Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/8976eb0670f87bf49ee08cba61b6f0dfa9583600.roa
File:                     8976eb0670f87bf49ee08cba61b6f0dfa9583600.roa (raw, json)
Hash identifier:          iuRs8Z+OU1qev6S0UgSWPHbnT7cGfg4GBiBVXjBtAWc=
Subject key identifier:   52:AB:E7:62:7E:F9:47:D3:B5:A0:5F:7F:07:CD:BF:B8:50:81:A5:39
Certificate issuer:       /CN=fc4cfd946a0eeb5645e4de745f0b1bd955372749
Certificate serial:       2D01
Authority key identifier: A4:03:9C:2C:3E:1E:90:3F:57:08:3D:A1:81:A3:16:49:3A:CC:E3:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc4cfd946a0eeb5645e4de745f0b1bd955372749.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/8976eb0670f87bf49ee08cba61b6f0dfa9583600.roa
Signing time:             Tue 30 Mar 2021 14:45:49 +0000
ROA not before:           Fri 26 Mar 2021 03:00:00 +0000
ROA not after:            Tue 26 Mar 2024 03:00:00 +0000
asID:                     271799
IP address blocks:        190.113.40.0/22 maxlen: 24
                          2803:d010::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11521 (0x2d01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4cfd946a0eeb5645e4de745f0b1bd955372749
        Validity
            Not Before: Mar 26 03:00:00 2021 GMT
            Not After : Mar 26 03:00:00 2024 GMT
        Subject: CN=8976eb0670f87bf49ee08cba61b6f0dfa9583600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:c7:35:5d:60:9b:a3:1a:da:9a:05:79:d4:
                    ef:6a:c2:ab:2b:89:db:bb:41:85:e5:e7:36:43:af:
                    14:12:6b:1c:17:4e:8e:62:89:37:8c:ba:8e:e6:89:
                    87:f9:d3:9b:29:eb:66:6f:a3:65:c9:42:30:68:ac:
                    0d:d0:7a:81:89:44:56:e9:ea:89:e8:96:ad:58:48:
                    b3:a3:e1:03:7c:50:18:c7:bc:0b:f9:d0:91:74:12:
                    b7:00:e2:96:db:d4:9e:7e:df:62:2c:3a:80:b7:41:
                    2a:fe:75:f1:6c:6e:2e:c7:12:ad:3c:09:41:f8:5a:
                    52:64:5d:ef:3a:38:61:3f:b3:ae:be:d4:88:30:51:
                    3a:9b:a5:f3:2c:6c:7d:88:89:c6:80:a4:b5:a9:cc:
                    69:d9:0c:fb:c1:44:64:a4:03:52:ad:86:22:10:3e:
                    ea:26:77:6e:65:38:33:f9:99:4f:ad:cc:6c:72:88:
                    ec:47:e2:17:5d:71:20:a7:4f:42:e0:0f:c7:54:24:
                    ef:c1:6d:5c:81:79:f4:81:7e:94:54:8a:de:74:5e:
                    7a:bb:b1:b2:5a:01:b2:94:4e:a8:a7:79:87:bb:14:
                    8c:c7:99:1b:cb:bf:74:89:89:b5:90:bc:f0:b3:9f:
                    a7:64:c1:6e:28:bb:66:ef:70:c8:42:c9:75:52:ee:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AB:E7:62:7E:F9:47:D3:B5:A0:5F:7F:07:CD:BF:B8:50:81:A5:39
            X509v3 Authority Key Identifier:
                keyid:A4:03:9C:2C:3E:1E:90:3F:57:08:3D:A1:81:A3:16:49:3A:CC:E3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc4cfd946a0eeb5645e4de745f0b1bd955372749.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/8976eb0670f87bf49ee08cba61b6f0dfa9583600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/fc4cfd946a0eeb5645e4de745f0b1bd955372749.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.40.0/22
                IPv6:
                  2803:d010::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:eb:98:f4:9d:15:aa:5d:27:11:30:08:eb:f7:59:d1:38:
         8e:77:9e:b5:fc:f7:f8:79:53:48:9d:99:74:20:f5:d1:36:cb:
         70:16:de:55:29:aa:cc:1b:a6:93:55:de:3d:46:87:8b:3a:aa:
         35:df:14:15:54:a0:9e:e4:29:21:27:b0:63:aa:fd:f7:28:d9:
         5e:29:5f:f1:c4:ec:9c:7b:bf:bc:b4:e9:ee:c5:ad:13:50:d6:
         5e:ce:8f:a1:ad:92:e8:c5:9e:92:74:bf:c3:96:ea:47:ba:b0:
         65:6e:8d:cc:d5:0b:6e:79:57:d1:97:8e:ee:10:93:66:6d:e8:
         cb:d4:1e:c7:f8:95:62:86:0e:5f:28:07:78:2b:b7:5c:42:f2:
         5a:7f:9c:78:7a:54:0e:f9:7c:53:be:6c:81:26:b2:6a:5c:5e:
         12:81:c6:d5:be:58:9d:3b:bc:65:85:65:ba:d1:a9:15:9f:12:
         0b:39:37:81:9a:2a:a6:aa:d9:78:b9:43:9b:dc:a5:3a:18:84:
         0d:53:0f:ca:aa:6a:7e:d1:75:30:c1:97:ae:e0:63:bb:8c:20:
         6b:11:54:16:6c:4c:fb:29:48:d3:94:fe:2e:61:6e:9f:d5:9b:
         96:4f:4c:9f:8a:8a:d1:a2:b8:9c:fc:71:7b:60:4d:9d:49:3b:
         f0:35:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----