Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/325d18f9-b8d1-4ad3-b0db-fa6be892ffbd/ee2c559e6528a29ae4e7d7e08d26e6c142351c7a.roa
File:                     ee2c559e6528a29ae4e7d7e08d26e6c142351c7a.roa (raw, json)
Hash identifier:          3guiBNDzqfRMn30LBgoHo4cqOGp3dlyJ4MQpWHFO96c=
Subject key identifier:   3F:BF:B3:28:A7:FA:9C:59:C2:90:55:61:A7:C4:DA:8A:52:4F:56:E6
Certificate issuer:       /CN=5ccfe17e5178d2b172151d697f641cae961bbfea
Certificate serial:       0C44F0
Authority key identifier: 3D:CC:C1:C0:89:62:FE:54:7D:47:B8:D6:7F:EE:74:01:CF:7A:0A:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ccfe17e5178d2b172151d697f641cae961bbfea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/325d18f9-b8d1-4ad3-b0db-fa6be892ffbd/ee2c559e6528a29ae4e7d7e08d26e6c142351c7a.roa
Signing time:             Wed 24 Mar 2021 14:34:06 +0000
ROA not before:           Wed 24 Mar 2021 14:34:06 +0000
ROA not after:            Tue 24 Mar 2026 14:34:06 +0000
asID:                     264707
IP address blocks:        168.121.80.0/22 maxlen: 24
                          2803:2d40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804080 (0xc44f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccfe17e5178d2b172151d697f641cae961bbfea
        Validity
            Not Before: Mar 24 14:34:06 2021 GMT
            Not After : Mar 24 14:34:06 2026 GMT
        Subject: CN=ee2c559e6528a29ae4e7d7e08d26e6c142351c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:b1:d5:00:31:b2:7c:d4:23:42:6e:59:e6:
                    ea:2a:95:59:64:b8:b3:d7:5f:08:18:57:4c:5d:1b:
                    04:34:21:dc:a8:87:fe:eb:c4:2d:7c:e1:ab:98:73:
                    5f:7b:3a:f3:92:ae:7b:2d:4f:15:2c:c7:ee:8d:ea:
                    68:b6:83:d0:f7:d4:2f:78:f5:75:0f:fd:2d:41:50:
                    aa:ed:a0:8f:26:e7:c7:46:de:f3:33:87:ff:c8:07:
                    2b:84:32:60:8a:aa:81:76:41:a3:da:b6:9c:dc:cd:
                    6b:fd:bd:ae:38:2b:05:6c:52:c9:fb:5a:f3:bf:0b:
                    a3:fb:5b:2b:3c:94:90:d0:c0:52:dc:ed:94:1d:a8:
                    1e:31:ac:f9:f2:bc:b4:16:6a:f9:ed:c4:a3:1d:60:
                    5c:f9:de:3c:ed:c4:0f:69:fe:ea:fe:e8:3b:4a:f4:
                    8f:92:ab:a1:62:f5:3b:05:26:35:3b:d3:e7:32:92:
                    58:53:9b:1f:8e:51:f2:93:f4:00:49:42:94:39:45:
                    f8:05:eb:af:ef:76:e0:48:d4:b5:d0:ed:5b:4b:51:
                    3a:f1:2f:79:0a:16:d1:5c:15:9e:b5:1f:4a:e9:16:
                    9e:79:e3:90:7b:ec:e4:04:69:d1:6d:fa:b9:a5:a0:
                    f4:6a:41:4d:41:70:38:90:1a:7f:ea:92:60:43:34:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BF:B3:28:A7:FA:9C:59:C2:90:55:61:A7:C4:DA:8A:52:4F:56:E6
            X509v3 Authority Key Identifier:
                keyid:3D:CC:C1:C0:89:62:FE:54:7D:47:B8:D6:7F:EE:74:01:CF:7A:0A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ccfe17e5178d2b172151d697f641cae961bbfea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/325d18f9-b8d1-4ad3-b0db-fa6be892ffbd/ee2c559e6528a29ae4e7d7e08d26e6c142351c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/325d18f9-b8d1-4ad3-b0db-fa6be892ffbd/5ccfe17e5178d2b172151d697f641cae961bbfea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.80.0/22
                IPv6:
                  2803:2d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:71:ce:88:95:31:19:7f:8e:70:39:27:31:72:9e:47:42:8d:
         8f:10:27:06:d5:47:46:e2:b4:05:21:74:16:29:86:7c:ba:91:
         32:79:ae:d1:29:15:27:47:c7:82:f1:6e:71:dd:c1:44:a4:41:
         f1:07:e7:69:d8:24:4f:f6:e0:9b:34:1b:e5:8b:ff:5f:51:5c:
         62:7e:2c:de:5c:25:e7:87:da:9d:a5:ad:95:7a:d1:25:fb:81:
         d3:4e:33:9d:69:fd:0b:1d:b7:39:8b:85:53:69:71:8f:bc:06:
         ac:01:07:c3:8a:9e:aa:38:09:a3:f2:ac:25:63:e0:30:ab:13:
         91:2b:b8:5a:d0:c6:55:94:2a:79:35:c4:ef:47:48:8a:4e:ce:
         5d:f4:ca:bb:65:70:01:59:54:22:05:96:90:74:b4:ce:ad:52:
         b7:fc:9c:ba:7c:a2:00:a2:45:cf:a9:e8:df:c9:df:f3:3b:7b:
         22:92:41:88:e2:08:ce:da:8a:56:ea:e5:f8:8e:10:ac:de:96:
         ff:5d:1e:cc:23:99:c1:16:98:7f:9e:24:78:d0:a7:ae:68:26:
         3d:f4:bd:13:d0:39:8b:73:d9:89:8a:3e:c0:7d:c0:1b:6d:0e:
         b5:96:17:40:3e:78:4f:9d:e7:1e:ba:dc:90:2e:71:8f:d7:71:
         19:57:73:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----