Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/8e3e24c1a833c217f94b5c34e6a85415383df123.roa
File:                     8e3e24c1a833c217f94b5c34e6a85415383df123.roa (raw, json)
Hash identifier:          LLtpidRjkveA9GA0UZbdoDrqa95DCC180JolTnt0ceQ=
Subject key identifier:   DB:F6:E4:A3:A2:E5:C4:D9:7F:23:CA:55:E5:84:E5:32:E0:2D:99:D0
Certificate issuer:       /CN=0736b876e6c976d927742fb22fc1d06c98292216
Certificate serial:       0D471B
Authority key identifier: E4:C8:26:B0:8C:18:BD:7F:97:7F:2B:35:5F:70:5D:26:C2:59:2A:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0736b876e6c976d927742fb22fc1d06c98292216.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/8e3e24c1a833c217f94b5c34e6a85415383df123.roa
Signing time:             Wed 24 Mar 2021 14:42:29 +0000
ROA not before:           Wed 24 Mar 2021 14:42:29 +0000
ROA not after:            Tue 24 Mar 2026 14:42:29 +0000
asID:                     262262
IP address blocks:        190.124.16.0/22 maxlen: 24
                          190.124.20.0/22 maxlen: 24
                          2803:b700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870171 (0xd471b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0736b876e6c976d927742fb22fc1d06c98292216
        Validity
            Not Before: Mar 24 14:42:29 2021 GMT
            Not After : Mar 24 14:42:29 2026 GMT
        Subject: CN=8e3e24c1a833c217f94b5c34e6a85415383df123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:23:f6:0f:2f:38:65:03:1d:42:00:a5:ba:b0:
                    10:46:a4:ff:17:38:d2:7a:42:e9:92:8a:b1:bd:49:
                    e2:85:b1:79:06:6f:24:71:b9:8b:7b:35:ae:77:d9:
                    ea:23:bc:ba:00:5b:ca:dd:2d:89:3f:4a:31:31:52:
                    06:01:75:06:e0:fc:21:92:a6:aa:9f:a2:d6:51:85:
                    06:6c:8c:1d:a5:43:14:a1:d2:82:a6:7f:cc:c4:90:
                    d6:cd:24:e6:de:5e:99:54:de:22:38:1b:3e:da:03:
                    9a:e9:f2:cb:88:a3:08:2a:5e:f1:3e:7b:0f:b3:e2:
                    51:2e:32:90:5d:de:d1:a2:a3:5e:e0:90:da:56:ab:
                    3b:e2:00:4d:2f:49:41:48:4c:cd:6d:6b:ed:3d:ce:
                    19:09:d4:19:3e:9b:67:3e:6e:e2:b5:d1:b4:a7:f7:
                    3a:67:6e:6a:c5:8f:1a:53:34:be:b4:a2:08:6a:3f:
                    22:29:a7:61:88:d3:c8:58:81:dd:ab:2f:44:cd:92:
                    08:a8:f7:25:62:2b:66:38:a3:27:e0:50:ec:8d:9f:
                    ae:b5:f7:09:57:cc:4d:3e:7e:23:3d:23:a4:b2:63:
                    30:dd:85:7c:fb:6c:ef:e8:24:59:f1:df:c2:6b:cf:
                    41:34:81:11:00:1f:f5:87:36:ec:76:9e:f8:3d:b7:
                    23:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F6:E4:A3:A2:E5:C4:D9:7F:23:CA:55:E5:84:E5:32:E0:2D:99:D0
            X509v3 Authority Key Identifier:
                keyid:E4:C8:26:B0:8C:18:BD:7F:97:7F:2B:35:5F:70:5D:26:C2:59:2A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0736b876e6c976d927742fb22fc1d06c98292216.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/8e3e24c1a833c217f94b5c34e6a85415383df123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/0736b876e6c976d927742fb22fc1d06c98292216.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.16.0/21
                IPv6:
                  2803:b700::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:13:41:3c:d0:46:f7:e2:2e:91:e9:8b:b3:d8:18:1d:5b:8c:
         ff:b6:1e:83:ac:05:12:89:62:30:c0:cc:44:75:b4:8b:66:9b:
         44:b0:7d:71:2a:d9:c2:ea:0f:ef:dd:35:97:f1:f9:da:43:81:
         26:17:74:fd:e6:5a:2e:44:3f:b3:cb:b3:a9:35:92:dc:ce:c5:
         bf:d1:7f:f3:2b:0c:62:e8:23:a5:71:b6:64:c8:c0:c7:1c:e2:
         58:ad:bd:98:00:d0:4a:84:b7:67:71:62:8f:12:83:bd:49:c3:
         d1:2e:ca:e2:12:1d:07:d2:ac:48:bb:16:3b:d6:d9:6d:2e:07:
         c5:cb:c8:af:33:39:65:66:16:ff:47:ec:02:20:fa:40:69:f2:
         e2:6b:b5:75:66:8a:0d:b8:96:f1:d5:97:af:c4:5e:64:0e:8e:
         fe:f2:a4:53:1c:c2:9a:33:e1:55:2a:6b:a3:73:d9:90:9a:1b:
         f8:81:b1:61:ec:60:db:9c:01:ca:21:74:cb:a6:30:c5:ff:d9:
         c1:4d:25:9b:a3:da:c0:ff:44:a9:c3:4b:4d:bf:67:30:5e:f2:
         aa:77:aa:2b:47:83:04:0d:b3:b3:38:eb:9f:fa:c1:3b:77:a6:
         54:4d:cd:c3:21:6c:31:71:ec:e7:ca:eb:4a:dd:17:61:0a:c7:
         64:2b:55:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----