Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29611a02-48a3-44f2-b7c1-c6225652e51f/ceeba24db51406cad9b26cb67e56f0ecc2661033.roa
File:                     ceeba24db51406cad9b26cb67e56f0ecc2661033.roa (raw, json)
Hash identifier:          G4tWH5ZH/uHniISoY38HTk0a9jdvU7vGeBuwxYZWsQM=
Subject key identifier:   38:CE:02:03:27:A2:70:D4:E6:60:77:1F:4C:5E:6D:3C:F1:D4:E6:B6
Certificate issuer:       /CN=1a3c62d3e6a06dadd310232029765bcd3db5ca3e
Certificate serial:       07983B
Authority key identifier: B8:97:74:5D:47:AA:91:0D:9E:52:5B:E5:B4:69:72:50:DE:E6:A2:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a3c62d3e6a06dadd310232029765bcd3db5ca3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29611a02-48a3-44f2-b7c1-c6225652e51f/ceeba24db51406cad9b26cb67e56f0ecc2661033.roa
Signing time:             Wed 24 Mar 2021 14:33:14 +0000
ROA not before:           Wed 24 Mar 2021 14:33:14 +0000
ROA not after:            Tue 24 Mar 2026 14:33:14 +0000
asID:                     269993
IP address blocks:        138.121.108.0/22 maxlen: 24
                          168.90.220.0/22 maxlen: 24
                          181.177.220.0/22 maxlen: 24
                          2803:4d00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497723 (0x7983b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3c62d3e6a06dadd310232029765bcd3db5ca3e
        Validity
            Not Before: Mar 24 14:33:14 2021 GMT
            Not After : Mar 24 14:33:14 2026 GMT
        Subject: CN=ceeba24db51406cad9b26cb67e56f0ecc2661033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1c:43:ae:c7:a2:c8:73:15:67:e2:d4:0f:54:
                    21:5a:c5:5d:19:89:bf:8b:e2:b7:ab:95:da:28:fa:
                    ef:2c:41:8e:9b:da:89:a4:c3:a2:6b:7a:b5:28:a8:
                    3f:4d:db:2b:0e:aa:11:01:21:4b:10:9e:fa:59:0d:
                    0a:15:90:92:d8:66:e1:2f:dc:31:d2:77:f6:e9:03:
                    0d:ef:76:8a:d9:ae:86:69:77:bc:cd:d1:e0:83:29:
                    ba:b4:f6:55:23:55:00:1a:c4:b8:2b:45:5a:af:82:
                    ba:8e:77:6f:b7:05:58:23:8e:6c:8e:59:39:58:16:
                    96:ee:d2:8e:a4:94:06:01:e8:21:15:55:9c:e8:00:
                    fd:33:32:53:56:74:73:5c:2b:1a:a1:23:7b:57:02:
                    89:fb:37:8d:a9:69:87:29:2d:19:32:01:8e:19:8c:
                    e2:98:9e:cc:4b:81:dc:39:9e:e1:57:92:77:3d:77:
                    3e:4d:00:d0:93:37:5c:66:f0:06:ab:ed:55:c7:c4:
                    b9:0e:73:a9:a6:f8:80:28:eb:84:41:b1:43:c4:e2:
                    e5:19:f0:1b:f9:21:4a:8a:79:f8:0b:ef:bf:85:cb:
                    21:45:b3:06:6e:1c:66:7b:9b:68:03:a1:40:ac:c5:
                    19:6c:8d:78:4a:1f:17:4e:85:be:9a:11:85:8a:a0:
                    5b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CE:02:03:27:A2:70:D4:E6:60:77:1F:4C:5E:6D:3C:F1:D4:E6:B6
            X509v3 Authority Key Identifier:
                keyid:B8:97:74:5D:47:AA:91:0D:9E:52:5B:E5:B4:69:72:50:DE:E6:A2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a3c62d3e6a06dadd310232029765bcd3db5ca3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29611a02-48a3-44f2-b7c1-c6225652e51f/ceeba24db51406cad9b26cb67e56f0ecc2661033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29611a02-48a3-44f2-b7c1-c6225652e51f/1a3c62d3e6a06dadd310232029765bcd3db5ca3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.108.0/22
                  168.90.220.0/22
                  181.177.220.0/22
                IPv6:
                  2803:4d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:32:47:05:dc:5f:79:db:e6:ae:ee:5b:fb:e9:f8:7f:83:87:
         08:8f:80:dc:55:c2:c2:8f:c3:20:f0:50:b8:e0:e2:b1:50:03:
         01:39:ac:6c:ac:ed:01:6c:04:5b:23:bb:5c:48:09:59:b3:be:
         d4:c8:fa:5a:73:82:9c:0d:c4:cf:03:f3:f0:7d:87:03:26:d6:
         d0:94:56:bf:37:84:b7:de:c1:e3:6d:29:2d:26:34:80:30:8d:
         38:99:bd:ab:52:4d:09:99:56:a1:82:5d:67:f2:b7:a4:9b:08:
         66:5d:0d:75:6f:43:60:bb:7c:1c:e9:14:7d:a5:06:87:c2:28:
         b7:7b:7d:27:fe:05:23:83:89:01:e3:d1:bf:0e:07:c2:49:38:
         86:37:8d:6a:6a:a6:da:3d:30:58:e1:c2:13:14:b0:f3:94:76:
         10:de:99:cd:56:76:4b:6b:1e:9a:23:13:b0:a6:c1:0b:7a:b0:
         99:66:35:02:5f:17:37:0c:33:fd:72:28:b2:25:b0:1d:52:1c:
         84:7f:a0:aa:08:ef:f9:67:57:52:75:49:5b:d8:ae:0f:7a:4f:
         a9:ac:a5:ec:db:e1:a4:bb:48:ec:51:50:44:30:70:b8:40:66:
         f9:6b:c8:61:cc:19:29:c6:4b:74:dc:66:7f:12:8e:01:c3:05:
         43:8d:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----