Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d99af149a6338a0dede40aaa4940f237b5d988c7.roa
File:                     d99af149a6338a0dede40aaa4940f237b5d988c7.roa (raw, json)
Hash identifier:          HZHeQBZy7KxxKYS0Mob0KlSELvIIbTxQDk1FV9dSDXU=
Subject key identifier:   30:21:AC:07:54:59:4D:EB:7A:53:69:F7:C8:A9:CA:D1:84:1C:1A:76
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A48D5
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d99af149a6338a0dede40aaa4940f237b5d988c7.roa
Signing time:             Wed 14 Feb 2024 13:39:40 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     27789
IP address blocks:        201.221.69.0/24 maxlen: 24
                          201.221.72.0/21 maxlen: 24
                          201.221.80.0/22 maxlen: 24
                          201.221.84.0/23 maxlen: 24
                          200.12.240.0/21 maxlen: 24
                          201.221.93.0/24 maxlen: 24
                          201.221.94.0/24 maxlen: 24
                          190.93.0.0/19 maxlen: 24
                          201.221.64.0/22 maxlen: 24
                          2800:70::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2771157 (0x2a48d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=d99af149a6338a0dede40aaa4940f237b5d988c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:75:91:bf:74:f0:ce:db:dc:65:1d:a4:4d:
                    e2:aa:9e:2a:d9:c3:d5:d3:72:29:03:3d:98:07:4c:
                    3a:a3:35:18:c6:cd:43:04:78:f3:99:84:49:85:ad:
                    6b:13:4a:cc:ac:39:e9:32:f4:34:0f:cc:68:55:66:
                    b7:50:db:a4:82:97:6d:91:6e:be:f8:46:58:c1:24:
                    40:04:b6:e1:1c:6d:1b:47:7f:04:64:17:37:37:10:
                    9d:a4:65:50:ad:31:f6:1f:cf:64:66:f8:04:1f:f3:
                    95:07:c6:00:28:ef:99:c9:6e:9f:a7:ac:37:a9:ec:
                    8c:e6:7d:b6:1d:27:d8:87:2c:63:b8:e1:d3:02:17:
                    86:15:7e:8c:7b:0e:cf:e5:4e:ce:7d:31:91:4f:c3:
                    e8:99:0a:7e:b5:ce:2a:c8:08:f5:d3:5d:f5:18:19:
                    78:82:be:06:a7:0d:c8:19:4f:0b:98:1a:80:f4:49:
                    b4:d8:e6:75:72:4e:e3:16:8f:d2:2b:3c:0c:0b:1d:
                    62:5b:17:82:22:58:15:92:02:da:b2:4a:01:0b:f7:
                    23:45:e8:cd:ea:32:92:34:14:3a:48:bb:1c:81:9b:
                    fd:79:ac:6d:c7:6c:ec:4d:b1:f6:99:8e:47:9f:a6:
                    c2:07:52:b5:4d:e9:b8:78:03:ff:cd:39:11:82:70:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:21:AC:07:54:59:4D:EB:7A:53:69:F7:C8:A9:CA:D1:84:1C:1A:76
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d99af149a6338a0dede40aaa4940f237b5d988c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.0.0/19
                  200.12.240.0/21
                  201.221.64.0/22
                  201.221.69.0/24
                  201.221.72.0-201.221.85.255
                  201.221.93.0-201.221.94.255
                IPv6:
                  2800:70::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:21:38:16:1f:a2:7e:fe:4a:33:56:2e:38:2b:03:a6:58:a5:
         ed:b2:2f:de:4c:cf:87:51:d0:f7:70:88:78:3f:b2:25:3b:c4:
         a5:22:b5:c1:48:88:f4:9e:15:d1:16:8a:5e:59:49:5c:0a:08:
         19:b0:5b:34:32:a4:26:ad:b9:6a:62:0f:4d:d8:13:ed:64:1d:
         69:7e:1a:92:3f:85:b8:17:ed:54:b4:dd:74:d5:aa:d6:b4:18:
         3c:94:b3:d1:af:a5:54:dd:58:2b:ae:38:0e:71:2b:79:3e:5d:
         88:90:c1:1f:1b:c5:6a:29:66:96:2a:b8:bb:e6:78:85:fa:75:
         93:e8:41:c3:5d:65:81:0b:5b:3e:77:c6:d7:18:ce:f7:7a:a3:
         61:cc:84:61:a0:8b:13:23:eb:5b:c6:26:1b:27:19:ef:5d:fb:
         65:aa:8f:56:e1:93:b5:48:24:1d:c5:09:16:55:9a:9a:f3:24:
         42:25:0a:ee:1c:28:97:31:2e:82:13:c4:31:53:ca:02:ec:f4:
         6c:80:eb:5b:e7:c9:bd:80:15:bb:c5:5d:b2:3c:98:54:5a:82:
         99:45:2e:a5:3f:d4:83:87:75:83:d1:a4:df:db:c5:3e:df:b2:
         7e:f2:16:c9:a0:a8:ec:24:2d:83:40:df:c3:20:d2:33:e0:e0:
         b3:91:2c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----