Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134302e302f32322d3234203d3e203133393939.roa
File:                     3230302e37372e3134302e302f32322d3234203d3e203133393939.roa (raw, json)
Hash identifier:          /eePytwAcpFkZqvOcm6gvH0RHVYAk4lUXDUVa+ddHys=
Subject key identifier:   BA:46:31:D8:81:B0:4C:D8:09:49:D2:12:5E:94:69:4C:03:04:16:FB
Certificate issuer:       /CN=8578B31074E0B57459B1C2A690B89261860EA94C
Certificate serial:       6580FEE7E5FD1CCE864AAD9A12387EED6C2FA6AB
Authority key identifier: 85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134302e302f32322d3234203d3e203133393939.roa
Signing time:             Wed 15 May 2024 13:15:03 +0000
ROA not before:           Wed 15 May 2024 13:10:03 +0000
ROA not after:            Wed 14 May 2025 13:15:03 +0000
asID:                     13999
IP address blocks:        200.77.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:80:fe:e7:e5:fd:1c:ce:86:4a:ad:9a:12:38:7e:ed:6c:2f:a6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8578B31074E0B57459B1C2A690B89261860EA94C
        Validity
            Not Before: May 15 13:10:03 2024 GMT
            Not After : May 14 13:15:03 2025 GMT
        Subject: CN=BA4631D881B04CD80949D2125E94694C030416FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:2b:c9:f9:2b:44:a3:b8:86:9c:f6:3c:59:
                    24:cc:09:58:eb:88:de:a6:9f:81:08:1a:92:86:f3:
                    cf:3c:b0:c7:98:41:24:50:cb:6e:ce:3d:7e:61:74:
                    59:8d:a2:68:c8:b3:d3:d6:bd:7e:8f:47:9d:47:94:
                    a8:3c:19:c2:44:03:e3:5b:01:69:8d:2a:62:91:59:
                    d5:43:f4:03:03:78:2b:46:8e:e0:65:f5:9a:f4:d7:
                    63:66:15:59:6c:42:ed:61:35:3c:a5:47:a8:ba:f0:
                    97:65:bc:1c:d4:8d:1b:d8:52:93:39:af:db:f7:f6:
                    5c:12:ad:0d:74:3a:84:b2:18:57:72:cf:0d:16:f3:
                    3c:8b:74:33:14:fb:39:ce:6c:c0:7e:f9:00:ba:da:
                    30:38:35:a9:3f:99:0b:1e:03:aa:df:41:de:f2:d1:
                    04:e4:1d:c9:f6:4b:37:27:39:2b:63:34:5f:ee:8c:
                    fe:d7:e2:7d:0e:38:b4:4e:1b:df:c3:c6:e4:55:01:
                    24:bd:90:0a:e7:17:11:cd:ce:bf:5f:be:4c:d0:d8:
                    bf:5e:ed:13:cc:04:4d:04:dd:9f:65:61:67:89:38:
                    e0:7e:00:a6:62:9f:74:f5:d1:c6:d7:e8:9e:40:2a:
                    e5:e4:4e:17:49:26:16:a8:ac:d2:58:68:56:60:12:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:46:31:D8:81:B0:4C:D8:09:49:D2:12:5E:94:69:4C:03:04:16:FB
            X509v3 Authority Key Identifier:
                keyid:85:78:B3:10:74:E0:B5:74:59:B1:C2:A6:90:B8:92:61:86:0E:A9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/8578B31074E0B57459B1C2A690B89261860EA94C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8578B31074E0B57459B1C2A690B89261860EA94C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134302e302f32322d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:38:5d:f8:05:53:d6:ae:65:30:4e:78:43:a3:9b:fd:8f:
         69:ab:0a:87:e3:59:81:fd:6d:63:dc:99:23:e2:a5:0b:98:1f:
         0a:ae:e9:4c:f7:e6:04:ce:f5:66:64:fa:5f:51:0c:5a:a7:45:
         ef:cc:0f:70:92:6e:a2:39:93:9c:6b:18:0e:b8:7c:7d:2f:a3:
         95:7a:54:aa:e0:0c:85:5f:f7:fe:89:28:54:f0:fb:cc:5d:7f:
         52:54:ba:19:a4:e2:46:08:f0:34:1b:ec:96:bc:42:47:e1:3d:
         9f:ee:4c:25:f6:a4:ad:f0:2d:bb:35:21:7f:b9:5f:5e:7f:d1:
         3d:15:b6:e7:b4:6e:fd:ac:48:a5:33:03:88:21:57:15:03:48:
         ad:ab:b5:4f:46:7c:05:fa:06:07:45:29:fd:3a:82:02:29:9e:
         b0:31:27:ec:a4:04:f7:7e:37:f8:cb:6e:df:c0:3d:f2:04:72:
         96:8d:8d:62:9d:b8:8c:84:47:c6:58:00:fd:2d:85:ae:57:38:
         27:a3:57:62:3b:25:01:54:35:e4:81:6a:0d:19:71:41:ae:0c:
         78:c9:e8:11:cc:d9:79:a5:a3:0b:93:c5:01:da:6e:30:0a:bc:
         a1:3a:65:78:c2:8b:ce:3d:cf:23:d1:ab:3e:7e:1f:d4:14:2f:
         a6:d6:89:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----