Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/089e197f-8382-4e8e-8029-12083966c90e/935aaec3285bba4b1a0df6b265fcf5aff9020f61.roa
File:                     935aaec3285bba4b1a0df6b265fcf5aff9020f61.roa (raw, json)
Hash identifier:          uI6QUQ/+gtG4pDMcSgQEjF7bB7MdMGfs9KlZfbqtqZU=
Subject key identifier:   EA:0D:90:3C:5A:36:7C:99:11:26:38:03:51:7C:33:72:ED:CF:69:EE
Certificate issuer:       /CN=85b3896c526901b5ef8601c8920a18798a6a04a9
Certificate serial:       0D5591
Authority key identifier: 2C:C3:5B:33:C3:16:C4:7D:4C:4D:DA:59:0C:9F:FE:84:D7:90:F0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85b3896c526901b5ef8601c8920a18798a6a04a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/089e197f-8382-4e8e-8029-12083966c90e/935aaec3285bba4b1a0df6b265fcf5aff9020f61.roa
Signing time:             Wed 24 Mar 2021 14:43:04 +0000
ROA not before:           Wed 24 Mar 2021 14:43:03 +0000
ROA not after:            Tue 24 Mar 2026 14:43:03 +0000
asID:                     28539
IP address blocks:        138.186.200.0/22 maxlen: 24
                          170.247.172.0/22 maxlen: 24
                          201.150.0.0/21 maxlen: 24
                          201.150.8.0/22 maxlen: 24
                          201.159.96.0/21 maxlen: 24
                          201.159.104.0/22 maxlen: 24
                          201.159.108.0/22 maxlen: 24
                          201.159.124.0/22 maxlen: 24
                          2806:211::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873873 (0xd5591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b3896c526901b5ef8601c8920a18798a6a04a9
        Validity
            Not Before: Mar 24 14:43:03 2021 GMT
            Not After : Mar 24 14:43:03 2026 GMT
        Subject: CN=935aaec3285bba4b1a0df6b265fcf5aff9020f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:0f:10:a2:ec:14:b3:f8:96:e9:e8:52:6e:
                    1a:1e:a3:c5:f0:3f:86:c2:2a:95:ff:f5:f9:2c:12:
                    44:23:93:e8:bf:1e:fb:2f:b2:24:69:7b:fb:62:08:
                    42:ca:7a:85:6e:f8:26:05:6b:ee:5c:4c:e5:c3:6a:
                    5c:65:c3:4b:c2:83:d2:ba:65:5f:69:1a:45:74:53:
                    f7:b0:7d:17:3a:5e:db:d2:95:05:76:d6:60:d9:fb:
                    6d:89:4c:f7:cc:3c:8b:37:f1:06:cc:d4:32:f0:59:
                    f5:db:8c:e8:44:60:7d:37:ca:77:14:cd:4a:20:6a:
                    a9:82:d5:12:26:a8:fa:8b:6f:5e:b8:21:a0:e4:f0:
                    66:67:7b:05:d4:1a:bd:1c:19:a1:ca:26:a1:d4:d1:
                    ef:e1:10:bc:91:4e:ca:62:8e:94:b6:af:4f:87:10:
                    ef:a7:d4:77:a4:5d:ee:be:dc:7b:77:d8:ea:2a:cf:
                    45:7b:4c:0d:a8:cf:08:1f:c6:2f:97:0b:f4:14:7c:
                    a7:c7:29:5c:de:28:44:dd:c4:7e:39:38:d6:ee:1b:
                    25:d8:c0:f3:3b:4a:5e:5b:a6:21:73:8b:75:1e:eb:
                    32:a2:c5:3f:d2:39:0e:43:61:a5:b3:96:a5:cf:e5:
                    81:9e:a0:ff:8b:f3:29:4e:3a:38:e7:08:3e:ce:4c:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0D:90:3C:5A:36:7C:99:11:26:38:03:51:7C:33:72:ED:CF:69:EE
            X509v3 Authority Key Identifier:
                keyid:2C:C3:5B:33:C3:16:C4:7D:4C:4D:DA:59:0C:9F:FE:84:D7:90:F0:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85b3896c526901b5ef8601c8920a18798a6a04a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089e197f-8382-4e8e-8029-12083966c90e/935aaec3285bba4b1a0df6b265fcf5aff9020f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/089e197f-8382-4e8e-8029-12083966c90e/85b3896c526901b5ef8601c8920a18798a6a04a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.200.0/22
                  170.247.172.0/22
                  201.150.0.0-201.150.11.255
                  201.159.96.0/20
                  201.159.124.0/22
                IPv6:
                  2806:211::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:2d:6d:a2:93:55:64:83:14:5b:29:84:22:c0:4a:47:4d:70:
         d7:d2:d3:2a:5b:91:48:34:b7:6d:ed:81:e6:ec:79:3d:b3:a4:
         9b:15:21:b3:11:1a:61:98:e3:d0:d1:0b:d9:05:b6:79:dd:ef:
         39:ff:6f:e6:c1:d6:f8:dc:ea:69:9b:05:c9:a3:d7:76:1d:a2:
         04:42:df:e3:98:83:dc:ea:1e:86:d2:85:0c:f6:a0:5b:d5:60:
         c4:cd:d0:6b:36:2f:20:66:b1:c5:97:6d:06:70:c8:55:ff:5f:
         f2:1e:af:79:32:1f:f9:62:fd:b6:fa:65:e2:77:f1:28:a5:5a:
         77:a1:69:b1:29:9a:49:5b:58:b5:d4:43:38:51:6b:d3:fa:e6:
         e4:96:7e:ae:2d:c5:51:f1:13:48:a1:d5:ee:db:d2:c6:97:1f:
         d4:57:45:51:1e:51:f1:20:89:b5:c9:27:f8:cd:54:7c:3f:fc:
         93:bb:13:5c:75:f6:fa:d4:67:a2:a9:df:da:d8:c9:53:11:48:
         1d:57:b2:ce:53:b1:3b:6b:4b:a2:c7:82:3c:80:34:0c:e2:19:
         32:9c:5c:6f:a1:04:66:3a:a5:03:53:25:50:67:dd:01:a7:a9:
         3a:be:10:8b:69:24:cf:b6:c1:27:f9:a0:8c:57:10:d7:2d:75:
         59:bc:b1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----