Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/ceedd6acb7635e11b4dcc6d3feafa68b3a78c87e.roa
File:                     ceedd6acb7635e11b4dcc6d3feafa68b3a78c87e.roa (raw, json)
Hash identifier:          6Au0YVCtiRHcBuhXIuvlr/g0O0r4btubTaBMCP8joTg=
Subject key identifier:   B7:AE:42:48:01:FD:5F:3E:5C:16:D0:9B:2C:C7:05:10:E7:78:B8:DA
Certificate issuer:       /CN=70d0dea43310326c8a8f5fa6afb4d9c816721165
Certificate serial:       110692
Authority key identifier: 09:19:A3:85:C9:62:54:B5:78:61:79:3B:EE:56:0B:9B:3A:C2:3B:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70d0dea43310326c8a8f5fa6afb4d9c816721165.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/ceedd6acb7635e11b4dcc6d3feafa68b3a78c87e.roa
Signing time:             Thu 05 Aug 2021 11:54:32 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     270021
IP address blocks:        190.108.216.0/22 maxlen: 24
                          2803:7600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115794 (0x110692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70d0dea43310326c8a8f5fa6afb4d9c816721165
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=ceedd6acb7635e11b4dcc6d3feafa68b3a78c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:7b:36:f3:c0:67:b9:0b:5d:72:c0:04:34:
                    2e:a2:a0:76:57:66:ab:05:d9:5e:c3:20:93:81:0e:
                    6d:14:38:dc:30:1d:ef:ec:22:65:4b:1b:8f:9b:4e:
                    07:0e:0f:7c:a0:b7:65:29:ff:79:3d:9a:93:90:30:
                    3c:0a:9b:cd:22:c6:2b:fc:02:d2:37:0a:b1:59:15:
                    c7:6e:d5:2e:ca:09:db:8b:da:2f:73:c8:ba:61:96:
                    08:bd:2c:ac:9c:ca:36:21:fe:2f:ed:f6:52:3d:8e:
                    66:9e:66:99:ef:09:83:65:32:3f:b4:93:2e:6d:2a:
                    97:23:21:71:ef:05:d6:15:01:d7:fb:9b:e0:2c:70:
                    6a:2a:40:fb:77:f9:d8:4a:a0:0c:83:56:9e:88:33:
                    a8:0b:20:01:8d:a2:70:46:1b:2d:14:54:2c:ae:2d:
                    98:cc:e9:8f:8b:d3:3a:c3:6d:5e:7b:94:7c:ad:89:
                    fb:fd:9a:b8:58:9f:8e:2e:e6:ff:d0:41:e0:cb:ac:
                    32:5c:d7:eb:a5:31:ff:0c:33:98:70:fb:05:fb:4f:
                    1e:d1:6f:f3:40:ef:3b:4b:5e:6b:2e:c6:ae:5f:4e:
                    8a:aa:f8:2a:ec:7a:1f:89:97:e7:8c:6e:91:9e:db:
                    81:29:a7:36:63:40:66:3b:51:71:a4:de:6c:6b:81:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AE:42:48:01:FD:5F:3E:5C:16:D0:9B:2C:C7:05:10:E7:78:B8:DA
            X509v3 Authority Key Identifier:
                keyid:09:19:A3:85:C9:62:54:B5:78:61:79:3B:EE:56:0B:9B:3A:C2:3B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70d0dea43310326c8a8f5fa6afb4d9c816721165.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/ceedd6acb7635e11b4dcc6d3feafa68b3a78c87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/70d0dea43310326c8a8f5fa6afb4d9c816721165.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.216.0/22
                IPv6:
                  2803:7600::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:65:a9:92:0a:83:f7:c5:5c:3a:e8:93:e3:34:80:dd:d7:c4:
         a1:a8:77:88:f5:92:96:8d:76:a9:6c:7b:b9:7e:f9:82:f6:f2:
         41:75:01:c8:34:68:40:19:32:a7:01:fd:67:b4:b4:b9:64:db:
         61:1d:1d:40:51:e5:5f:30:a3:99:9d:a1:1c:92:1a:38:64:3b:
         41:22:8b:0e:e1:2a:7a:ff:21:d3:b7:24:49:6d:a8:75:60:8f:
         96:a6:c6:c1:d9:70:81:e4:9d:00:cc:9b:f7:e1:71:e6:2e:7b:
         43:84:91:79:01:b8:a8:53:d5:34:2f:fb:0c:ea:1b:0b:fd:91:
         16:a4:21:c3:2d:2e:35:59:a7:8f:af:ff:6c:22:60:b8:3e:5d:
         ce:8c:64:7c:f4:f8:ed:80:c1:9b:0e:f6:4e:6f:97:25:42:f2:
         e9:ac:fb:05:78:92:da:12:48:34:f1:6d:60:12:79:69:16:50:
         40:4d:ba:1a:e0:69:cd:c3:d7:16:5d:8a:09:3f:fe:b5:c0:b4:
         42:82:7d:23:00:9b:ab:8e:7c:24:d4:81:da:e3:1d:a7:ad:b5:
         2f:63:b0:09:7f:73:7a:7f:7d:6f:77:36:fe:ce:2c:77:1a:4f:
         a4:8d:e4:f6:d3:a0:dd:d9:b9:64:5e:86:eb:66:77:57:2a:bf:
         31:32:92:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----