Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/bda402c0d87dc84960e4377ce33a7ec5dee02f59.roa
File:                     bda402c0d87dc84960e4377ce33a7ec5dee02f59.roa (raw, json)
Hash identifier:          JhpMtK+OfHcGI82JgeZXegHUz9iBJlzvjHIaB2fjkG0=
Subject key identifier:   E4:0D:8F:CB:0A:67:2E:C3:E8:EC:6D:25:F8:77:4E:BA:A3:3E:8E:94
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       031D1B
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/bda402c0d87dc84960e4377ce33a7ec5dee02f59.roa
Signing time:             Wed 20 Apr 2022 18:47:56 +0000
ROA not before:           Wed 20 Apr 2022 03:00:00 +0000
ROA not after:            Sat 20 Apr 2024 03:00:00 +0000
asID:                     272086
IP address blocks:        189.85.40.0/22 maxlen: 25
                          2803:21e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204059 (0x31d1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: Apr 20 03:00:00 2022 GMT
            Not After : Apr 20 03:00:00 2024 GMT
        Subject: CN=bda402c0d87dc84960e4377ce33a7ec5dee02f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:1d:5b:84:88:89:5b:52:c0:64:cf:21:6e:
                    66:44:c9:7f:04:13:81:72:a2:20:b6:7a:70:8a:93:
                    f7:8a:b2:f6:9c:6c:cc:a8:8f:22:ce:04:70:e8:f8:
                    22:bf:6e:ca:db:17:9c:84:75:2c:08:f3:28:ee:1e:
                    25:4a:d5:0e:0b:43:89:fc:8a:86:95:4a:f7:fc:36:
                    6e:88:48:5a:31:88:2f:84:c2:22:5f:d2:93:be:9c:
                    ee:2e:78:91:5c:e5:20:aa:08:f3:9d:5b:ff:c9:f6:
                    18:66:85:9e:2a:99:ae:5d:02:2f:46:41:74:3c:aa:
                    3e:4d:34:68:91:0f:22:c0:ec:83:2c:60:d7:90:b6:
                    12:56:96:b3:92:45:3c:26:a5:03:c1:d5:dd:5a:68:
                    49:c5:76:eb:ba:59:34:2f:a8:cc:19:23:fc:21:54:
                    48:23:4a:52:fe:ec:fd:3d:7a:2e:09:5d:8f:a6:db:
                    7b:75:bb:5d:2b:2b:f0:2f:00:0c:de:cd:89:42:49:
                    14:9f:ca:6f:84:64:76:09:f4:1e:ea:f4:13:44:78:
                    bf:6d:76:92:f6:03:2e:06:14:f9:2f:36:b8:6a:7e:
                    bf:10:28:34:d8:49:44:8d:b8:c3:30:f8:f5:45:7a:
                    e7:44:51:b3:d5:15:cc:01:91:74:53:3c:bf:3a:41:
                    3d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0D:8F:CB:0A:67:2E:C3:E8:EC:6D:25:F8:77:4E:BA:A3:3E:8E:94
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/bda402c0d87dc84960e4377ce33a7ec5dee02f59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.40.0/22
                IPv6:
                  2803:21e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:ff:b6:f5:71:bb:7c:c2:10:06:dd:0f:2c:14:3c:be:9e:a4:
         bb:39:71:64:91:31:9d:d8:e8:a2:a1:ec:1f:29:20:b7:01:e8:
         31:ad:aa:ad:6d:93:c9:f9:f9:5a:c8:04:42:98:06:46:48:4d:
         cb:eb:87:9f:e6:ea:41:6e:95:21:f4:38:29:43:de:1f:8c:06:
         27:0b:22:80:78:b2:35:84:68:50:11:83:ce:ee:64:12:27:e4:
         b3:24:57:85:23:9a:13:98:94:63:d2:a7:94:9e:7c:42:4f:b1:
         64:74:15:f4:15:49:16:56:7d:be:f6:e3:64:5c:f4:38:a5:73:
         63:2f:d4:b7:60:3d:4d:09:cb:e8:f2:68:79:60:33:90:c6:ac:
         88:d9:6c:60:a4:f7:24:4c:3c:9e:21:78:1a:6c:16:eb:f9:5f:
         57:2d:a7:b6:3b:8c:88:12:94:ec:69:5c:4d:46:a0:b6:bb:70:
         e0:91:8b:f4:4c:e5:c5:ca:38:52:da:e6:1a:b8:12:d7:5e:76:
         8e:97:69:71:62:10:c5:b2:f0:04:39:f6:31:d2:19:ae:b9:21:
         cc:6e:fe:0f:b1:e9:89:ed:eb:2a:97:91:76:52:70:9c:db:6e:
         fc:9d:45:a8:c0:6a:d8:fe:9d:1d:8c:f8:33:7a:aa:be:8b:68:
         8a:11:d3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----