Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3c6e4e16-8783-4e7a-bdd1-2eef1ec25462/5350f9a598cab40aa55956eb253cb4d06d54b775.roa
File:                     5350f9a598cab40aa55956eb253cb4d06d54b775.roa (raw, json)
Hash identifier:          7Xs6XmJHXsI8oXjqYXjPKN2+vZrSkjzmOYvIpq6z8Q0=
Subject key identifier:   94:F1:73:0E:A2:DD:4A:C6:B7:DC:72:D4:3F:91:F2:36:5F:34:B7:47
Certificate issuer:       /CN=73dbf33b248cc43bda5c4a0dd062a074e3501745
Certificate serial:       0D6EA4
Authority key identifier: 29:35:9B:79:05:9B:8E:04:60:70:59:54:0D:AC:4C:26:DE:D8:D6:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73dbf33b248cc43bda5c4a0dd062a074e3501745.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3c6e4e16-8783-4e7a-bdd1-2eef1ec25462/5350f9a598cab40aa55956eb253cb4d06d54b775.roa
Signing time:             Wed 24 Mar 2021 14:32:44 +0000
ROA not before:           Wed 24 Mar 2021 14:32:44 +0000
ROA not after:            Tue 24 Mar 2026 14:32:44 +0000
asID:                     263776
IP address blocks:        186.0.184.0/22 maxlen: 24
                          2803:a440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880292 (0xd6ea4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dbf33b248cc43bda5c4a0dd062a074e3501745
        Validity
            Not Before: Mar 24 14:32:44 2021 GMT
            Not After : Mar 24 14:32:44 2026 GMT
        Subject: CN=5350f9a598cab40aa55956eb253cb4d06d54b775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c9:89:73:06:29:48:d2:d6:fa:49:1d:84:72:
                    8c:cf:ab:e7:5a:57:a8:47:83:6b:c9:ba:f0:cd:50:
                    0b:ad:69:9d:3e:f1:9e:ee:ee:77:14:f8:49:70:ce:
                    d6:27:59:35:c6:86:b3:03:3b:a1:6f:03:d5:27:97:
                    0c:64:78:de:67:ff:f7:2d:17:9c:0a:29:bf:73:f0:
                    ed:32:cc:41:0c:21:5c:a6:b5:3f:b2:95:14:0b:db:
                    38:86:c7:b9:25:bd:99:e5:fa:7c:e3:27:3a:65:05:
                    b2:a9:95:04:c1:8a:da:82:cf:c2:23:d1:ed:1c:e1:
                    9c:98:37:33:a5:c3:64:40:12:fd:79:f9:60:02:8f:
                    c4:0a:19:40:f9:c1:b2:d2:11:40:c9:10:6b:c7:80:
                    82:eb:04:59:67:d8:9a:dd:79:e6:35:df:e2:c8:32:
                    06:66:09:cf:44:62:c7:86:d8:2b:75:f1:e0:84:bd:
                    8f:2f:f5:58:2e:ae:8f:2d:86:70:38:2a:29:2c:eb:
                    2f:cb:5a:fd:fc:37:92:65:2e:d9:26:89:25:75:12:
                    0e:81:c7:f6:c5:50:61:df:dc:13:17:82:bc:d9:28:
                    04:c0:79:65:69:52:e3:08:74:6a:7e:c2:49:41:ba:
                    97:20:6f:ff:ed:37:b0:81:6c:a3:b5:27:d2:7c:bd:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F1:73:0E:A2:DD:4A:C6:B7:DC:72:D4:3F:91:F2:36:5F:34:B7:47
            X509v3 Authority Key Identifier:
                keyid:29:35:9B:79:05:9B:8E:04:60:70:59:54:0D:AC:4C:26:DE:D8:D6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73dbf33b248cc43bda5c4a0dd062a074e3501745.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3c6e4e16-8783-4e7a-bdd1-2eef1ec25462/5350f9a598cab40aa55956eb253cb4d06d54b775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3c6e4e16-8783-4e7a-bdd1-2eef1ec25462/73dbf33b248cc43bda5c4a0dd062a074e3501745.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.184.0/22
                IPv6:
                  2803:a440::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:3d:09:8a:ce:28:a0:05:74:12:ea:f9:dc:ad:b8:5a:ce:7e:
         68:86:56:ae:dc:79:f3:5f:26:26:4e:78:78:5e:36:52:bb:e1:
         fb:74:2e:3c:80:1f:66:26:55:fc:5a:de:11:14:6c:bd:fc:87:
         47:80:17:3b:c2:6c:28:f2:4a:cd:47:f0:53:89:71:f6:69:94:
         5a:88:dc:62:1b:30:2c:f5:6d:80:89:3a:32:7a:87:7f:8b:6f:
         83:02:e9:19:4e:ca:f4:dd:a6:73:97:7c:37:91:59:16:fc:e6:
         ee:13:7c:fb:fc:4b:a2:aa:64:ff:5e:74:4e:1e:50:9f:b3:cd:
         ae:cb:30:a4:01:27:71:f2:ad:17:e7:8b:9c:06:d0:c1:9f:58:
         77:e6:4a:f1:b0:43:fc:23:c3:b4:0f:71:fc:f6:0b:c7:3b:36:
         62:1a:1f:52:fd:36:1c:20:29:c8:ac:1a:87:32:8a:5e:aa:57:
         64:24:f8:eb:0b:8c:7c:3c:29:32:1d:fe:7c:db:07:42:b0:50:
         2f:03:54:3f:15:de:6d:ff:10:9d:78:b5:e2:35:42:0d:18:b6:
         6d:61:e1:d6:2b:0a:db:21:79:a0:a1:67:c1:5d:46:0e:7a:02:
         d3:75:6e:1f:d0:29:8a:b9:a1:b6:89:df:af:1e:9b:ce:53:93:
         9c:3a:94:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----