:
         2d:62:00:e0:c8:e9:f2:8c:2e:15:df:fb:35:e6:6c:43:c9:8f:
         c3:dd:d8:88:15:c7:c6:af:81:1b:da:84:09:dd:30:6e:47:59:
         dd:d4:90:1b:10:c7:38:53:38:1a:0b:12:58:93:c9:df:23:4c:
         e4:a8:6d:81:9f:54:78:ab:07:dc:57:8f:9b:12:bd:58:67:e7:
         2c:86:dd:12:28:16:91:13:f5:15:b8:0c:aa:84:e8:bb:45:03:
         37:2e:98:f0:63:1d:13:cc:28:38:56:39:52:22:4a:b2:4b:3b:
         d6:a3:34:be:12:6c:f4:c4:6e:84:24:93:c4:57:fc:92:6c:56:
         cb:68:02:a0:c3:da:62:73:68:a2:00:d6:9b:7e:a2:46:2c:c8:
         86:69:8a:97:3e:0e:01:37:af:d0:70:84:79:a7:3d:36:2c:9c:
         fe:8b:df:2f:2d:28:73:a9:e1:d6:e4:6a:a8:e6:ad:5e:ed:15:
         55:28:4b:41:34:7f:21:ec:ea:f2:fe:2b:94:b0:b6:85:78:96:
         2e:13:ed:46:69:33:23:f4:d5:dd:a3:60:e6:a7:d7:a6:27:b4:
         f6:35:49:b2:60:ae:d0:f2:39:ca:77:d1:6c:69:7d:07:62:73:
         83:51:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----