Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/71dc253bd487020e6087e4ecfedc4ab5de072734.roa
File:                     71dc253bd487020e6087e4ecfedc4ab5de072734.roa (raw, json)
Hash identifier:          MiwqxDWY7fKOLcndUVSWHStAym20nXvUAv/RSS+CJIc=
Subject key identifier:   6A:42:4E:8D:D4:9B:F0:7D:6B:14:F7:77:C5:78:7A:09:53:B3:D1:DF
Certificate issuer:       /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial:       0DB1EA
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/71dc253bd487020e6087e4ecfedc4ab5de072734.roa
Signing time:             Wed 24 Mar 2021 14:37:02 +0000
ROA not before:           Wed 24 Mar 2021 14:37:01 +0000
ROA not after:            Tue 24 Mar 2026 14:37:01 +0000
asID:                     262206
IP address blocks:        186.4.0.0/18 maxlen: 24
                          186.32.0.0/18 maxlen: 24
                          186.32.160.0/19 maxlen: 24
                          186.32.192.0/19 maxlen: 24
                          186.176.0.0/17 maxlen: 24
                          186.176.128.0/17 maxlen: 24
                          186.177.0.0/17 maxlen: 24
                          186.177.128.0/18 maxlen: 24
                          2800:860::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897514 (0xdb1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
        Validity
            Not Before: Mar 24 14:37:01 2021 GMT
            Not After : Mar 24 14:37:01 2026 GMT
        Subject: CN=71dc253bd487020e6087e4ecfedc4ab5de072734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:45:71:93:f0:61:65:7c:7c:c6:05:a8:e0:
                    3d:32:bb:22:8f:6d:81:e4:0b:17:6f:af:4b:de:55:
                    25:f7:b2:3d:7a:4b:89:76:47:e1:aa:d0:f0:df:55:
                    d3:5d:f6:b1:72:7d:13:6b:85:b8:54:91:46:72:ee:
                    58:f6:72:eb:8c:84:29:1e:19:5c:ea:f4:f2:d0:d4:
                    e4:04:2b:ab:b6:26:9d:f3:cf:fc:ae:d2:03:f5:fd:
                    30:00:12:89:3d:6e:f1:66:c9:41:46:ce:56:59:aa:
                    e8:c8:5c:66:d7:d9:da:ae:60:79:f9:85:4a:f3:d5:
                    8d:5c:07:f2:9e:ab:f8:76:31:be:63:54:ae:3c:a6:
                    e4:a1:95:1b:6f:0a:e4:f6:51:3b:19:df:ee:57:1f:
                    c5:e1:46:8e:ab:60:c5:6f:62:59:5d:dd:01:24:16:
                    ac:ef:57:4e:a0:de:9a:df:0b:13:26:da:e7:8a:20:
                    0c:3e:19:9c:2c:f8:4c:c4:91:fc:b9:81:da:57:e3:
                    a6:17:b2:b5:87:b3:25:a6:25:34:e4:d9:1d:2a:2c:
                    26:a0:96:ce:bb:3e:5a:81:0a:ad:d8:f7:a7:82:d3:
                    c3:c6:73:00:a4:bd:07:ff:da:cd:ed:d5:a7:bc:bf:
                    dc:83:e5:90:27:f7:40:d7:2e:dc:9f:20:5d:9b:a4:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:42:4E:8D:D4:9B:F0:7D:6B:14:F7:77:C5:78:7A:09:53:B3:D1:DF
            X509v3 Authority Key Identifier:
                keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/71dc253bd487020e6087e4ecfedc4ab5de072734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.4.0.0/18
                  186.32.0.0/18
                  186.32.160.0-186.32.223.255
                  186.176.0.0-186.177.191.255
                IPv6:
                  2800:860::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:77:b5:e9:be:61:e9:42:6f:81:81:b3:1d:b6:c8:1f:e4:0a:
         c9:5c:6f:29:47:c1:a4:ac:b3:ea:31:3e:20:41:3a:8a:80:0c:
         51:b8:8e:9d:95:8b:e1:08:81:43:2c:b1:22:f1:9f:ac:ab:77:
         8b:1e:82:92:e6:7a:6d:9e:2e:97:d5:3a:14:08:04:ff:07:ef:
         98:4e:c9:92:6f:a3:52:06:0e:d4:b5:5f:a8:57:d9:f6:34:54:
         ff:45:52:32:89:8e:cf:47:09:77:cf:16:76:8e:d8:b6:de:c7:
         2f:55:c4:6b:d3:6d:6c:49:93:a6:45:0b:50:fc:87:33:20:1c:
         7b:06:3b:35:a2:7b:41:1a:d7:22:ac:f2:90:86:2f:59:58:48:
         cd:55:2e:03:16:bc:bd:a8:e4:94:b1:68:13:f8:8e:5e:72:7d:
         ac:f6:f0:0a:96:1f:5f:8d:30:d0:4f:88:db:c7:ac:58:e2:c9:
         cd:04:59:92:43:20:86:b5:2b:39:20:2d:17:23:fa:a0:0d:fa:
         dd:e7:82:8c:ef:93:29:63:c7:3f:ef:66:88:4e:0e:f1:45:9f:
         d2:fc:e5:12:fd:94:74:38:d5:99:a9:fc:77:f0:13:0d:21:b5:
         7b:1d:e3:34:31:80:91:f2:9d:ca:17:7e:ec:b1:a6:73:ff:6b:
         34:53:e8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----