Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/0ab090f6828750d7173726cdaafadd9a58edd082.roa
File:                     0ab090f6828750d7173726cdaafadd9a58edd082.roa (raw, json)
Hash identifier:          rvtUKJa5jULB9HZ0ex8e1s1Dk4t1lXrCGf413ZRBpEU=
Subject key identifier:   8A:47:89:2C:0C:74:07:71:2B:7C:5B:8F:63:6F:73:75:06:F4:EC:EA
Certificate issuer:       /CN=f2cbbb792ff42fa718619507a50663798055643b
Certificate serial:       0D5FDC
Authority key identifier: AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/0ab090f6828750d7173726cdaafadd9a58edd082.roa
Signing time:             Wed 24 Mar 2021 14:28:40 +0000
ROA not before:           Wed 24 Mar 2021 14:28:39 +0000
ROA not after:            Tue 24 Mar 2026 14:28:39 +0000
asID:                     52308
IP address blocks:        181.114.192.0/19 maxlen: 19
                          181.174.128.0/19 maxlen: 19
                          190.105.176.0/20 maxlen: 20
                          190.108.32.0/19 maxlen: 19
                          2803:c400::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876508 (0xd5fdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2cbbb792ff42fa718619507a50663798055643b
        Validity
            Not Before: Mar 24 14:28:39 2021 GMT
            Not After : Mar 24 14:28:39 2026 GMT
        Subject: CN=0ab090f6828750d7173726cdaafadd9a58edd082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:6c:c0:f8:ac:e3:5b:c6:a4:97:90:cb:62:
                    4b:d6:3c:8f:41:2e:ff:79:80:59:a9:21:a3:9c:a7:
                    4e:96:81:55:a8:37:b5:f0:36:19:f0:fa:92:41:cf:
                    cb:55:f8:84:a5:e4:3b:9b:c4:32:f5:6a:de:91:28:
                    60:05:2f:23:4d:41:f9:54:65:af:a6:f1:2f:19:e6:
                    8a:c7:04:c5:09:df:51:77:96:52:ba:f9:63:c6:de:
                    5f:01:dc:41:73:c3:99:20:f8:b4:f2:67:c2:9a:25:
                    c5:f2:5d:92:41:04:67:84:f7:49:a2:b0:fb:97:65:
                    18:82:52:43:5c:6e:6d:6f:e7:97:16:f5:ac:7a:f7:
                    2f:c0:90:1f:84:7b:3c:66:48:3c:15:e9:57:bb:32:
                    9c:70:f3:f7:a7:ad:51:f6:41:18:f9:bd:ed:1d:cd:
                    43:22:69:5e:01:70:53:aa:51:f2:7e:fd:29:76:ac:
                    27:53:1c:f2:14:d0:eb:30:38:1b:d9:77:ee:01:de:
                    d0:57:2d:f5:10:36:e7:6e:3e:f7:cc:38:eb:e9:cc:
                    8c:3a:9b:0b:69:e0:a2:d7:68:27:2e:de:49:cb:de:
                    53:b0:69:f1:e7:83:43:11:d3:c1:99:6d:96:b8:d8:
                    db:84:9e:a8:5e:79:d9:e4:03:0f:15:bb:20:2e:12:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:47:89:2C:0C:74:07:71:2B:7C:5B:8F:63:6F:73:75:06:F4:EC:EA
            X509v3 Authority Key Identifier:
                keyid:AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/0ab090f6828750d7173726cdaafadd9a58edd082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.192.0/19
                  181.174.128.0/19
                  190.105.176.0/20
                  190.108.32.0/19
                IPv6:
                  2803:c400::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:7a:86:78:4f:ec:9f:35:85:e9:f5:99:05:3e:bd:c8:15:aa:
         7b:a0:fd:35:19:b6:4a:eb:26:ac:99:70:16:e8:08:fc:48:84:
         b3:c9:64:48:b6:20:f7:ce:fe:0e:7c:2a:1c:f4:8a:3b:59:15:
         d4:89:0a:46:09:03:3d:83:80:3d:8d:e4:d2:13:e6:6e:45:38:
         1d:16:27:0b:14:5e:40:a1:b7:34:80:e8:ef:57:51:d2:c1:63:
         97:82:6b:c4:49:2d:13:2a:20:8e:77:e6:a8:fd:46:2b:2e:52:
         5c:58:66:0d:e3:d8:4d:58:07:09:25:41:ac:91:6e:b2:a0:b2:
         b8:60:86:09:0a:12:60:a5:2a:18:0b:32:6c:6e:ea:7f:71:c5:
         07:5e:e4:70:32:f8:e9:07:3d:6a:b9:10:58:6e:fe:b7:2e:a7:
         a1:86:e4:0f:7e:39:67:24:32:0f:b2:25:37:97:f4:c3:23:54:
         78:19:b6:c3:6c:2f:7b:5d:12:45:5a:27:41:1a:58:93:fe:71:
         e2:23:67:6c:0a:8c:4c:84:58:43:33:4a:c1:f1:7e:6a:92:aa:
         81:75:6f:59:96:1b:20:4e:06:e1:6f:55:85:14:9e:8c:83:d0:
         9c:a9:17:0e:e8:a1:e1:e5:d1:7c:83:f5:af:b1:5b:14:74:1b:
         f6:27:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----