Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d03c1c2c-2d3c-4330-be09-3e5783ec8851/74185cd37c9d23132df15ed5f46f591f9a50e9d6.roa
File:                     74185cd37c9d23132df15ed5f46f591f9a50e9d6.roa (raw, json)
Hash identifier:          J2pTapV5+8s7qzZdq37d62cfLIg45k8t3T29R0iGnZw=
Subject key identifier:   AF:3D:64:6F:F4:91:C1:1E:BA:D2:D8:A5:6B:78:79:AA:AF:FE:AD:AF
Certificate issuer:       /CN=19acadaa5cb52d9c8afd95a91c962350eb57d619
Certificate serial:       33DC
Authority key identifier: 87:40:83:10:97:9F:E2:1E:8F:D3:0F:FA:D5:A2:93:4F:86:94:9E:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19acadaa5cb52d9c8afd95a91c962350eb57d619.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d03c1c2c-2d3c-4330-be09-3e5783ec8851/74185cd37c9d23132df15ed5f46f591f9a50e9d6.roa
Signing time:             Tue 11 Apr 2023 20:59:55 +0000
ROA not before:           Sat 08 Apr 2023 20:46:24 +0000
ROA not after:            Thu 10 Apr 2025 20:46:24 +0000
asID:                     8048
IP address blocks:        200.5.41.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13276 (0x33dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19acadaa5cb52d9c8afd95a91c962350eb57d619
        Validity
            Not Before: Apr  8 20:46:24 2023 GMT
            Not After : Apr 10 20:46:24 2025 GMT
        Subject: CN=74185cd37c9d23132df15ed5f46f591f9a50e9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cd:b6:7a:fe:60:69:03:76:ca:2b:2b:9c:33:
                    d9:69:40:f7:6b:52:ce:ae:52:f4:f7:8b:22:64:4c:
                    05:ec:be:c0:fb:e1:44:a6:c6:b0:07:e9:cb:94:1b:
                    9f:07:83:18:33:2e:b7:71:11:61:1b:6a:92:91:c4:
                    5b:13:a0:16:2f:27:26:fe:df:94:cf:ea:5b:f8:0b:
                    cf:56:1e:54:f8:97:1e:5e:cf:59:c5:c6:e4:30:09:
                    5a:ae:51:6c:ac:cc:81:74:58:89:5f:c3:1d:33:97:
                    8a:40:0f:6b:ef:f1:a8:ca:d3:b0:78:20:59:44:e4:
                    00:e6:76:0c:68:b3:97:5c:f9:e1:ef:dc:59:7a:81:
                    e7:5c:62:d9:19:6d:b9:e5:5e:b0:0e:8c:36:c0:9d:
                    ea:2a:4e:59:07:67:d0:51:04:65:d3:79:c0:fe:ba:
                    fb:d2:b9:ce:a6:e5:4b:de:a6:f5:94:cf:28:60:40:
                    3e:46:74:75:88:da:7e:08:18:86:a3:45:b9:bd:49:
                    c1:03:a0:7b:72:5f:02:7d:9e:11:9c:b6:0a:b7:5a:
                    f4:7d:fc:4f:37:34:03:3c:3a:ec:7b:f3:30:e0:e3:
                    df:86:ad:f0:49:d5:f4:89:92:6e:3b:d0:17:97:95:
                    f0:d4:5f:4e:d1:d0:a6:23:eb:8a:fe:57:53:9e:04:
                    71:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3D:64:6F:F4:91:C1:1E:BA:D2:D8:A5:6B:78:79:AA:AF:FE:AD:AF
            X509v3 Authority Key Identifier:
                keyid:87:40:83:10:97:9F:E2:1E:8F:D3:0F:FA:D5:A2:93:4F:86:94:9E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19acadaa5cb52d9c8afd95a91c962350eb57d619.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d03c1c2c-2d3c-4330-be09-3e5783ec8851/74185cd37c9d23132df15ed5f46f591f9a50e9d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d03c1c2c-2d3c-4330-be09-3e5783ec8851/19acadaa5cb52d9c8afd95a91c962350eb57d619.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:24:bb:0e:62:22:d6:26:6c:59:c6:d9:fa:0e:10:29:e6:91:
         8c:28:33:9b:a0:2d:21:be:c7:88:ae:4d:31:fa:2e:60:d7:c4:
         73:4a:ba:eb:37:9b:b5:2b:99:7d:32:23:3d:5d:e5:b8:99:9d:
         8f:52:5d:ff:e8:26:66:c6:9f:1d:85:19:aa:c8:99:f9:d7:79:
         a3:e0:72:f3:82:da:a2:89:1c:54:54:39:16:ba:74:8c:c3:04:
         41:72:17:2c:b4:e4:a3:08:b2:28:29:a4:73:5c:a8:35:5f:51:
         76:e5:65:44:e4:d2:46:98:b3:cd:3e:89:da:5a:63:de:6e:1c:
         79:16:7d:57:52:53:84:70:42:22:28:24:e4:f0:e3:5d:a8:6a:
         24:17:74:c2:cc:7a:90:95:6e:7a:e2:5a:47:e7:cb:da:56:ed:
         b7:17:2a:2e:85:98:54:b3:c7:6d:b0:55:c6:2b:49:43:37:66:
         52:b1:b5:1b:10:38:d2:33:fe:65:b9:7f:4c:9a:0e:40:bb:4f:
         96:05:d3:da:5f:cd:8a:25:c5:73:6b:26:91:5b:72:5e:2a:12:
         59:16:70:df:e6:f2:6b:f0:58:6e:3b:0a:09:ea:53:f9:4b:19:
         dc:71:ca:08:58:da:69:f7:de:4b:48:f8:2d:ed:bb:2a:59:13:
         7c:4e:c5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----