Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00a6f2ec-4215-4822-befc-60ac93e3cea2/467a1e225e83c2f0093a48bbf92341a51b15df80.roa
File:                     467a1e225e83c2f0093a48bbf92341a51b15df80.roa (raw, json)
Hash identifier:          ObZNoEFGcQBpPLhhCJ0/0UyhtwFqbbRWEV5falc1ToU=
Subject key identifier:   C6:29:4B:C5:69:24:7E:42:19:3E:60:BB:32:B8:26:AE:0A:EE:07:4A
Certificate issuer:       /CN=efe3fc5e334da4c68fb9ea96e7ca0e05134d60e3
Certificate serial:       0DB0AA
Authority key identifier: 4F:7F:C3:72:D0:64:6B:BD:B2:9F:5D:85:D8:6C:00:3C:81:A9:23:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efe3fc5e334da4c68fb9ea96e7ca0e05134d60e3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00a6f2ec-4215-4822-befc-60ac93e3cea2/467a1e225e83c2f0093a48bbf92341a51b15df80.roa
Signing time:             Wed 24 Mar 2021 14:30:19 +0000
ROA not before:           Wed 24 Mar 2021 14:30:18 +0000
ROA not after:            Tue 24 Mar 2026 14:30:18 +0000
asID:                     11815
IP address blocks:        179.60.0.0/19 maxlen: 19
                          190.11.32.0/20 maxlen: 20
                          190.11.48.0/20 maxlen: 20
                          190.106.120.0/21 maxlen: 21
                          200.3.168.0/21 maxlen: 21
                          2001:13e8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897194 (0xdb0aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe3fc5e334da4c68fb9ea96e7ca0e05134d60e3
        Validity
            Not Before: Mar 24 14:30:18 2021 GMT
            Not After : Mar 24 14:30:18 2026 GMT
        Subject: CN=467a1e225e83c2f0093a48bbf92341a51b15df80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:ab:96:b0:30:80:21:7d:85:b0:32:80:a5:
                    80:ad:c3:50:e3:bc:83:bd:20:d6:51:af:a3:1a:cf:
                    f1:4c:e5:b8:78:30:d8:09:f0:7c:92:77:9c:20:df:
                    f1:9b:58:5a:63:7f:5a:cd:e8:6e:cd:ad:cc:6a:cc:
                    79:ee:08:3e:fa:d3:37:f8:8d:6f:53:f9:59:68:d5:
                    d2:ed:71:6b:e5:46:4e:07:a7:81:08:67:af:09:86:
                    c9:13:75:66:c8:ae:91:27:e4:0d:c6:90:eb:17:d7:
                    88:63:6e:1a:2a:f9:eb:42:e3:79:a1:63:9e:cb:f6:
                    db:cd:55:2e:f5:f3:32:1f:89:72:49:ce:27:04:53:
                    23:2f:d8:c1:cf:2d:40:da:95:89:19:68:48:8b:59:
                    8f:72:87:6f:49:26:a2:08:16:7f:bb:28:9f:fb:63:
                    81:4f:a7:ba:19:ca:04:de:49:1c:91:35:43:e2:f2:
                    98:33:40:2e:37:35:32:fd:6e:69:38:b4:3d:18:aa:
                    18:33:53:47:bb:6c:b7:30:81:16:0e:d4:38:d3:a3:
                    27:fd:38:78:3d:61:74:e1:12:a9:30:de:f3:d0:dc:
                    65:e9:8b:ee:a3:51:5f:55:01:32:f8:c1:9a:2a:b8:
                    f1:1a:50:de:a2:b2:32:e7:7c:c5:c1:3a:d3:74:dc:
                    26:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:29:4B:C5:69:24:7E:42:19:3E:60:BB:32:B8:26:AE:0A:EE:07:4A
            X509v3 Authority Key Identifier:
                keyid:4F:7F:C3:72:D0:64:6B:BD:B2:9F:5D:85:D8:6C:00:3C:81:A9:23:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efe3fc5e334da4c68fb9ea96e7ca0e05134d60e3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00a6f2ec-4215-4822-befc-60ac93e3cea2/467a1e225e83c2f0093a48bbf92341a51b15df80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00a6f2ec-4215-4822-befc-60ac93e3cea2/efe3fc5e334da4c68fb9ea96e7ca0e05134d60e3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.0.0/19
                  190.11.32.0/19
                  190.106.120.0/21
                  200.3.168.0/21
                IPv6:
                  2001:13e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:16:01:82:fc:fa:7d:bf:7d:af:81:fd:c2:a6:84:99:46:8b:
         1c:a4:f0:52:a3:d0:9c:ca:58:cd:69:c7:8a:7a:bb:37:e3:ee:
         57:da:63:28:c5:fe:3d:f5:55:10:6b:29:18:fb:b5:6f:85:44:
         78:8b:ee:8b:32:4d:50:91:a6:ad:f4:80:34:54:42:f4:23:4f:
         64:30:ec:93:48:28:c6:a9:b5:3c:7a:08:38:eb:ad:c4:fc:a1:
         71:e0:89:8c:07:e0:1a:b2:2b:84:6e:b4:3c:5d:68:73:99:ae:
         10:73:ee:d7:92:e8:6f:e4:fc:f5:c8:51:18:0b:1e:8b:f2:8b:
         8d:96:40:1e:bb:c2:59:1f:ba:1a:a4:de:6f:9c:67:ea:41:72:
         f5:62:c3:6d:ea:fe:61:b9:d8:0b:48:ba:47:c3:6d:7a:9c:38:
         1e:56:d1:2a:cc:86:92:9f:d8:f5:b1:f4:25:89:b1:76:2c:d6:
         f9:9e:f6:af:3e:1a:15:44:77:fb:54:33:d2:b1:a3:c0:57:4b:
         77:0d:de:b3:1b:22:8f:9b:17:e9:12:64:a2:bf:39:37:eb:24:
         e2:95:4e:2e:00:cd:e0:24:c6:f0:cd:0d:0b:b3:5b:3b:d0:5d:
         78:89:c2:10:a7:b6:92:f3:72:0b:7d:0f:78:1c:a8:97:a6:fe:
         57:d9:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----