Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/4ad77565c528c0f66639217510584b73a35ba3c1.roa
File:                     4ad77565c528c0f66639217510584b73a35ba3c1.roa (raw, json)
Hash identifier:          aAz6qGNJ3G3WpHWTh0ZTnY04aDbOULOoHRiK0ABiXoY=
Subject key identifier:   9E:DB:94:BD:6A:62:1B:2C:77:0E:0C:7B:7B:97:CB:4D:1C:04:1C:89
Certificate issuer:       /CN=b1692ab68c975b69e2411b06e4249ca2f134a1c9
Certificate serial:       21609D
Authority key identifier: E9:6C:D3:BA:24:A1:77:EE:10:8D:36:73:D0:4C:C3:50:4D:CF:D2:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1692ab68c975b69e2411b06e4249ca2f134a1c9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/4ad77565c528c0f66639217510584b73a35ba3c1.roa
Signing time:             Wed 01 Nov 2023 14:52:25 +0000
ROA not before:           Wed 01 Nov 2023 14:52:25 +0000
ROA not after:            Sat 01 Nov 2025 14:52:25 +0000
asID:                     269921
IP address blocks:        200.124.68.0/22 maxlen: 24
                          2803:a2e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187421 (0x21609d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1692ab68c975b69e2411b06e4249ca2f134a1c9
        Validity
            Not Before: Nov  1 14:52:25 2023 GMT
            Not After : Nov  1 14:52:25 2025 GMT
        Subject: CN=4ad77565c528c0f66639217510584b73a35ba3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:91:ba:34:50:0c:a1:4c:50:36:5f:ff:00:6a:
                    29:2f:59:ac:0d:2a:19:49:0f:0c:18:9b:7b:cb:83:
                    9f:33:f2:47:b4:b4:70:20:0c:61:24:60:22:19:49:
                    38:e5:3d:71:6a:f9:7a:67:e9:6b:58:2d:48:0b:15:
                    44:0e:b7:ce:6e:62:32:ce:80:21:24:0f:47:03:89:
                    46:40:86:bc:cd:4f:c3:95:fd:4c:ad:7f:a1:ac:8c:
                    a5:bb:27:95:f1:86:e3:7a:1b:09:6f:0b:ee:75:cb:
                    e4:f2:7a:2f:cb:66:50:79:fb:8a:72:5c:e4:4e:2b:
                    87:6a:f8:4b:f9:f7:cd:e7:e5:11:38:7c:57:39:c4:
                    b7:97:22:58:41:ff:97:5c:7d:aa:ab:35:7f:f1:5e:
                    42:f3:99:36:d7:80:ae:1d:fb:49:92:dc:71:f3:3a:
                    00:03:97:0c:37:cb:87:7f:31:39:ac:f6:c7:9c:5f:
                    19:37:9c:86:8f:43:c0:07:40:de:96:79:4c:0b:6b:
                    21:c3:98:a9:10:f7:ed:30:9d:ec:19:69:67:d6:96:
                    4d:e6:d7:b0:23:97:5c:fe:0f:bb:a3:d0:3c:d5:0c:
                    3a:a1:13:31:0e:b8:18:01:a4:af:3d:0f:05:9d:0f:
                    ae:55:f1:97:3c:e0:26:92:48:52:bf:17:e6:8b:6a:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DB:94:BD:6A:62:1B:2C:77:0E:0C:7B:7B:97:CB:4D:1C:04:1C:89
            X509v3 Authority Key Identifier:
                keyid:E9:6C:D3:BA:24:A1:77:EE:10:8D:36:73:D0:4C:C3:50:4D:CF:D2:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1692ab68c975b69e2411b06e4249ca2f134a1c9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/4ad77565c528c0f66639217510584b73a35ba3c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/b1692ab68c975b69e2411b06e4249ca2f134a1c9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.68.0/22
                IPv6:
                  2803:a2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:53:36:69:7d:f2:fa:04:eb:5c:8e:97:1c:b5:60:90:06:
         8a:b2:f6:6b:62:24:fa:f2:a1:b9:c3:23:e8:2f:5a:0e:13:83:
         70:5a:fc:49:8e:69:ec:f1:da:68:7f:fd:ad:36:b3:ad:13:89:
         3b:72:82:64:ac:2d:88:b4:b3:4e:78:b4:22:56:37:50:ca:9b:
         70:9b:e0:d7:26:58:a3:ad:a6:5d:80:82:42:b8:85:f1:29:ca:
         f1:9f:e5:f5:e6:6c:ee:c8:97:6f:e5:29:1d:3c:5c:28:97:07:
         25:de:93:07:e8:c0:2b:d5:1b:27:d9:99:29:b9:5b:d5:de:b0:
         52:f4:b8:98:8f:0a:f8:f4:4c:21:d9:05:3a:48:39:4e:53:50:
         79:95:f5:e1:ce:d0:3f:f3:f6:40:c5:b3:e3:cd:d1:bb:ad:ec:
         77:1e:af:97:1a:8d:3a:02:6a:c0:d8:a3:b4:61:56:f9:1b:bc:
         db:45:b9:09:7b:af:a3:bf:2e:e3:12:65:a9:ff:26:62:5b:2e:
         d0:ed:54:d5:f4:16:f4:77:bb:64:4c:fb:f2:1c:26:b2:6b:9a:
         54:91:4c:b7:f7:4f:ac:97:46:72:5a:0c:34:c3:b0:15:45:5e:
         8b:9a:38:17:e2:c4:cf:d3:e4:5a:5c:c3:2c:b5:79:5a:67:04:
         48:8c:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----