Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/28f2031675f74f652a51a217bbcea9edb5f741ee.roa
File:                     28f2031675f74f652a51a217bbcea9edb5f741ee.roa (raw, json)
Hash identifier:          vO1TeZVSfAwR5jm5hoLGEL2xq37D+43/xaMta9a19uI=
Subject key identifier:   45:81:D8:75:90:47:7C:1C:75:51:8B:70:50:4E:33:D2:21:DE:1D:CD
Certificate issuer:       /CN=893407337be5ac09529c27b6e17d4d0664581246
Certificate serial:       200D96
Authority key identifier: 1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/28f2031675f74f652a51a217bbcea9edb5f741ee.roa
Signing time:             Tue 27 Jun 2023 21:38:54 +0000
ROA not before:           Mon 26 Jun 2023 21:38:54 +0000
ROA not after:            Fri 27 Jun 2025 21:38:54 +0000
asID:                     26593
IP address blocks:        200.108.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2100630 (0x200d96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893407337be5ac09529c27b6e17d4d0664581246
        Validity
            Not Before: Jun 26 21:38:54 2023 GMT
            Not After : Jun 27 21:38:54 2025 GMT
        Subject: CN=28f2031675f74f652a51a217bbcea9edb5f741ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:82:c2:ab:06:ee:44:ce:02:05:20:38:05:
                    2a:0c:84:a8:9a:80:e3:fc:01:59:0a:60:25:df:3b:
                    b3:b9:e6:f9:35:82:e8:ce:2d:a8:a0:ea:d9:60:18:
                    65:1f:cf:e1:e1:64:93:88:9b:44:12:ab:0f:91:c1:
                    d8:ee:b9:3e:83:91:4e:5d:df:08:47:b9:aa:e8:9e:
                    ea:f7:f8:85:37:a2:a6:aa:63:96:cf:0d:55:2b:46:
                    da:55:da:6b:d2:f5:32:96:b9:c8:e2:57:c8:1a:8b:
                    11:6b:af:19:3c:11:92:b4:7e:35:b1:51:ba:00:99:
                    30:c6:2b:08:b9:2c:41:9f:f7:46:23:52:59:b0:36:
                    35:e2:ae:5b:33:65:ea:67:f3:c5:fe:3b:ba:fa:62:
                    e5:3e:35:af:1e:39:00:34:df:69:87:a6:c5:fe:2f:
                    f2:ba:38:60:4d:48:b1:ec:39:fd:10:43:74:b6:84:
                    ed:cc:57:3d:b9:1a:7d:bb:8e:18:f9:42:ae:ce:ba:
                    38:7d:d3:ca:12:83:5f:a7:f9:11:36:41:29:49:e9:
                    fb:59:2e:c7:c4:d6:a5:22:43:48:4e:0b:f9:f0:3e:
                    8b:13:24:9e:7c:1d:33:f4:9e:49:ca:ec:a9:d8:37:
                    29:7b:36:67:35:85:36:12:41:59:da:8e:29:cc:66:
                    92:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:81:D8:75:90:47:7C:1C:75:51:8B:70:50:4E:33:D2:21:DE:1D:CD
            X509v3 Authority Key Identifier:
                keyid:1C:45:29:6C:A5:4F:33:4C:89:11:CA:0E:8E:92:33:09:3B:C2:23:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/893407337be5ac09529c27b6e17d4d0664581246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/28f2031675f74f652a51a217bbcea9edb5f741ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/893407337be5ac09529c27b6e17d4d0664581246.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:77:06:c3:52:9d:6e:14:01:57:b4:88:f0:9e:f6:05:93:84:
