Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/d33f2e1d71a2087e3276919697bead1c0240ad91.roa
File:                     d33f2e1d71a2087e3276919697bead1c0240ad91.roa (raw, json)
Hash identifier:          CITLHfPRO1gVD+R3bZBEuZJQ9T6R0UnBSrq3RJgNwHk=
Subject key identifier:   53:CE:F9:C8:34:70:BE:A5:01:09:A5:6D:1F:A5:A6:14:4E:08:93:29
Certificate issuer:       /CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
Certificate serial:       0D6A26
Authority key identifier: B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/d33f2e1d71a2087e3276919697bead1c0240ad91.roa
Signing time:             Tue 06 Sep 2022 02:52:36 +0000
ROA not before:           Wed 24 Mar 2021 14:34:15 +0000
ROA not after:            Tue 24 Mar 2026 14:34:15 +0000
asID:                     64129
IP address blocks:        207.248.2.0/24 maxlen: 24
                          207.248.3.0/24 maxlen: 24
                          2803:3410::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879142 (0xd6a26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
        Validity
            Not Before: Mar 24 14:34:15 2021 GMT
            Not After : Mar 24 14:34:15 2026 GMT
        Subject: CN=d33f2e1d71a2087e3276919697bead1c0240ad91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:21:58:46:a6:f5:00:2a:55:60:d6:76:7f:
                    32:47:27:4d:46:eb:01:e0:dc:e3:4c:c7:59:47:f0:
                    88:4a:28:f4:31:f3:41:b2:81:6f:ac:0f:7b:2b:cb:
                    00:be:d2:4d:dc:79:1a:33:d8:a2:a0:29:ad:0c:59:
                    20:69:f9:21:c4:38:e1:a9:dc:31:04:2a:74:fd:31:
                    31:58:4d:8d:7f:83:40:ff:2e:5a:b3:e6:7c:79:9e:
                    54:89:f4:a6:0a:4d:b4:78:72:0a:c0:43:0a:23:b1:
                    6c:45:11:08:d7:cd:e3:bc:36:ac:2b:e6:20:fb:23:
                    fb:46:fd:f9:8b:9a:b9:83:39:67:ad:05:43:ca:ac:
                    cd:fe:eb:4c:99:74:1c:e9:6a:9b:98:4f:db:84:d0:
                    73:b7:08:aa:66:5d:31:a9:50:37:1d:10:e2:5a:c2:
                    be:04:a0:8a:6d:c2:96:12:8c:27:6c:6d:c3:5d:3f:
                    cc:16:73:39:9f:0b:c4:42:ad:6a:24:4a:6d:bd:a8:
                    02:fd:e3:a2:f0:9b:e1:f0:65:5f:a9:bd:8f:55:24:
                    f3:cc:93:c1:dc:81:c2:60:e5:62:04:79:33:80:73:
                    99:fe:2d:ee:68:6b:5f:0e:39:07:47:e1:b1:62:44:
                    1a:c2:69:20:93:bf:fe:06:5a:4d:10:7d:71:aa:f4:
                    e5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CE:F9:C8:34:70:BE:A5:01:09:A5:6D:1F:A5:A6:14:4E:08:93:29
            X509v3 Authority Key Identifier:
                keyid:B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/d33f2e1d71a2087e3276919697bead1c0240ad91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.2.0/23
                IPv6:
                  2803:3410::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:d4:13:80:3f:60:27:71:cc:26:7d:82:57:db:da:98:e2:13:
         87:95:83:09:9c:7e:54:8f:9d:be:8f:1b:d8:2e:41:e1:62:31:
         dc:08:bb:dc:2e:ab:13:cf:48:bb:39:37:f5:e9:e7:a3:4e:43:
         3d:da:47:cc:44:62:d6:2f:ee:89:1b:de:40:b1:1c:9e:c5:c7:
         39:ea:6c:61:e2:85:d8:e4:17:bd:30:fc:9a:47:a5:1d:b5:10:
         7c:08:6c:47:89:6f:a7:cb:9a:63:a8:e3:ca:da:42:db:33:1b:
         75:d0:28:3d:2d:bf:53:39:eb:91:cc:cf:84:e5:24:30:9e:1b:
         13:67:06:09:53:23:66:d1:d2:c9:b8:3b:b2:f4:32:03:90:72:
         88:d4:b0:58:fc:14:a0:1c:d8:9f:7e:2f:f1:a5:aa:3d:c6:a0:
         b3:38:e2:de:c6:61:ae:9b:fd:81:d6:50:b5:89:05:ae:69:09:
         d8:ba:83:cc:cc:1e:af:a4:b3:d1:e8:d3:50:4d:cb:54:ce:0e:
         65:df:90:0d:2d:08:81:c8:a8:2d:a7:84:16:1e:8d:29:95:dc:
         44:2e:e6:97:a9:1f:73:a2:c3:7c:24:94:bf:bb:4e:cc:24:ea:
         32:05:c6:0b:6b:03:34:11:92:4b:f0:18:b6:76:e2:b3:96:e7:
         8e:04:af:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----