Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f5df15e-54a5-4da6-a305-a66bace974a3/7cc5a49d51c508d552be10c3ab88ea905171fc27.roa
File:                     7cc5a49d51c508d552be10c3ab88ea905171fc27.roa (raw, json)
Hash identifier:          7MbTz3RbTLEXDTsUsEMGEPnAgmU4t8NS+HPSnjbY9ZU=
Subject key identifier:   BA:6A:E2:6B:5F:B2:53:61:F7:2F:63:90:6E:06:B0:67:3F:FE:8B:30
Certificate issuer:       /CN=9d41746208795e6a5b8815d25ea39b536f23d0fd
Certificate serial:       0CEA53
Authority key identifier: 11:8E:E6:FB:8E:1E:78:D4:87:DB:ED:AC:7C:55:D0:7F:FF:BB:EE:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d41746208795e6a5b8815d25ea39b536f23d0fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f5df15e-54a5-4da6-a305-a66bace974a3/7cc5a49d51c508d552be10c3ab88ea905171fc27.roa
Signing time:             Wed 24 Mar 2021 14:47:28 +0000
ROA not before:           Wed 24 Mar 2021 14:47:28 +0000
ROA not after:            Tue 24 Mar 2026 14:47:28 +0000
asID:                     269788
IP address blocks:        138.59.8.0/22 maxlen: 24
                          2803:1f80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846419 (0xcea53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d41746208795e6a5b8815d25ea39b536f23d0fd
        Validity
            Not Before: Mar 24 14:47:28 2021 GMT
            Not After : Mar 24 14:47:28 2026 GMT
        Subject: CN=7cc5a49d51c508d552be10c3ab88ea905171fc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:d2:0a:45:24:95:d2:c9:98:49:6a:f7:53:
                    6b:7e:e4:a4:96:ca:e4:6e:b8:c9:09:98:23:67:e8:
                    4d:97:2f:73:71:6b:45:3b:de:5b:23:62:b5:5d:7b:
                    02:16:3a:eb:67:88:cb:39:a1:e3:08:76:25:ee:28:
                    11:48:92:f2:68:b1:da:9d:25:25:2b:e3:58:e0:1e:
                    91:11:1a:bf:9c:0b:88:4d:ac:85:7b:cd:06:83:15:
                    f8:ca:e7:47:81:75:de:e9:91:18:a4:fa:8f:c6:7c:
                    e3:c3:55:2c:b4:b7:f2:62:07:8c:99:30:d5:82:d0:
                    13:07:0e:d6:4d:a4:fe:9e:e0:2e:8a:aa:2d:e1:60:
                    b9:99:59:74:ed:3c:14:6d:97:e5:47:ca:0d:52:b6:
                    15:b0:e3:90:c8:6b:cd:86:4b:03:94:2c:db:33:6a:
                    24:53:77:3e:ec:4b:88:e6:40:e3:89:54:5f:0b:91:
                    56:11:99:44:89:4d:2b:b5:b6:dd:44:82:88:66:e2:
                    34:6d:80:aa:21:ec:fc:59:4c:68:76:ff:f2:ed:69:
                    eb:f9:2a:e2:85:16:fe:b8:e0:e2:48:08:bc:6a:c9:
                    1f:e5:fc:a2:85:00:17:74:12:33:47:e8:6e:90:bc:
                    95:ab:a2:8b:ad:09:b8:82:ad:3e:4c:9f:38:84:93:
                    bb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6A:E2:6B:5F:B2:53:61:F7:2F:63:90:6E:06:B0:67:3F:FE:8B:30
            X509v3 Authority Key Identifier:
                keyid:11:8E:E6:FB:8E:1E:78:D4:87:DB:ED:AC:7C:55:D0:7F:FF:BB:EE:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d41746208795e6a5b8815d25ea39b536f23d0fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f5df15e-54a5-4da6-a305-a66bace974a3/7cc5a49d51c508d552be10c3ab88ea905171fc27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f5df15e-54a5-4da6-a305-a66bace974a3/9d41746208795e6a5b8815d25ea39b536f23d0fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.8.0/22
                IPv6:
                  2803:1f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:4e:7e:16:a6:f8:25:35:cc:67:b0:b0:d7:c4:16:7d:4d:62:
         f8:54:e6:d1:fd:02:bb:30:a4:e5:a5:7f:bd:c5:02:b7:ed:1a:
         62:a2:e1:58:f3:f6:dc:5c:f8:7c:1e:33:9f:d4:0d:d5:53:a1:
         9f:7c:94:f2:b6:5b:73:33:76:fe:94:5a:24:2b:c7:00:79:7f:
         9c:ef:e1:29:02:06:14:62:94:6d:ed:a3:72:88:63:70:ec:70:
         40:bf:d0:6a:8e:20:07:4a:26:34:e0:7c:6e:b9:7f:e7:be:1c:
         ce:88:0b:44:1b:e9:3f:2e:ad:36:70:ca:c9:37:71:5a:3b:ed:
         b4:d1:67:66:a2:15:3e:a6:f4:3d:65:00:39:83:6a:28:df:de:
         2b:10:84:b7:2b:2c:9f:d7:02:ec:3c:58:94:25:29:9e:66:43:
         d5:e4:34:8e:b2:0a:f4:eb:48:7a:77:83:ba:5e:0d:b0:17:56:
         a7:f6:46:c5:c0:8b:e7:62:00:b1:16:0c:fb:59:80:6a:e1:d7:
         83:d0:97:dd:c6:88:32:6e:90:58:5a:c6:a4:7b:40:23:e6:e9:
         14:cc:be:2e:d8:a8:6d:5b:c6:09:67:2e:f5:b7:f1:12:a7:bc:
         14:de:e0:d1:c1:2c:80:3b:34:9d:f4:fa:c1:2e:c0:2b:52:b8:
         09:a6:8f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----