Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5e9dad916c3735fcac3da8dd8a9b0c80b0de1b64.roa
File:                     5e9dad916c3735fcac3da8dd8a9b0c80b0de1b64.roa (raw, json)
Hash identifier:          vP0aYbDGsYavJCsNnPYd4zpSfikGPIFmTGfxyXHhu9M=
Subject key identifier:   E4:EC:DB:74:DD:9F:E8:EA:B9:0D:F1:4C:F4:D6:D0:F0:EA:BE:40:8D
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       161B30
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5e9dad916c3735fcac3da8dd8a9b0c80b0de1b64.roa
Signing time:             Mon 14 Feb 2022 12:59:03 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     60068
IP address blocks:        179.61.193.0/24 maxlen: 24
                          181.214.235.0/24 maxlen: 24
                          191.96.212.0/24 maxlen: 24
                          181.214.139.0/24 maxlen: 24
                          191.101.197.0/24 maxlen: 24
                          191.101.196.0/24 maxlen: 24
                          191.101.128.0/24 maxlen: 24
                          181.215.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448752 (0x161b30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=5e9dad916c3735fcac3da8dd8a9b0c80b0de1b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:fc:f9:5c:16:8e:54:7c:d5:85:8d:34:17:
                    6d:fc:f9:84:61:f7:cd:de:99:2b:9b:79:ce:4d:8d:
                    47:c9:bf:f6:91:63:0a:ce:a8:08:08:51:c5:cc:55:
                    ae:93:3f:96:4c:7b:26:fc:bc:d0:9c:90:24:87:ac:
                    49:6b:79:6c:b9:a5:28:b5:a7:a5:73:f5:78:e3:e9:
                    fc:a4:4c:6a:45:49:a9:1e:92:03:8c:30:3f:7b:8e:
                    45:0d:56:f1:3f:7f:01:40:e6:a4:e7:17:db:a2:ae:
                    f3:ce:e4:c6:1b:cf:69:7d:45:3e:e2:aa:d7:25:ca:
                    ce:dd:d3:8d:b2:17:b1:5b:3d:11:c1:0c:92:95:f0:
                    c2:9e:3a:48:09:94:c9:09:0f:94:75:ee:1d:78:4f:
                    da:c7:57:9b:88:b3:0d:e1:92:15:d7:8d:41:4a:78:
                    1d:f7:34:49:88:1f:c1:4e:90:3e:23:1c:9e:fa:47:
                    04:fb:30:63:58:82:02:cc:57:d3:31:56:34:80:49:
                    a5:e7:05:8b:d9:7c:51:5e:fa:68:a5:4c:a4:22:07:
                    80:1c:2b:e5:b7:de:b7:f1:03:36:4a:d4:2e:e8:18:
                    9f:1f:9e:d4:7e:ed:75:0b:77:65:6c:6c:e2:c1:b4:
                    09:0d:8e:09:b2:b9:e0:5e:ba:b1:e5:02:59:27:02:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EC:DB:74:DD:9F:E8:EA:B9:0D:F1:4C:F4:D6:D0:F0:EA:BE:40:8D
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5e9dad916c3735fcac3da8dd8a9b0c80b0de1b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.193.0/24
                  181.214.139.0/24
                  181.214.235.0/24
                  181.215.167.0/24
                  191.96.212.0/24
                  191.101.128.0/24
                  191.101.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:f5:72:fb:5f:76:be:f5:59:e7:11:48:4c:88:e0:4f:d0:35:
         42:ef:01:3a:37:60:ad:8d:5f:df:3e:48:57:77:1c:40:4e:b3:
         89:0d:fe:7f:a8:4e:34:be:25:d5:f1:09:2b:75:ca:3e:6b:2a:
         f7:d8:f1:f6:00:85:c2:11:0e:14:3f:92:c7:4d:31:d7:5a:29:
         57:c1:c9:4a:45:aa:36:78:9c:f3:29:73:fa:99:f1:81:c8:73:
         7b:c3:d5:6a:24:92:82:f1:88:71:9d:bd:72:29:06:9a:62:7b:
         55:48:43:bf:f3:78:f0:ae:23:0c:3e:29:98:66:52:1d:35:2e:
         8d:4d:60:cb:6d:38:01:71:b4:70:9e:7e:a9:c2:e9:81:f1:bc:
         7f:4e:d9:5e:ae:bd:c6:8f:24:10:60:70:ad:5e:e4:2e:46:09:
         b0:d1:19:de:52:58:cd:aa:ed:b3:a9:c8:1c:b2:07:d2:4c:96:
         dd:56:39:af:6e:fa:0b:a4:a9:a0:e6:4b:e2:71:12:6f:8c:24:
         aa:7a:ea:67:e2:41:96:05:17:cd:4e:ab:ed:b9:47:cf:f3:57:
         4a:89:ef:c8:cd:d5:cf:4a:83:01:04:f5:d0:a9:36:1d:21:0d:
         93:5e:ce:da:86:c1:75:e8:cc:ef:2c:90:b7:cb:c1:c6:fa:60:
         5a:17:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----