Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/356802aa-1e01-419a-9c18-11213bfdb38a/9f93f94752df17fb247dfd46ccd09691524bf333.roa
File:                     9f93f94752df17fb247dfd46ccd09691524bf333.roa (raw, json)
Hash identifier:          f9h08lZhyiAwnx5C+RclzuapbSQ/MXUj/m+4eY1sOds=
Subject key identifier:   6D:E9:3E:EB:D1:14:19:86:A9:08:F0:B9:0E:DE:A6:B3:C5:AD:7A:17
Certificate issuer:       /CN=aa3e8fff5576f1b88b5449e6857a024801374985
Certificate serial:       0C1975
Authority key identifier: 78:67:0B:A0:47:C6:A5:81:89:5F:CF:B0:FB:F7:FA:8B:E9:94:A2:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa3e8fff5576f1b88b5449e6857a024801374985.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/356802aa-1e01-419a-9c18-11213bfdb38a/9f93f94752df17fb247dfd46ccd09691524bf333.roa
Signing time:             Wed 24 Mar 2021 14:34:03 +0000
ROA not before:           Wed 24 Mar 2021 14:34:03 +0000
ROA not after:            Tue 24 Mar 2026 14:34:03 +0000
asID:                     264839
IP address blocks:        167.250.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792949 (0xc1975)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa3e8fff5576f1b88b5449e6857a024801374985
        Validity
            Not Before: Mar 24 14:34:03 2021 GMT
            Not After : Mar 24 14:34:03 2026 GMT
        Subject: CN=9f93f94752df17fb247dfd46ccd09691524bf333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:11:d5:e2:a8:0c:87:1c:86:3e:0e:c9:1f:e9:
                    00:eb:fc:63:e5:ea:99:2b:dd:c6:6b:54:8c:cb:6c:
                    ee:35:30:02:1a:61:87:5f:4a:46:d7:33:97:12:89:
                    f3:07:52:ea:a2:de:bf:7c:0d:5c:c4:bf:6a:df:58:
                    51:f1:6c:5c:8a:99:b9:d1:53:7a:3f:dc:60:b2:46:
                    fb:af:53:93:04:78:18:b6:b0:af:0f:d4:dc:b9:31:
                    71:15:a9:67:f6:08:f3:08:70:95:19:77:8e:54:1f:
                    2c:41:86:f1:73:de:a4:56:87:eb:3e:52:49:3b:20:
                    99:76:c1:0e:7c:3f:8e:8a:79:3c:05:34:c2:8b:97:
                    a9:9e:ea:e7:2c:9e:e5:ca:3c:71:69:42:d5:6b:6f:
                    4b:56:80:fd:8e:7d:ee:51:fb:87:76:49:4e:07:24:
                    26:d2:f9:f9:f2:b2:a9:29:f8:52:5a:6f:76:2b:f6:
                    be:3b:69:30:57:20:7c:f5:78:02:06:4f:6d:0d:eb:
                    d5:bd:1a:80:4e:17:de:65:32:3a:85:38:a6:b5:a0:
                    63:47:82:23:c4:d7:c7:da:e7:c6:74:52:c5:fb:23:
                    57:9e:81:ea:b5:fa:ec:0f:84:a2:ca:d8:05:72:f2:
                    b5:09:f4:c3:58:63:e5:a1:dc:37:09:05:69:24:50:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E9:3E:EB:D1:14:19:86:A9:08:F0:B9:0E:DE:A6:B3:C5:AD:7A:17
            X509v3 Authority Key Identifier:
                keyid:78:67:0B:A0:47:C6:A5:81:89:5F:CF:B0:FB:F7:FA:8B:E9:94:A2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa3e8fff5576f1b88b5449e6857a024801374985.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/356802aa-1e01-419a-9c18-11213bfdb38a/9f93f94752df17fb247dfd46ccd09691524bf333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/356802aa-1e01-419a-9c18-11213bfdb38a/aa3e8fff5576f1b88b5449e6857a024801374985.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:9a:83:ff:a7:c2:6e:40:d0:6d:98:8e:a7:2d:1f:72:38:
         d6:95:3d:35:1e:5b:37:36:8c:e4:74:58:d4:e8:dd:30:c5:2e:
         83:dd:63:6e:3c:95:7e:72:00:4c:8d:8b:9a:f0:7d:61:3c:58:
         87:f4:70:f8:59:70:5f:0e:95:6d:e5:58:7a:5c:20:4d:66:a9:
         29:66:79:5e:20:59:a5:08:f0:50:a7:5d:c6:37:12:b8:a1:31:
         f4:61:b3:c2:92:08:dd:a1:6d:14:8a:39:ea:18:c7:2c:3e:29:
         79:2d:d4:40:0f:7f:88:6b:fc:44:81:e6:32:0a:2d:3b:68:10:
         ec:bf:f4:b8:ac:51:1a:d7:5e:f4:6d:a4:ab:8c:6f:47:10:84:
         f7:fc:bb:e2:e0:32:d3:31:b2:ba:04:0a:9b:78:84:08:8a:9f:
         94:cd:af:3c:e0:ad:e3:b8:5e:51:93:22:fd:57:44:ac:0b:a0:
         23:db:b7:7b:85:8b:2e:43:69:75:51:da:4b:68:c2:e1:87:f9:
         5f:04:21:71:12:19:58:19:26:23:2c:08:16:77:d8:b8:8a:95:
         64:c5:95:94:98:5a:3b:55:f4:e1:ea:dd:ab:e6:8d:69:39:f9:
         92:6b:96:9e:d9:f2:58:ff:93:8e:ae:93:1b:c5:d4:85:bf:4e:
         1c:da:54:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----