Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5e39c1cd8717d92f6519aa354b253996396ed122.roa
File:                     5e39c1cd8717d92f6519aa354b253996396ed122.roa (raw, json)
Hash identifier:          dpQreRBBS20i6ercvF1BkQlfe//mQy+BLJhH8WfpafM=
Subject key identifier:   3B:04:EF:D3:F1:BA:64:81:48:4A:7C:4E:A4:34:D6:6C:F6:6A:93:17
Certificate issuer:       /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial:       23BE70
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5e39c1cd8717d92f6519aa354b253996396ed122.roa
Signing time:             Thu 10 Aug 2023 06:26:07 +0000
ROA not before:           Wed 09 Aug 2023 06:26:07 +0000
ROA not after:            Sun 10 Aug 2025 06:26:07 +0000
asID:                     198949
IP address blocks:        200.119.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2342512 (0x23be70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
        Validity
            Not Before: Aug  9 06:26:07 2023 GMT
            Not After : Aug 10 06:26:07 2025 GMT
        Subject: CN=5e39c1cd8717d92f6519aa354b253996396ed122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:05:8e:41:d7:7d:55:6d:c4:ab:17:97:f3:39:
                    7a:58:32:5b:09:42:0a:b6:91:94:e7:5e:66:7f:02:
                    97:4b:61:57:86:36:47:80:13:b7:e5:82:69:c8:e9:
                    fb:28:51:cf:3c:67:03:29:d2:02:8f:60:83:ad:31:
                    7c:43:46:43:a7:62:d4:3c:72:93:15:0a:a2:e4:0b:
                    62:13:31:8d:d5:14:ba:f9:87:bf:fc:ff:75:9f:d9:
                    9a:99:9b:72:bd:4c:bf:0b:ae:87:d1:a1:2a:23:5a:
                    b5:96:34:58:f8:16:24:1c:3b:1e:32:38:cb:de:3d:
                    61:e4:19:9a:4a:6a:7a:61:67:c4:0b:77:ec:2f:b1:
                    ca:22:25:5a:0b:2b:55:b2:b6:79:a5:3e:84:31:83:
                    f6:fd:4a:0d:f8:1e:e9:f1:f1:2f:ed:a6:8d:7b:f1:
                    3c:4f:ac:52:ea:a7:42:d4:5b:a7:8a:cb:0c:e1:c1:
                    c9:c9:e0:6d:76:6b:cd:94:35:ad:a9:96:02:2d:ab:
                    fb:6b:d8:82:bd:d0:8c:d9:ff:fb:3b:0d:ca:34:ca:
                    26:14:68:dd:4b:7a:de:82:8a:e0:73:58:6b:b8:c0:
                    59:fd:7b:c1:42:72:9b:38:83:5c:a3:cf:54:ce:da:
                    d6:0d:ec:5c:d9:18:d7:e5:47:e3:23:c3:ca:29:1c:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:04:EF:D3:F1:BA:64:81:48:4A:7C:4E:A4:34:D6:6C:F6:6A:93:17
            X509v3 Authority Key Identifier:
                keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5e39c1cd8717d92f6519aa354b253996396ed122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:61:a2:5d:3c:12:31:c0:52:c5:57:cf:6e:28:c8:d5:61:
         2d:17:f9:7c:33:6f:6c:80:21:c3:1a:21:48:5f:21:69:03:ef:
         fb:ad:b2:98:b5:8c:d9:71:d8:08:55:1d:2e:50:25:15:fa:3f:
         c6:1d:6d:85:28:e8:73:67:19:66:40:69:02:ab:25:2b:a1:c8:
         06:21:29:09:40:7c:d1:9f:9d:a9:09:c0:64:18:ec:12:5a:08:
         41:59:a6:4c:96:a3:5a:ab:72:4c:d7:16:4c:b6:65:97:bb:01:
         6e:03:e2:06:eb:ea:e6:20:bc:62:84:1d:90:24:ee:44:3c:1e:
         e0:fd:e8:c1:94:e7:0f:28:ec:c1:7e:cc:df:93:7a:71:3c:94:
         94:d7:be:33:6c:ee:f6:1d:0b:ca:a4:af:53:b7:ac:66:40:9c:
         d4:da:a9:a7:33:8c:f0:c4:cd:68:63:ea:cf:86:b2:59:3c:db:
         10:3c:79:66:0e:af:93:28:52:fc:3d:ea:0d:82:99:fc:22:ce:
         c6:97:00:5c:36:7b:e3:ed:43:c4:a8:5f:3c:55:e1:10:74:74:
         c4:31:6f:3a:aa:1c:30:f1:a1:21:07:05:67:72:d1:94:b4:12:
         ae:21:c3:09:89:66:e7:6f:e2:7f:dc:fe:39:7f:31:78:ee:1c:
         75:45:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----