Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/a30975bf7ca43029923e3a3404a7a0f8ab62b60d.roa
File:                     a30975bf7ca43029923e3a3404a7a0f8ab62b60d.roa (raw, json)
Hash identifier:          QoLPDj4cAJIZtWmFzo+b8nAYfKZNsNtrJKkZH8NveZw=
Subject key identifier:   02:FE:B7:4F:9B:DA:D8:02:9D:B4:B3:4E:DF:EF:3E:9E:BB:8C:D6:C3
Certificate issuer:       /CN=d2a001ef37af8d12473454d1fe356899fdb03d21
Certificate serial:       0D013B
Authority key identifier: C6:63:B7:A2:62:10:3F:DA:A9:8C:41:B4:5F:2B:01:AC:24:12:3A:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2a001ef37af8d12473454d1fe356899fdb03d21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/a30975bf7ca43029923e3a3404a7a0f8ab62b60d.roa
Signing time:             Fri 22 Mar 2024 14:32:39 +0000
ROA not before:           Fri 22 Mar 2024 14:32:39 +0000
ROA not after:            Sun 22 Mar 2026 14:32:39 +0000
asID:                     19422
IP address blocks:        200.58.128.0/19 maxlen: 24
                          2800:840::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852283 (0xd013b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a001ef37af8d12473454d1fe356899fdb03d21
        Validity
            Not Before: Mar 22 14:32:39 2024 GMT
            Not After : Mar 22 14:32:39 2026 GMT
        Subject: CN=a30975bf7ca43029923e3a3404a7a0f8ab62b60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a6:60:48:c6:98:70:b2:e9:04:18:6f:70:7f:
                    52:2a:26:2c:02:a6:f8:93:85:2f:0a:be:69:f8:38:
                    dd:e6:62:aa:d9:b0:3c:4c:c8:93:23:51:39:02:a8:
                    c1:c2:9a:79:62:2a:06:eb:ad:48:9e:ba:87:ce:96:
                    64:08:90:1e:94:8c:46:0f:98:4d:17:ad:72:c4:8f:
                    29:6c:74:0b:d5:d0:9e:0b:c2:e2:2a:71:88:19:51:
                    cb:b3:51:0d:1b:f5:67:cc:c8:0d:06:fe:28:f0:be:
                    f4:88:a1:f7:e0:cb:af:a6:1f:a7:a0:f3:26:69:f3:
                    f5:4c:d2:9a:59:5f:4f:0a:58:e0:a3:5a:b5:90:24:
                    76:54:b2:09:0b:dd:fb:ff:03:d8:94:28:20:eb:e3:
                    18:6b:af:e9:85:20:52:ae:fa:1d:c4:97:9c:36:c7:
                    17:d7:7d:37:f8:17:25:d9:a7:ca:ce:3d:a7:8b:81:
                    00:b1:65:85:15:26:b8:c9:4a:68:f9:9b:da:71:7c:
                    7c:2b:99:13:52:40:e1:bf:d9:8c:5c:15:0f:2d:5c:
                    5b:53:4e:33:da:08:90:6e:9e:c1:99:e7:dd:da:39:
                    2b:7c:6b:b6:97:4c:a8:84:04:e4:de:e3:25:a8:9a:
                    aa:be:70:12:d6:36:a7:ab:26:f6:04:e4:91:37:8f:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FE:B7:4F:9B:DA:D8:02:9D:B4:B3:4E:DF:EF:3E:9E:BB:8C:D6:C3
            X509v3 Authority Key Identifier:
                keyid:C6:63:B7:A2:62:10:3F:DA:A9:8C:41:B4:5F:2B:01:AC:24:12:3A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2a001ef37af8d12473454d1fe356899fdb03d21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/a30975bf7ca43029923e3a3404a7a0f8ab62b60d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/d2a001ef37af8d12473454d1fe356899fdb03d21.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.128.0/19
                IPv6:
                  2800:840::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:19:71:c3:93:e1:2c:59:52:84:d3:fb:b5:14:76:2f:c4:
         a7:98:35:a8:65:ec:04:fc:72:4a:42:24:cc:c7:71:dd:e9:30:
         f4:3e:53:01:04:6f:5d:f9:7a:b1:ba:2a:a1:7b:e1:44:fe:3d:
         38:5c:f7:3f:53:f8:da:d2:e9:1c:bd:51:b1:61:98:bd:dd:ba:
         a5:b9:37:ce:66:cc:c8:c0:90:ce:42:e9:36:f5:ac:b2:f2:ca:
         9f:51:0c:7e:20:90:f9:16:06:73:54:87:71:4a:03:70:1a:70:
         71:ed:3b:c3:06:28:8e:93:4b:b8:82:18:12:49:c2:aa:67:b8:
         4e:54:2c:e2:9b:99:4d:32:ce:b8:a6:a7:fa:45:f1:7d:c3:5d:
         2f:e5:cc:a8:be:46:d3:27:77:a3:a9:45:db:63:c5:30:1d:d1:
         13:00:6c:f8:de:d3:e4:a8:86:bb:5b:a2:22:61:b3:a2:e4:6f:
         cb:1e:36:be:06:bf:b2:7a:bb:dd:3c:ab:62:f6:fe:e0:87:51:
         51:90:dc:0c:70:26:3e:c6:6c:b6:bf:10:a1:53:ea:d6:6d:78:
         3d:37:e4:83:a8:67:51:10:04:95:a5:3a:2f:12:8b:c7:bd:9e:
         a8:0e:e1:0f:d8:d1:be:9f:fd:94:a9:f3:12:74:6d:4a:5c:5f:
         37:ee:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----