Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/855ddefed0ccfc137a9c1454339b65d793477bdb.roa
File:                     855ddefed0ccfc137a9c1454339b65d793477bdb.roa (raw, json)
Hash identifier:          eUF4e6jTFffyxiM4ynugVQOqsI7yCYB45rdt4usbIbo=
Subject key identifier:   89:6A:8F:73:4A:BA:18:87:FD:DA:EE:76:D4:6B:78:42:F3:BA:4C:32
Certificate issuer:       /CN=1bcfea8d0412e4c6eee276cfa4586b58320bdf8c
Certificate serial:       05A914
Authority key identifier: 25:62:D7:CD:09:64:F6:31:4C:A9:D6:01:5A:E4:A2:ED:F3:08:C8:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/855ddefed0ccfc137a9c1454339b65d793477bdb.roa
Signing time:             Wed 24 Mar 2021 14:47:37 +0000
ROA not before:           Wed 24 Mar 2021 14:47:37 +0000
ROA not after:            Tue 24 Mar 2026 14:47:37 +0000
asID:                     270073
IP address blocks:        138.118.200.0/22 maxlen: 24
                          2803:23e0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370964 (0x5a914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcfea8d0412e4c6eee276cfa4586b58320bdf8c
        Validity
            Not Before: Mar 24 14:47:37 2021 GMT
            Not After : Mar 24 14:47:37 2026 GMT
        Subject: CN=855ddefed0ccfc137a9c1454339b65d793477bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:89:78:7b:a4:e0:59:c0:10:15:57:ea:34:67:
                    1e:81:94:04:68:15:0a:6b:4e:d8:2d:0e:b0:fc:2a:
                    56:80:8a:c8:50:18:aa:09:21:7b:54:6d:62:e6:16:
                    42:d1:1c:15:04:32:43:ae:5c:36:90:3c:7d:03:21:
                    ab:d9:79:58:cd:22:30:f1:64:d8:cd:bb:e0:a4:b5:
                    8d:df:1e:46:fd:0c:ba:53:57:a4:b9:4a:a9:19:bc:
                    53:41:95:35:18:fa:ed:24:a4:79:b1:ec:ca:2c:2c:
                    a6:5c:dd:2a:a5:30:df:2d:0c:42:61:e8:09:38:28:
                    d2:8f:86:a8:6d:51:13:d0:ea:88:63:98:bd:65:00:
                    27:8b:e4:ce:bb:c3:9b:59:77:3a:0b:7d:cd:61:7c:
                    32:ca:bb:11:d5:e1:f0:64:9c:92:fa:87:bc:57:68:
                    84:c4:56:c6:fe:26:28:1b:2c:8c:90:c7:ee:00:ae:
                    27:8e:0c:e4:93:eb:fe:2c:a7:99:b2:ba:84:ed:a7:
                    75:ca:10:02:ec:3d:05:5d:3c:a2:61:25:01:75:eb:
                    d7:88:ac:24:6e:c5:8a:90:42:7d:28:7f:92:e8:5f:
                    c6:d1:07:2c:5f:c2:2d:02:2c:b7:ac:68:11:6a:5e:
                    cc:ba:4b:30:ce:3a:31:bf:7e:35:eb:14:d6:03:d3:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6A:8F:73:4A:BA:18:87:FD:DA:EE:76:D4:6B:78:42:F3:BA:4C:32
            X509v3 Authority Key Identifier:
                keyid:25:62:D7:CD:09:64:F6:31:4C:A9:D6:01:5A:E4:A2:ED:F3:08:C8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/855ddefed0ccfc137a9c1454339b65d793477bdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.200.0/22
                IPv6:
                  2803:23e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:32:06:99:f0:23:16:70:3f:42:41:71:66:22:7f:b0:fa:
         3d:66:11:ac:28:ba:ef:20:8c:7f:88:11:47:a0:a7:3d:8f:b7:
         92:a2:9e:e2:cd:db:76:24:f9:e2:f9:69:45:40:63:0d:20:2b:
         86:39:3d:6c:e3:fb:29:cb:29:bc:ad:51:b6:95:e2:38:62:78:
         0b:7f:4f:a4:e8:19:bd:0b:dc:4e:21:1d:49:b0:c1:e1:45:af:
         c7:12:1e:9d:2f:24:f9:34:0d:b5:7e:14:3a:0c:9f:7b:23:33:
         fc:bb:c4:09:e0:f6:99:93:7d:9b:16:83:10:81:39:50:93:41:
         b0:c1:72:d2:b7:4e:27:40:07:16:fe:ab:f5:a9:1d:04:de:18:
         9b:16:4e:7b:71:ba:32:fe:5d:0e:7c:3f:46:f9:86:93:31:1f:
         5a:4a:45:f0:dd:3a:2f:52:33:53:b0:1a:58:db:f6:76:04:75:
         81:76:3c:9d:c7:37:e7:e3:cc:dd:b3:e2:82:f4:e0:8e:e7:24:
         79:22:35:e6:01:37:96:fd:bc:b9:85:fe:cd:69:b7:49:5a:9d:
         a1:92:91:fb:80:f2:b4:de:4f:34:40:5f:98:12:54:c5:b3:4a:
         28:fa:90:b1:9d:4d:3b:61:ee:63:ba:dc:64:f2:b3:52:ca:16:
         3f:1c:6c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----