Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/234924218290994256e36413d165cf7a849aaeb7.roa
File:                     234924218290994256e36413d165cf7a849aaeb7.roa (raw, json)
Hash identifier:          sYYNxvnqgExOSGG426haopHBwB82r52nka+YR3R08R8=
Subject key identifier:   2E:F2:66:80:03:D9:10:9A:74:73:DF:36:C3:5F:52:8B:68:51:C1:49
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       0DB717
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/234924218290994256e36413d165cf7a849aaeb7.roa
Signing time:             Wed 24 Mar 2021 14:35:27 +0000
ROA not before:           Wed 24 Mar 2021 14:35:25 +0000
ROA not after:            Tue 24 Mar 2026 14:35:25 +0000
asID:                     18747
IP address blocks:        200.61.128.0/19 maxlen: 24
                          200.73.0.0/18 maxlen: 24
                          200.73.64.0/19 maxlen: 24
                          200.80.0.0/18 maxlen: 24
                          200.91.192.0/19 maxlen: 24
                          200.91.224.0/19 maxlen: 24
                          200.110.128.0/19 maxlen: 24
                          201.217.192.0/19 maxlen: 24
                          2802::/30 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898839 (0xdb717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 24 14:35:25 2021 GMT
            Not After : Mar 24 14:35:25 2026 GMT
        Subject: CN=234924218290994256e36413d165cf7a849aaeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5e:90:6c:c6:e5:8b:69:9e:47:cb:ea:46:52:
                    c9:45:29:3a:08:ce:3c:6a:ae:65:89:84:67:bf:bf:
                    21:c0:08:f0:92:10:f4:17:b2:c1:91:a1:94:83:96:
                    32:c8:6d:3a:44:3b:4f:bf:61:ce:a8:2f:cb:c7:7a:
                    68:6f:24:94:97:6f:e6:00:77:f1:ee:29:15:1f:4e:
                    e2:82:82:ed:79:0f:58:c4:d0:fb:65:82:c6:a7:c7:
                    63:80:be:c4:01:08:4c:94:09:87:a2:11:c6:b5:bc:
                    99:fb:f9:45:8d:f1:ea:48:01:66:1b:00:dd:15:20:
                    3b:d3:5c:1d:8a:5d:8a:5c:5a:f0:65:a4:86:35:38:
                    05:81:6b:b4:ee:cb:d1:e3:c7:4a:d7:9e:01:54:36:
                    b8:f1:17:05:0a:e3:68:6f:bc:4d:92:eb:29:8e:5b:
                    04:cd:9a:e8:ec:f3:4e:28:db:c6:4e:87:70:d4:cd:
                    ae:82:c1:91:7e:89:3e:7b:81:5c:99:55:98:c8:68:
                    49:e9:3b:5a:36:16:be:c2:f0:bc:3d:56:d9:36:09:
                    c2:43:31:83:8b:63:e2:ac:12:54:e6:ca:1b:ab:2c:
                    44:29:32:06:af:fe:42:85:d2:eb:8c:0f:fa:6a:73:
                    cf:55:cf:d7:d2:84:5b:4d:f6:ea:c6:de:62:16:fc:
                    97:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F2:66:80:03:D9:10:9A:74:73:DF:36:C3:5F:52:8B:68:51:C1:49
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/234924218290994256e36413d165cf7a849aaeb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.128.0/19
                  200.73.0.0-200.73.95.255
                  200.80.0.0/18
                  200.91.192.0/18
                  200.110.128.0/19
                  201.217.192.0/19
                IPv6:
                  2802::/30

    Signature Algorithm: sha256WithRSAEncryption
         ba:5e:49:95:c8:ec:8b:a9:dc:2a:a3:47:a4:40:89:71:5a:d8:
         fa:b4:87:b4:f2:ce:11:bf:2c:bb:e8:fd:a0:52:1c:da:c9:26:
         da:fd:d1:bd:f6:f8:de:cb:47:d6:a2:76:41:26:cd:61:b1:cc:
         3d:61:82:fc:f1:09:d5:22:68:76:f1:1b:c9:64:b8:14:3c:03:
         89:8e:9c:eb:1e:b4:1d:1d:ff:6d:04:06:a2:b1:5e:60:0a:3f:
         70:c0:67:6d:26:e8:02:3c:ac:e3:72:fc:ed:7a:3e:82:a4:75:
         43:36:b7:9f:2d:8f:46:3a:d6:0f:f7:92:de:55:6f:a7:9c:77:
         ec:40:2e:60:42:6a:3b:5c:51:ec:48:56:4b:9f:78:0e:9c:6c:
         31:3e:51:f7:23:5b:45:be:ea:af:d1:36:b8:54:d2:85:5d:cc:
         d7:86:b1:58:33:04:57:f8:81:24:3b:62:0e:f0:a1:ec:c8:db:
         0f:7c:10:44:2d:c8:00:f9:bb:9b:11:70:8a:2b:3f:ab:f9:55:
         be:54:61:a7:86:11:32:41:cf:6a:53:2d:26:53:20:dd:f3:39:
         68:34:ab:31:a6:32:af:61:4d:3c:0b:ff:bc:68:64:7d:53:5f:
         04:e4:6e:44:ba:88:ee:6a:aa:d5:6c:18:45:31:8f:6c:09:38:
         12:bb:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----