Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/858c456d74e48be70d75332e16bb3acbdba938e0.roa
File:                     858c456d74e48be70d75332e16bb3acbdba938e0.roa (raw, json)
Hash identifier:          6SgBeYiu3JpSrdoClLg6JdNRG1UCYP4l5TqJlJoO6GM=
Subject key identifier:   3E:7D:07:EE:C9:74:59:56:AF:39:F4:AA:9E:9B:B2:59:BD:26:80:AF
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       03AB64
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/858c456d74e48be70d75332e16bb3acbdba938e0.roa
Signing time:             Fri 28 Jul 2023 13:27:32 +0000
ROA not before:           Thu 27 Jul 2023 13:27:31 +0000
ROA not after:            Mon 28 Jul 2025 13:27:31 +0000
asID:                     15311
IP address blocks:        201.236.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240484 (0x3ab64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 27 13:27:31 2023 GMT
            Not After : Jul 28 13:27:31 2025 GMT
        Subject: CN=858c456d74e48be70d75332e16bb3acbdba938e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:13:10:b4:fc:81:6e:8c:5b:97:7e:22:a5:a4:
                    ea:d7:55:f7:36:bb:1b:ae:cf:05:19:92:5a:d6:fd:
                    f2:6a:f8:e2:a7:dc:cd:8f:af:aa:70:7d:97:bf:88:
                    ac:3a:f9:69:28:60:9d:5f:1a:8c:9a:b9:71:d5:2d:
                    99:e4:2f:6b:c0:55:9c:f9:10:7a:88:b1:fc:5e:16:
                    1c:01:b9:14:64:30:ae:6f:36:c1:d7:a4:b1:2b:c8:
                    fc:be:96:51:c5:3c:d7:e5:7c:cb:36:91:80:46:5d:
                    e8:5b:86:9b:a0:02:22:a6:1f:5c:b5:7b:23:b0:f8:
                    00:00:4b:26:d1:12:99:11:2f:01:87:90:74:84:6e:
                    cb:65:d9:20:d7:b1:91:d8:0a:75:1d:65:67:df:9b:
                    fd:2a:1c:b4:a1:70:d5:ad:00:17:e0:55:1b:15:0b:
                    d2:1c:38:85:24:b9:47:6a:2f:9c:c2:73:e3:3b:58:
                    bf:5c:72:e5:1c:8a:8b:d4:bd:b8:81:a1:32:03:35:
                    98:ab:17:7c:5a:eb:27:b0:5c:18:7f:ed:5c:12:6e:
                    b3:f4:d5:60:34:45:0a:6f:58:eb:e2:0a:22:b4:89:
                    8a:33:e8:ff:59:45:37:12:88:59:e0:f7:c7:4f:a4:
                    cc:e0:34:c4:5a:2d:a4:6f:82:8d:a6:99:33:2f:ba:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7D:07:EE:C9:74:59:56:AF:39:F4:AA:9E:9B:B2:59:BD:26:80:AF
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/858c456d74e48be70d75332e16bb3acbdba938e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.236.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:04:45:0e:34:45:b6:26:75:39:31:af:a3:ef:7b:70:d5:
         c2:35:7e:a6:91:98:ea:1b:00:55:fa:43:65:fe:92:b4:08:c4:
         fd:98:2c:26:69:d6:58:a2:a6:3f:33:b9:87:fd:2b:06:84:48:
         2f:55:f7:f5:97:37:21:2d:cc:6c:35:cb:23:97:d0:0e:6c:81:
         31:2d:95:37:c1:d1:6f:58:0d:94:2d:2a:07:96:72:0e:70:83:
         80:f3:10:32:50:c8:bc:ce:67:ab:31:8e:48:60:c2:89:4c:9a:
         5e:a4:07:7c:41:76:ef:e2:6e:50:62:03:1c:0e:97:4f:d0:68:
         37:ed:57:8d:9c:db:ea:90:60:46:f4:09:e1:ff:a9:61:13:b8:
         22:a0:ba:03:1f:12:cf:94:86:dd:0d:68:54:73:d1:dd:3b:f4:
         03:ae:61:28:82:2e:c0:92:c3:dc:45:d4:9e:01:6b:74:2a:4b:
         75:3e:32:94:07:7b:1e:46:ed:6b:3a:39:6f:c7:84:09:f5:c3:
         ed:20:53:d2:0f:0d:59:9d:7a:53:5e:6c:96:74:33:9c:ee:72:
         5c:04:be:69:0d:bc:2f:6c:53:8d:44:21:65:9a:50:0c:1e:ed:
         1b:a3:d5:07:ee:16:95:5b:73:f7:d5:6c:53:10:2d:9b:6b:ec:
         00:2a:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----