         28:68:82:07:9f:ee:b0:54:5e:17:37:3e:52:91:d9:73:c8:13:
         e3:da:e9:60:69:ee:d3:26:f6:62:60:47:11:5d:cc:14:79:1f:
         2f:5c:df:20:5b:49:78:18:a7:24:7a:c8:b1:01:56:35:fe:5f:
         b2:e2:81:f5:ee:18:dd:51:d0:e3:8b:f6:e8:f8:b8:d4:80:f5:
         c5:ed:7a:d7:6d:11:01:69:68:22:c2:af:db:12:e6:2d:7f:c4:
         c8:c5:e7:a4:1b:33:82:46:25:3a:5b:ba:80:ee:ef:c8:26:6f:
         71:13:f9:11:7d:d4:66:12:0d:6f:73:eb:c6:ba:55:12:2f:65:
         5e:58:7a:d4:8f:18:cb:de:b1:af:56:39:c4:79:c9:52:6f:8e:
         bd:3c:3d:14:fe:d8:17:69:65:11:80:0a:29:7b:b9:ae:02:8a:
         95:2d:b0:fd:40:d0:73:9e:ea:31:bc:75:68:92:72:fd:0e:a3:
         4e:0e:e5:41:d9:ca:4d:49:c4:7b:be:51:ed:b5:b6:28:97:29:
         4d:08:b9:a6:33:ae:be:76:85:30:18:ea:42:32:68:33:41:4c:
         b3:6d:e7:14:1e:f7:85:c6:77:94:48:a1:0c:37:fa:41:d2:81:
         f9:d5:ae:bf
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIA2WMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5
MzQwNzMzN2JlNWFjMDk1MjljMjdiNmUxN2Q0ZDA2NjQ1ODEyNDYwHhcNMjMwNjI2
MjEzODU0WhcNMjUwNjI3MjEzODU0WjAzMTEwLwYDVQQDEygyOGYyMDMxNjc1Zjc0
ZjY1MmE1MWEyMTdiYmNlYTllZGI1Zjc0MWVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAolGCwqsG7kTOAgUgOAUqDISomoDj/AFZCmAl3zuzueb5NYLo
zi2ooOrZYBhlH8/h4WSTiJtEEqsPkcHY7rk+g5FOXd8IR7mq6J7q9/iFN6KmqmOW
zw1VK0baVdpr0vUylrnI4lfIGosRa68ZPBGStH41sVG6AJkwxisIuSxBn/dGI1JZ
sDY14q5bM2XqZ/PF/ju6+mLlPjWvHjkANN9ph6bF/i/yujhgTUix7Dn9EEN0toTt
zFc9uRp9u44Y+UKuzro4fdPKEoNfp/kRNkEpSen7WS7HxNalIkNITgv58D6LEySe
fB0z9J5Jyuyp2DcpezZnNYU2EkFZ2o4pzGaSMQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEWB2HWQR3wcdVGLcFBOM9Ih3h3NMB8GA1UdIwQYMBaAFBxFKWylTzNMiRHK
Do6SMwk7wiMMMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODkzNDA3
MzM3YmU1YWMwOTUyOWMyN2I2ZTE3ZDRkMDY2NDU4MTI0Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzkwZTc1YmUtMDliMS00ZjQ1LTg3OGUtOTRhMjRm
NGJiYjQ2LzI4ZjIwMzE2NzVmNzRmNjUyYTUxYTIxN2JiY2VhOWVkYjVmNzQxZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zOTBlNzViZS0wOWIxLTRmNDUtODc4ZS05NGEy
NGY0YmJiNDYvODkzNDA3MzM3YmU1YWMwOTUyOWMyN2I2ZTE3ZDRkMDY2NDU4MTI0
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhsTjANBgkqhkiG9w0BAQsFAAOCAQEAeXcGw1KdbhQBV7SI
8J72BZOEKGiCB5/usFReFzc+UpHZc8gT49rpYGnu0yb2YmBHEV3MFHkfL1zfIFtJ
eBinJHrIsQFWNf5fsuKB9e4Y3VHQ44v26Pi41ID1xe16120RAWloIsKv2xLmLX/E
yMXnpBszgkYlOlu6gO7vyCZvcRP5EX3UZhINb3PrxrpVEi9lXlh61I8Yy96xr1Y5
xHnJUm+OvTw9FP7YF2llEYAKKXu5rgKKlS2w/UDQc57qMbx1aJJy/Q6jTg7lQdnK
TUnEe75R7bW2KJcpTQi5pjOuvnaFMBjqQjJoM0FMs23nFB73hcZ3lEihDDf6QdKB
+dWuvw==
-----END CERTIFICATE-----