Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/08ae379c46680441e1f8acb407c7d09af5d95176.roa
File:                     08ae379c46680441e1f8acb407c7d09af5d95176.roa (raw, json)
Hash identifier:          rVH4UIybnRIzxZpR1AOrVgsjlzeBvc6U4MlK3SWAIfw=
Subject key identifier:   B3:64:40:8E:27:23:34:1B:A3:33:55:BC:A4:9C:63:54:19:50:CC:EC
Certificate issuer:       /CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Certificate serial:       0583
Authority key identifier: 88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/08ae379c46680441e1f8acb407c7d09af5d95176.roa
Signing time:             Thu 11 Nov 2021 20:09:13 +0000
ROA not before:           Thu 11 Nov 2021 03:00:00 +0000
ROA not after:            Sat 11 Nov 2023 03:00:00 +0000
asID:                     266833
IP address blocks:        131.255.40.0/22 maxlen: 24
                          2803:8780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
        Validity
            Not Before: Nov 11 03:00:00 2021 GMT
            Not After : Nov 11 03:00:00 2023 GMT
        Subject: CN=08ae379c46680441e1f8acb407c7d09af5d95176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:77:63:2d:6a:71:a7:c4:33:0c:eb:94:a4:03:
                    f7:8f:5c:dd:fa:d5:f6:70:63:0b:4c:d2:b8:a9:13:
                    8c:27:67:03:7d:be:02:fa:c2:9f:36:79:4b:3a:72:
                    2a:dc:44:d1:f7:91:62:91:3d:4b:ff:20:13:9a:7b:
                    29:f7:79:ee:80:83:61:d1:ea:47:98:44:78:51:ce:
                    3e:ca:3c:2e:6c:aa:6f:c9:af:4c:34:ce:92:cf:fa:
                    f8:2c:ef:be:82:09:0b:ef:a4:fc:bf:f5:19:cd:5a:
                    ae:f9:21:65:a6:6c:47:02:56:90:48:e9:5c:cf:29:
                    33:3a:7e:a0:3f:98:7e:d4:25:22:82:e6:80:9b:34:
                    bd:5c:eb:cf:4a:6f:1e:20:0c:e5:f3:18:c8:fc:59:
                    0b:1d:cc:e9:f3:33:fc:39:82:6a:71:a7:30:5b:bc:
                    c1:ba:7e:83:62:3c:80:a5:33:0a:bc:45:37:7c:91:
                    83:ab:d3:32:a7:6f:45:c3:a3:cf:e0:27:b3:28:64:
                    b4:66:ac:d0:c4:ed:4e:e8:51:75:eb:a6:08:21:ff:
                    ac:ab:c6:04:64:f3:b6:4a:fa:1e:7f:91:41:3c:0b:
                    d3:8c:29:84:da:28:3c:4e:14:56:0f:8a:26:ba:b5:
                    e1:0b:c9:06:a0:04:e9:d3:59:a3:45:a4:bc:d5:b9:
                    0e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:64:40:8E:27:23:34:1B:A3:33:55:BC:A4:9C:63:54:19:50:CC:EC
            X509v3 Authority Key Identifier:
                keyid:88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/08ae379c46680441e1f8acb407c7d09af5d95176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.40.0/22
                IPv6:
                  2803:8780::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:2c:27:a0:c1:fa:29:46:5e:0a:45:f9:38:b8:4f:44:b9:fa:
         67:f2:41:f2:fd:7f:5f:2d:f4:ad:42:17:e6:a0:a9:50:85:2c:
         88:a8:bf:c0:10:75:3c:ae:c7:dc:57:f0:33:d1:87:30:9e:9f:
         59:25:8a:58:78:39:9f:1d:1a:19:6d:3c:21:5a:50:5e:3d:8a:
         11:3b:c9:b0:8e:61:f1:f3:83:64:0a:b6:49:f4:51:6b:b6:39:
         e2:c9:76:09:ae:57:fd:2b:82:97:4f:3a:88:92:9b:41:57:2b:
         95:55:a7:ae:3a:1f:06:0b:1e:fe:ab:2f:1a:f6:c3:9b:7a:61:
         9a:7a:b3:4b:99:f7:ec:29:ba:e6:42:fc:d9:29:fa:1d:8d:9f:
         f7:04:cb:d8:a0:14:bc:f6:94:28:8a:db:21:6d:21:b4:65:c2:
         10:af:ea:89:1a:bd:9f:b4:8e:3d:56:9b:df:32:ec:b6:5d:f0:
         b9:ba:e5:96:02:64:7f:5e:19:dc:6f:d3:4d:6e:31:a8:71:a1:
         5b:e0:d1:98:5c:f5:7f:fd:77:7b:72:30:1f:7c:62:a0:c9:06:
         55:09:dc:12:ce:8c:c2:b5:c0:3f:f1:f3:c6:5a:8b:c7:44:ca:
         a3:79:64:b1:14:79:46:23:2d:54:5f:80:85:1f:b3:61:90:48:
         dd:27:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----