Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fa12e120-5ae1-42a0-8247-1d8b3ee06000/c1d89fba17e04390b9016e11564b0242a93f8701.roa
File:                     c1d89fba17e04390b9016e11564b0242a93f8701.roa (raw, json)
Hash identifier:          R0eUu/MyklaKQMExOvZTgzs1Q66t0wmp/TGod2GsP4s=
Subject key identifier:   C7:1F:DF:59:09:49:40:10:11:77:59:5A:8F:0E:90:54:CA:17:1B:F7
Certificate issuer:       /CN=da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd
Certificate serial:       218293
Authority key identifier: B9:3C:51:9E:BE:50:D8:3A:53:21:AE:58:11:A0:34:6B:3A:AB:09:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fa12e120-5ae1-42a0-8247-1d8b3ee06000/c1d89fba17e04390b9016e11564b0242a93f8701.roa
Signing time:             Fri 02 Jun 2023 15:19:39 +0000
ROA not before:           Thu 01 Jun 2023 15:19:39 +0000
ROA not after:            Mon 02 Jun 2025 15:19:39 +0000
asID:                     264623
IP address blocks:        200.9.181.0/24 maxlen: 24
                          2801:1e:1000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196115 (0x218293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd
        Validity
            Not Before: Jun  1 15:19:39 2023 GMT
            Not After : Jun  2 15:19:39 2025 GMT
        Subject: CN=c1d89fba17e04390b9016e11564b0242a93f8701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cc:26:95:f9:3a:f6:00:f1:9e:a4:21:18:ba:
                    14:7d:cb:ba:27:33:4d:b2:92:bf:78:b8:21:7f:97:
                    db:be:e6:58:28:3a:7d:6a:a8:31:65:48:ed:88:76:
                    a0:ab:da:d6:e7:fa:7f:d2:66:a1:10:44:c5:f4:7a:
                    41:10:ec:5b:af:10:34:14:7c:6b:1b:78:78:90:9c:
                    8d:95:38:5b:ef:65:2a:09:93:fe:6d:37:8b:1d:5b:
                    fe:bd:be:7a:45:dc:5a:4a:6a:24:8e:f5:0b:fc:80:
                    1e:36:bd:ec:0b:14:86:f7:a3:0f:30:32:4c:96:63:
                    e3:22:7b:c4:88:06:b5:bd:7a:7b:f0:df:d1:89:b2:
                    7e:24:e1:a9:45:69:9f:d9:c8:f3:be:f0:d5:25:14:
                    16:3a:26:13:7f:d2:30:1a:9f:3e:68:d5:93:c6:e2:
                    5e:d5:de:31:4d:e1:7e:2b:9b:90:78:2e:cc:ee:62:
                    a2:34:3c:48:42:70:05:f5:a3:97:aa:73:c3:61:ea:
                    72:c3:53:73:45:c4:bd:22:d7:af:2a:cf:ae:85:82:
                    ae:a8:90:19:f8:8f:58:bc:69:82:43:de:68:8f:ce:
                    97:3d:76:92:95:e6:7c:01:e7:73:fa:ff:96:84:33:
                    88:f2:89:0f:aa:09:1d:7d:b1:12:47:9c:77:bd:82:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1F:DF:59:09:49:40:10:11:77:59:5A:8F:0E:90:54:CA:17:1B:F7
            X509v3 Authority Key Identifier:
                keyid:B9:3C:51:9E:BE:50:D8:3A:53:21:AE:58:11:A0:34:6B:3A:AB:09:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fa12e120-5ae1-42a0-8247-1d8b3ee06000/c1d89fba17e04390b9016e11564b0242a93f8701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fa12e120-5ae1-42a0-8247-1d8b3ee06000/da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.181.0/24
                IPv6:
                  2801:1e:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:e9:3e:5e:92:f4:51:28:ec:cc:7c:3b:87:92:a8:1e:a7:4e:
         e6:b7:cf:55:7f:d4:f4:11:2b:8c:61:1d:21:4a:60:e4:5d:5e:
         43:72:c4:7c:19:c8:a7:32:54:59:78:30:00:f5:d0:cf:e8:cc:
         08:74:f3:77:d0:b4:10:e7:ab:ec:3c:05:ad:46:ff:1b:18:03:
         d0:f6:22:4d:6c:27:44:eb:bc:9a:f2:03:57:53:f0:18:f7:9d:
         96:db:34:e3:9b:d3:ab:49:3b:7f:73:9b:e2:ed:a3:0e:66:5a:
         df:b7:a0:3d:15:e6:c5:0b:cd:fa:f5:ef:d7:d5:76:b6:d6:c7:
         4e:33:e9:7c:15:51:88:86:c4:f0:55:7f:bd:3c:7d:e6:de:46:
         6c:fa:49:71:6b:d6:a5:9c:dc:61:17:ff:bb:9b:16:65:db:80:
         24:c8:f3:d9:4d:49:ca:ca:1a:b2:29:81:f9:a6:b1:ac:b7:c5:
         1b:2b:9a:26:bc:7f:8b:ae:84:cd:a5:30:ef:4b:3d:c3:bb:15:
         f3:73:e3:aa:87:bb:99:09:98:29:52:4f:1f:a6:a5:86:f2:7f:
         e4:8f:a1:e5:1a:c5:fa:6c:64:65:ca:14:95:ee:19:c6:1d:0c:
         5c:58:ea:ee:01:9e:66:2b:2b:24:57:0d:33:50:1d:33:a1:b1:
         ed:ee:cb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----