Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/0fb9a97247a89c4b2a2dd0082d5f4a0740e82057.roa
File:                     0fb9a97247a89c4b2a2dd0082d5f4a0740e82057.roa (raw, json)
Hash identifier:          xqlMehoC+Y96tzzcZrc6diILw+4uvZY7i+hpdjl3X8o=
Subject key identifier:   84:3E:62:9D:A6:CC:76:65:4D:06:1B:46:CB:A8:61:77:35:6E:2D:38
Certificate issuer:       /CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
Certificate serial:       0C9E39
Authority key identifier: 0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/0fb9a97247a89c4b2a2dd0082d5f4a0740e82057.roa
Signing time:             Wed 24 Mar 2021 14:38:11 +0000
ROA not before:           Wed 24 Mar 2021 14:38:11 +0000
ROA not after:            Tue 24 Mar 2026 14:38:11 +0000
asID:                     52471
IP address blocks:        138.99.236.0/22 maxlen: 24
                          168.228.232.0/22 maxlen: 24
                          179.51.64.0/20 maxlen: 24
                          186.148.88.0/21 maxlen: 24
                          191.97.104.0/22 maxlen: 24
                          2803:ab00::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826937 (0xc9e39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
        Validity
            Not Before: Mar 24 14:38:11 2021 GMT
            Not After : Mar 24 14:38:11 2026 GMT
        Subject: CN=0fb9a97247a89c4b2a2dd0082d5f4a0740e82057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5e:c6:8e:f6:46:7f:ad:4d:3e:e9:6d:8f:82:
                    58:c9:a3:a3:53:39:77:47:1c:a9:bc:c1:d5:73:1d:
                    79:a5:e5:24:a7:d5:5a:85:d8:d9:5d:61:76:23:5e:
                    94:22:62:65:37:d9:c3:94:2f:e5:04:78:57:2d:da:
                    e2:10:44:cb:7a:c5:07:ad:26:6c:f6:90:5a:78:a1:
                    64:34:9b:4e:13:9b:4a:4f:68:73:c9:53:04:9b:07:
                    ea:e0:e5:d9:23:4f:45:bc:0b:9c:5a:47:c9:5e:d3:
                    e7:c6:ab:1a:f4:cd:53:43:d8:f0:43:17:aa:d2:73:
                    78:59:dc:93:d2:b2:c1:28:03:ec:31:83:e1:10:fb:
                    de:76:9f:cb:66:ec:b9:f4:a7:e4:81:4c:9f:3d:ce:
                    04:88:38:39:73:7d:cc:05:4a:29:11:b6:33:90:6c:
                    63:26:60:40:bb:d7:a0:63:42:87:d7:84:fc:fe:57:
                    34:ce:5e:21:74:61:5a:ef:33:30:c2:5c:98:43:aa:
                    9c:f7:bf:80:80:0f:6d:15:5f:dc:de:9e:3b:ed:17:
                    d0:ed:1a:58:cd:06:fa:40:05:85:9f:7a:dc:06:9f:
                    56:e9:6c:1e:11:77:94:3a:f4:eb:34:37:79:82:73:
                    c9:2b:7b:c6:d3:3a:91:57:06:39:86:c1:88:fe:53:
                    d9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3E:62:9D:A6:CC:76:65:4D:06:1B:46:CB:A8:61:77:35:6E:2D:38
            X509v3 Authority Key Identifier:
                keyid:0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/0fb9a97247a89c4b2a2dd0082d5f4a0740e82057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.236.0/22
                  168.228.232.0/22
                  179.51.64.0/20
                  186.148.88.0/21
                  191.97.104.0/22
                IPv6:
                  2803:ab00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:25:3d:f2:97:e0:ab:aa:4a:cd:8d:9c:a3:c5:89:96:8b:cc:
         4f:a6:5f:35:94:dd:81:d4:dc:eb:0e:7a:7c:c8:25:1d:2d:be:
         77:8f:a6:8e:b8:bc:b5:74:29:5f:c6:4d:55:08:6c:de:0d:25:
         38:bf:a6:ea:19:a3:02:c0:8d:d7:ed:73:a5:33:a2:74:ee:33:
         17:a9:25:33:94:3c:f4:c4:12:50:e4:eb:7f:e9:ef:81:ad:70:
         b9:a1:01:88:32:44:69:79:66:b2:b6:bf:9c:26:71:71:a9:a3:
         d6:25:68:86:f4:61:54:d3:0b:4b:a6:69:ee:43:6e:a8:f5:36:
         17:39:2d:b5:29:15:e2:c4:02:28:96:00:4c:01:24:1f:d7:f6:
         db:4d:f9:0c:dd:07:20:51:ca:d1:22:c8:b4:66:a7:c0:9d:bf:
         0c:03:d7:39:9a:7f:b9:19:7b:9c:ea:7d:40:08:b1:a9:19:1f:
         06:e6:b6:1e:f4:1d:72:31:10:5e:6d:ca:82:dd:68:53:71:ca:
         c5:fa:d4:a1:35:37:3f:e0:95:f2:9d:6b:1b:6e:d0:18:62:79:
         d3:53:77:3a:be:31:2b:00:37:27:47:96:7f:5b:56:04:b9:52:
         9b:ab:00:a6:5e:38:7b:7d:a9:0c:0e:ac:e9:b4:cf:88:f3:94:
         58:53:a5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----