Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28f72468-71a7-4407-a293-3c4d482a2082/d9d3110b6f035d935053ede842195d604f9347e5.roa
File:                     d9d3110b6f035d935053ede842195d604f9347e5.roa (raw, json)
Hash identifier:          0r4AT7FALOWXR0iHxffzXgV3p+pFieru0HGvQ9Sw0X0=
Subject key identifier:   7E:2B:CD:C2:55:B1:36:B5:80:DB:0F:8A:88:2E:B3:1A:81:CA:D2:57
Certificate issuer:       /CN=f1d0163a439efacc1ac476fcf9ca062330c6e918
Certificate serial:       0D1896
Authority key identifier: 29:E7:A3:95:52:0E:C9:87:60:8C:CF:1E:68:F0:1E:63:7C:B3:7A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1d0163a439efacc1ac476fcf9ca062330c6e918.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28f72468-71a7-4407-a293-3c4d482a2082/d9d3110b6f035d935053ede842195d604f9347e5.roa
Signing time:             Wed 24 Mar 2021 14:40:33 +0000
ROA not before:           Wed 24 Mar 2021 14:40:33 +0000
ROA not after:            Tue 24 Mar 2026 14:40:33 +0000
asID:                     263805
IP address blocks:        138.185.136.0/22 maxlen: 22
                          2803:a240::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858262 (0xd1896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d0163a439efacc1ac476fcf9ca062330c6e918
        Validity
            Not Before: Mar 24 14:40:33 2021 GMT
            Not After : Mar 24 14:40:33 2026 GMT
        Subject: CN=d9d3110b6f035d935053ede842195d604f9347e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:1f:cc:c8:6b:9d:6d:b6:f3:da:84:cd:e1:
                    12:43:6b:ca:00:c0:16:84:24:18:b8:54:49:c3:a7:
                    14:30:54:38:00:c9:bc:ef:9c:33:c3:55:15:75:bc:
                    ba:ce:37:48:ac:e2:a0:a5:54:30:24:8b:0b:e6:05:
                    35:85:c0:64:7c:bf:83:e7:06:0d:33:e9:b4:51:54:
                    15:44:8d:d0:21:4e:26:72:84:36:65:e5:ae:3c:b7:
                    b8:c7:9a:35:00:da:31:e9:64:03:e3:d0:fe:0d:4c:
                    c9:ee:db:47:c7:59:ab:99:c6:cb:d9:df:58:9e:ac:
                    f4:39:3b:e3:05:90:d2:b8:7b:1d:49:b3:a6:2c:e4:
                    c4:4d:35:f4:6a:71:3b:f4:b3:c7:d2:f5:fe:14:06:
                    31:d5:23:99:96:72:b1:2d:02:33:72:04:89:0e:43:
                    5f:12:cd:25:60:cb:6c:7c:f1:0d:9d:19:11:0e:14:
                    0d:3d:fb:f3:c6:1c:4a:6e:f7:a6:95:1c:10:89:de:
                    c0:9c:5d:6a:11:67:44:94:ca:5d:50:6d:e6:0d:9c:
                    9e:1e:1d:ef:2a:09:22:90:4c:16:6e:9c:b2:a4:90:
                    a1:9d:8b:66:c1:02:bd:90:be:eb:18:34:41:d2:30:
                    2d:e9:0e:0e:0a:19:d1:ce:c6:60:c6:13:e8:8e:04:
                    eb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2B:CD:C2:55:B1:36:B5:80:DB:0F:8A:88:2E:B3:1A:81:CA:D2:57
            X509v3 Authority Key Identifier:
                keyid:29:E7:A3:95:52:0E:C9:87:60:8C:CF:1E:68:F0:1E:63:7C:B3:7A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1d0163a439efacc1ac476fcf9ca062330c6e918.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28f72468-71a7-4407-a293-3c4d482a2082/d9d3110b6f035d935053ede842195d604f9347e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28f72468-71a7-4407-a293-3c4d482a2082/f1d0163a439efacc1ac476fcf9ca062330c6e918.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.136.0/22
                IPv6:
                  2803:a240::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:a2:16:b6:71:4e:8a:9b:f7:02:aa:5e:8a:3a:0f:a2:12:d8:
         57:8f:62:04:52:0b:52:e1:fd:85:c1:ad:cf:99:e6:ed:57:4f:
         76:65:4b:e1:7f:af:04:26:e9:f0:ae:c4:29:4f:4a:e4:bd:42:
         09:1f:26:5c:3f:fe:1c:58:f4:ac:37:b4:92:75:67:00:55:05:
         a8:f8:50:37:f3:e0:b4:3f:ac:88:31:59:bd:13:02:96:f5:73:
         6d:d3:dd:a6:b2:7e:52:ea:d6:a9:53:d9:5e:f4:d4:ca:cd:2e:
         00:65:af:e7:19:9d:00:70:d6:16:85:85:cd:85:8e:01:53:24:
         04:5b:1d:88:d9:d9:00:56:a9:0c:f3:29:f3:52:d0:83:e7:8f:
         98:4b:7c:48:5c:76:9f:e3:f8:bd:37:7d:d2:a1:04:7f:80:c9:
         a7:3d:97:d7:7a:49:eb:14:89:30:a3:e1:2f:48:5d:68:d5:3a:
         f3:1b:fc:83:5f:80:28:ab:2d:db:97:17:2a:51:e7:68:96:1b:
         bf:4f:9b:9b:84:e2:a1:53:46:71:d4:44:69:61:9b:97:34:ac:
         6b:30:3f:1e:ae:0b:1d:ae:c7:e2:75:4d:9f:e3:48:fc:0f:74:
         d1:47:86:38:3e:27:76:e3:d2:3c:cc:8b:71:b8:4f:b2:30:ad:
         a6:79:ec:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----