Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/a2df496a927c797f9bfd0ccdd1782575bad18eb2.roa
File:                     a2df496a927c797f9bfd0ccdd1782575bad18eb2.roa (raw, json)
Hash identifier:          Jap29oZo1oIAaq3aEQA+b00uOVwAx0UB+YZ2i2UpoN4=
Subject key identifier:   06:2B:FC:EA:79:F2:25:DD:4F:2E:78:85:D3:F9:37:5C:93:3F:79:93
Certificate issuer:       /CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Certificate serial:       247EF7
Authority key identifier: 57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/a2df496a927c797f9bfd0ccdd1782575bad18eb2.roa
Signing time:             Sun 12 Nov 2023 14:05:59 +0000
ROA not before:           Sun 12 Nov 2023 14:05:56 +0000
ROA not after:            Wed 12 Nov 2025 14:05:56 +0000
asID:                     211612
IP address blocks:        200.10.177.96/27 maxlen: 27
                          2801:1d:a001:a::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391799 (0x247ef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
        Validity
            Not Before: Nov 12 14:05:56 2023 GMT
            Not After : Nov 12 14:05:56 2025 GMT
        Subject: CN=a2df496a927c797f9bfd0ccdd1782575bad18eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:4a:c0:1d:94:d4:ec:b2:5a:62:10:1f:17:
                    12:6b:94:34:59:7d:e7:eb:65:f0:1f:90:c8:54:e9:
                    5c:9c:7f:b6:f4:8a:13:99:04:ac:b4:f3:25:c7:0f:
                    76:5a:3f:4e:0f:eb:c9:f5:85:a3:42:61:50:f4:32:
                    17:e6:a5:ea:c6:16:9c:5d:35:1c:45:6b:df:ac:d2:
                    9e:f5:d7:58:65:de:e5:41:0b:90:64:af:bd:b0:bf:
                    3e:f6:d4:be:3d:0c:5d:af:59:39:d9:3d:46:74:ac:
                    ce:34:4a:f9:c4:b3:f3:cc:32:20:c0:9b:ba:b7:8d:
                    74:06:cb:83:51:75:cd:98:b8:85:cb:fd:47:b9:69:
                    ff:2e:be:8d:86:f8:e6:4a:c7:b2:1f:20:73:7c:49:
                    75:df:1f:be:51:ae:de:95:89:ab:e7:fa:0b:22:e4:
                    86:55:00:cf:eb:f1:b5:e2:29:4a:9b:24:81:f3:66:
                    57:ad:c5:3d:50:f5:9d:9e:fc:1e:b3:25:d0:bc:42:
                    86:fc:cd:d4:c9:3d:eb:17:0a:9e:24:5d:53:a8:5a:
                    e9:04:7d:d8:50:48:83:4a:9a:5e:64:75:c8:1a:6f:
                    28:14:85:56:09:37:9b:33:84:8d:08:75:dc:e0:d0:
                    13:3f:7e:5c:14:57:ef:fd:6e:49:63:84:33:e4:11:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2B:FC:EA:79:F2:25:DD:4F:2E:78:85:D3:F9:37:5C:93:3F:79:93
            X509v3 Authority Key Identifier:
                keyid:57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/a2df496a927c797f9bfd0ccdd1782575bad18eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.177.96/27
                IPv6:
                  2801:1d:a001:a::/64

    Signature Algorithm: sha256WithRSAEncryption
         14:d2:1d:8b:52:d6:bd:45:e3:37:1e:c2:60:e6:43:56:a3:cd:
         a0:d3:ca:f5:f7:67:be:fc:2d:17:a1:8c:26:cb:38:da:54:11:
         3e:87:19:ed:fa:16:bd:22:06:8f:e1:34:4e:24:58:c4:bc:4e:
         41:c8:16:9b:e3:41:7f:cb:80:2c:90:48:0b:12:db:1c:4c:b8:
         e2:d0:77:b0:c9:10:67:ee:ba:21:9c:ac:d1:d6:df:be:de:eb:
         7a:56:30:4e:6c:ff:c0:ec:c8:89:89:c2:33:84:df:fc:a0:0a:
         51:49:30:95:43:c2:a7:6e:36:75:24:72:79:0d:22:49:f1:ed:
         d0:d4:d8:1a:7f:31:1f:8a:82:e6:09:68:e2:5f:47:a5:9b:b9:
         22:21:6e:4b:ff:a3:b8:11:19:f6:e2:69:ed:bf:8b:54:70:86:
         a5:9e:80:a9:f8:fc:c6:fa:03:d4:2c:5c:00:8a:37:fb:a2:da:
         50:e5:c6:2e:06:38:2a:f0:19:34:82:f8:32:01:64:74:46:5b:
         0f:5c:a2:17:8b:75:b2:90:a6:c2:41:82:03:4f:a0:d7:2e:69:
         b7:fb:bd:3a:ac:ff:38:dc:48:34:39:d2:1c:7e:3f:aa:78:ab:
         7e:25:82:c1:5c:65:e7:4a:31:e0:c1:c2:42:18:41:bc:ed:3e:
         ec:20:c5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----