Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/afcaaaa5-f490-41a9-9427-d1f11ebe39a0/44383e89b9bd09847a6bd55cac67d100890617ef.roa
File:                     44383e89b9bd09847a6bd55cac67d100890617ef.roa (raw, json)
Hash identifier:          iOVdYxpKSMcLXgb1/qgRfRPZ/3N1dbt9J1pVOQ1kexw=
Subject key identifier:   D1:5A:0A:61:E0:6A:EC:99:58:E6:6D:7F:A3:BE:0D:A9:99:3D:4C:1B
Certificate issuer:       /CN=87e2d1044b2d3cea1798d05fa76266bef1de1574
Certificate serial:       03C8
Authority key identifier: 72:F6:C8:E3:79:00:47:B2:F7:95:DD:D7:A3:29:63:EA:E9:6D:22:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87e2d1044b2d3cea1798d05fa76266bef1de1574.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/afcaaaa5-f490-41a9-9427-d1f11ebe39a0/44383e89b9bd09847a6bd55cac67d100890617ef.roa
Signing time:             Tue 19 Sep 2023 19:45:47 +0000
ROA not before:           Mon 18 Sep 2023 19:45:47 +0000
ROA not after:            Fri 19 Sep 2025 19:45:47 +0000
asID:                     28514
IP address blocks:        201.158.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968 (0x3c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87e2d1044b2d3cea1798d05fa76266bef1de1574
        Validity
            Not Before: Sep 18 19:45:47 2023 GMT
            Not After : Sep 19 19:45:47 2025 GMT
        Subject: CN=44383e89b9bd09847a6bd55cac67d100890617ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8f:4a:95:cb:9f:d1:ed:d0:39:43:bc:5e:c1:
                    c3:b8:ab:7e:35:7e:17:93:81:00:a3:c0:f6:4e:af:
                    8a:14:95:e2:4d:78:45:38:94:83:dc:45:41:cb:ac:
                    d6:17:7a:d5:88:3e:ba:f7:7e:ce:57:0f:4b:9d:13:
                    7b:dc:45:49:6e:f7:c1:3a:b7:80:e2:ab:ae:88:22:
                    6d:2e:63:ac:5c:ad:f5:5d:f1:07:4b:a4:99:9f:c8:
                    2b:d6:d7:09:f7:4d:10:36:ba:63:b5:3e:2a:81:85:
                    52:6a:43:20:44:ce:94:13:f7:9f:68:4f:19:75:09:
                    bb:fd:4d:e1:e8:6b:51:b4:e5:67:8f:f3:cd:6b:37:
                    5b:00:bf:c3:06:ed:1b:22:24:3c:5c:44:44:82:22:
                    82:a2:51:01:14:20:71:b5:b7:18:d6:a3:27:76:11:
                    6f:20:88:18:4d:65:b4:39:f8:af:07:9d:d7:b8:23:
                    60:74:b6:a8:3f:4f:06:87:26:70:06:38:03:71:b0:
                    ce:4b:8e:72:84:d3:7b:0b:07:88:ce:e7:54:5d:d0:
                    3c:82:c6:82:c1:c6:99:cd:b0:18:c7:dc:d1:1a:a6:
                    ba:c5:5b:cd:05:f9:4a:19:4d:ea:ae:cf:d4:93:fc:
                    72:3c:b7:16:e9:4a:79:35:6d:c4:95:fa:0b:82:fa:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5A:0A:61:E0:6A:EC:99:58:E6:6D:7F:A3:BE:0D:A9:99:3D:4C:1B
            X509v3 Authority Key Identifier:
                keyid:72:F6:C8:E3:79:00:47:B2:F7:95:DD:D7:A3:29:63:EA:E9:6D:22:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87e2d1044b2d3cea1798d05fa76266bef1de1574.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/afcaaaa5-f490-41a9-9427-d1f11ebe39a0/44383e89b9bd09847a6bd55cac67d100890617ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/afcaaaa5-f490-41a9-9427-d1f11ebe39a0/87e2d1044b2d3cea1798d05fa76266bef1de1574.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:42:43:76:76:25:7b:aa:e2:c8:a3:17:27:2b:07:bc:59:4f:
         b0:00:e8:8e:c0:00:98:4f:f5:20:b3:bd:77:9d:ee:a9:ea:9f:
         ef:81:7c:48:a3:71:c6:b0:cb:85:6e:2f:8c:79:cd:e9:20:90:
         5f:c9:1e:97:8d:40:29:13:32:f5:0f:25:d5:13:9a:10:2e:04:
         ba:29:25:dc:32:6a:fa:88:c8:56:1a:0c:f5:69:93:fe:b3:d0:
         04:4f:ed:0c:24:92:32:d1:2b:40:7c:f0:13:2c:6a:38:56:2f:
         78:05:0f:21:cc:5a:88:e3:b0:48:0e:d2:e6:d5:40:99:e0:69:
         63:f7:79:fa:5c:1a:3b:49:d4:b9:14:69:42:26:40:a6:ca:9c:
         46:48:e7:19:13:f1:b1:67:a8:d5:1c:59:39:9c:67:f5:11:6c:
         19:44:3f:bb:3a:6f:0c:8f:80:2a:5b:cb:fd:ca:46:94:ae:4d:
         ca:b6:3d:2a:4d:29:8b:6e:29:78:76:59:87:2d:7e:00:ec:1f:
         37:84:5b:ed:5e:bc:d2:f9:5f:f7:66:1f:93:bd:9a:f7:11:a9:
         0e:68:49:5f:50:46:7f:08:09:ba:c2:7b:c0:c8:ca:ba:98:9b:
         66:91:65:f5:64:7c:64:9e:90:b6:6a:57:2c:af:3a:99:18:66:
         c2:7b:2b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----