Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/f401c6b766034b11007b6ea4769fc65932a330a1.roa
File:                     f401c6b766034b11007b6ea4769fc65932a330a1.roa (raw, json)
Hash identifier:          9/H95nOov+Vm89cp22l8xO7qQij8I2BPAJlyxQcykvE=
Subject key identifier:   84:70:C4:19:28:C3:EC:85:DE:E0:5A:FA:9A:39:C6:0F:06:1C:85:42
Certificate issuer:       /CN=0a780aded9dabf63283959a6696312a1fecffbf4
Certificate serial:       0D081F
Authority key identifier: 40:A7:5D:8C:A2:65:BE:0A:A5:BC:89:9D:98:42:5B:F9:69:03:61:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a780aded9dabf63283959a6696312a1fecffbf4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/f401c6b766034b11007b6ea4769fc65932a330a1.roa
Signing time:             Wed 24 Mar 2021 14:45:05 +0000
ROA not before:           Wed 24 Mar 2021 14:45:05 +0000
ROA not after:            Tue 24 Mar 2026 14:45:05 +0000
asID:                     17048
IP address blocks:        186.190.208.0/20 maxlen: 24
                          2800:5d0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854047 (0xd081f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a780aded9dabf63283959a6696312a1fecffbf4
        Validity
            Not Before: Mar 24 14:45:05 2021 GMT
            Not After : Mar 24 14:45:05 2026 GMT
        Subject: CN=f401c6b766034b11007b6ea4769fc65932a330a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8f:cd:3b:ab:bb:19:06:ac:fe:b5:c1:76:77:
                    60:a3:8d:49:71:1c:71:2b:f0:f2:e7:31:a1:67:fd:
                    e7:f6:7e:c4:6b:02:64:05:61:75:8e:f0:c1:5e:ed:
                    3b:c1:25:d4:d2:fa:5f:5c:e5:df:a7:41:a8:5a:ab:
                    3f:36:86:55:5d:e5:33:b6:cc:ce:db:cf:fc:08:b3:
                    da:42:a1:a5:98:53:7b:39:0b:3d:74:66:d7:15:16:
                    01:c9:e9:fa:9a:9a:4f:e1:85:82:20:8e:52:88:78:
                    bb:b4:f0:26:01:39:81:7a:96:4d:ea:c8:ed:49:28:
                    ac:ad:18:5c:e1:b7:f0:17:90:71:dd:80:00:a9:73:
                    eb:6f:2a:37:b4:6b:99:4f:62:e6:80:65:3d:5b:0e:
                    84:2b:be:e8:9f:1b:a6:75:8f:fb:5d:ca:8d:9c:89:
                    a9:c4:60:fa:c7:b9:1e:ec:cd:ba:89:5a:6c:83:36:
                    88:92:8c:09:16:fb:a9:f5:0c:ce:e7:cd:eb:43:70:
                    4a:29:e7:7a:f0:c1:aa:cc:4a:66:0e:3f:15:79:ad:
                    bb:7c:df:28:86:0a:f5:17:66:6c:9b:a9:75:07:27:
                    47:31:72:8c:90:bf:df:de:1b:85:39:a9:44:d9:81:
                    97:56:70:ca:ca:5a:20:46:87:cf:e1:c0:4a:15:c9:
                    b5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:70:C4:19:28:C3:EC:85:DE:E0:5A:FA:9A:39:C6:0F:06:1C:85:42
            X509v3 Authority Key Identifier:
                keyid:40:A7:5D:8C:A2:65:BE:0A:A5:BC:89:9D:98:42:5B:F9:69:03:61:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a780aded9dabf63283959a6696312a1fecffbf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/f401c6b766034b11007b6ea4769fc65932a330a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/0a780aded9dabf63283959a6696312a1fecffbf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.208.0/20
                IPv6:
                  2800:5d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:47:52:82:40:34:82:f3:83:49:c2:22:dd:19:4f:cb:8d:6b:
         94:ff:6b:a8:80:eb:28:4d:00:36:4f:95:de:92:05:5b:80:cb:
         cc:6c:6c:56:ee:eb:0e:98:13:98:e9:83:11:56:ab:91:61:af:
         65:d8:15:6f:2b:83:dd:6c:9f:39:1c:59:71:a3:cc:33:30:e8:
         48:40:df:7e:c6:c3:ed:7c:62:21:66:27:9a:af:e1:27:47:36:
         9b:d4:7e:07:08:89:8a:8f:b7:6e:cf:31:79:d7:82:cf:fd:27:
         bd:fa:9b:c1:4d:d1:d0:26:d8:8d:01:0c:4e:ba:57:b7:1d:42:
         79:32:9f:54:6f:ea:eb:82:db:9e:9e:0f:c4:de:1c:63:a9:ca:
         12:cf:e8:75:c3:fa:99:5b:89:42:5d:f0:b1:d4:a6:00:28:aa:
         aa:21:1b:7e:30:06:62:3a:c7:17:4f:7d:c4:92:a0:c2:f3:4a:
         36:9a:ba:9d:5e:60:f8:7e:60:d0:77:58:86:6e:35:9e:61:5e:
         fc:b9:53:1f:b3:fc:3a:4b:48:78:08:90:33:44:8e:20:45:13:
         c6:5c:3a:28:4d:55:e6:ba:8b:c4:fe:68:fc:61:36:42:62:88:
         9e:cb:d1:cc:52:52:b2:38:d5:94:6f:9c:2c:5a:13:7b:f7:dc:
         30:1b:e8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----