Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1afcbf41-256a-46a8-9ce4-0e09d52b535d/21f0c692668d8c84086baa45a5b6a1523311cbcb.roa
File:                     21f0c692668d8c84086baa45a5b6a1523311cbcb.roa (raw, json)
Hash identifier:          Ze2pHiuHABJm14A5HbL+yS3zlWotwh8OlNc2BRFi+Cw=
Subject key identifier:   E1:E9:8C:95:34:4E:AD:1D:02:DD:2E:4F:27:0E:C3:AE:E0:0F:8D:71
Certificate issuer:       /CN=289859cc11d10ba9411ed4b13485469204a4b868
Certificate serial:       CCE8
Authority key identifier: E4:18:86:83:2A:FD:31:58:09:65:48:D6:88:76:49:93:35:5A:BF:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/289859cc11d10ba9411ed4b13485469204a4b868.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1afcbf41-256a-46a8-9ce4-0e09d52b535d/21f0c692668d8c84086baa45a5b6a1523311cbcb.roa
Signing time:             Tue 13 Apr 2021 22:05:31 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27900
IP address blocks:        200.73.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52456 (0xcce8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=289859cc11d10ba9411ed4b13485469204a4b868
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=21f0c692668d8c84086baa45a5b6a1523311cbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:30:8f:02:68:20:9d:05:4c:f1:da:c7:b4:33:
                    50:e2:0c:e5:6d:88:da:6d:53:75:8b:e9:95:fd:e2:
                    e2:32:25:8e:d7:15:3e:37:45:83:ea:97:d2:86:66:
                    4f:4f:87:66:64:bc:36:bb:a1:a4:24:73:9d:af:4e:
                    e2:57:5f:35:59:c4:03:8b:30:46:ab:6d:fb:69:34:
                    ea:41:b8:5f:9e:56:b1:4a:9e:1c:04:7d:ac:1a:24:
                    3e:ba:2d:66:25:16:48:d0:0a:f4:6a:20:7c:cb:19:
                    72:f8:b6:bd:9b:07:19:0f:39:43:5b:a5:94:c1:7c:
                    83:5d:1a:b1:74:f6:d5:a2:6f:ac:9e:cd:82:12:a7:
                    49:85:a7:a3:44:f6:9f:fe:fb:d8:07:af:36:f4:8a:
                    09:3a:e2:7c:ea:c0:bf:d6:71:8c:bd:d3:70:0e:e1:
                    13:9c:f5:44:ce:63:f2:78:b1:02:c9:42:9c:2a:17:
                    71:39:1e:fe:50:6c:b3:03:2a:68:65:63:b0:ed:13:
                    30:1d:09:2a:27:16:82:c3:d0:56:97:31:c3:b1:29:
                    e8:ae:e9:71:d3:ca:d4:5e:6a:9f:d5:e5:a5:01:65:
                    67:8e:2d:64:2e:48:47:61:6b:e4:d9:ea:05:da:71:
                    65:93:a7:1f:0f:25:7f:40:d7:e5:26:39:42:1c:25:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E9:8C:95:34:4E:AD:1D:02:DD:2E:4F:27:0E:C3:AE:E0:0F:8D:71
            X509v3 Authority Key Identifier:
                keyid:E4:18:86:83:2A:FD:31:58:09:65:48:D6:88:76:49:93:35:5A:BF:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/289859cc11d10ba9411ed4b13485469204a4b868.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1afcbf41-256a-46a8-9ce4-0e09d52b535d/21f0c692668d8c84086baa45a5b6a1523311cbcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1afcbf41-256a-46a8-9ce4-0e09d52b535d/289859cc11d10ba9411ed4b13485469204a4b868.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:5e:b1:58:fd:04:40:5e:6d:4c:ca:b2:df:88:27:a1:e9:53:
         d5:13:05:57:18:93:18:34:48:7e:26:df:aa:f8:8c:f8:56:39:
         0e:8c:5c:f9:eb:a2:e9:ab:69:ec:b0:4a:dd:3e:21:1b:bb:1f:
         a3:db:c9:a0:29:19:ec:32:b0:bb:88:d4:58:87:db:f5:a1:21:
         12:0c:a4:0a:fc:12:8c:ba:63:03:d5:8e:9a:0d:44:a8:7d:38:
         0b:22:2b:8a:20:28:a7:d1:90:88:c4:6a:50:7e:27:33:15:58:
         43:33:9e:d7:d5:8c:3b:18:76:d2:86:1c:77:01:de:d2:44:fe:
         18:a8:62:56:17:33:72:3b:af:ba:3b:d9:b9:e5:27:4c:19:d5:
         a9:2a:60:62:e2:89:1b:d8:12:83:e0:44:21:d1:3c:7f:4d:1c:
         d6:bf:75:50:59:76:53:be:e5:72:a1:a6:0e:bd:b3:30:1b:c0:
         6d:6f:f6:b4:44:2b:de:6d:d8:22:46:32:9a:9c:a6:90:d1:1e:
         3e:72:82:a7:1c:b0:06:3c:21:16:95:a2:3c:cb:c6:4c:88:8e:
         76:97:47:67:8b:79:ae:e8:f4:15:ee:6e:9d:ab:dc:d5:4d:e1:
         44:7c:ae:96:2f:55:23:48:00:48:d7:91:4d:c3:9c:b7:1c:cd:
         61:c2:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----