Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41886493-a62c-41b3-8d36-d45fa59d1c42/06e65cf27933d91ce28853a42ffe306a1ed8a7c8.roa
File:                     06e65cf27933d91ce28853a42ffe306a1ed8a7c8.roa (raw, json)
Hash identifier:          6pKA/CvgWIYRIZohCFaudrlFpde3cOknk81JxPKi+qE=
Subject key identifier:   66:CE:6A:03:10:98:62:B9:BD:97:23:FF:8A:01:3E:3A:D1:AC:4B:E8
Certificate issuer:       /CN=b833f978906a56f53c19df6f741ff60b3fc358df
Certificate serial:       03E0
Authority key identifier: 56:31:C7:F3:12:81:D7:46:EE:47:49:1D:0E:92:18:81:DE:06:0C:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b833f978906a56f53c19df6f741ff60b3fc358df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41886493-a62c-41b3-8d36-d45fa59d1c42/06e65cf27933d91ce28853a42ffe306a1ed8a7c8.roa
Signing time:             Wed 27 Oct 2021 14:01:59 +0000
ROA not before:           Wed 27 Oct 2021 03:00:00 +0000
ROA not after:            Tue 27 Oct 2026 03:00:00 +0000
asID:                     263808
IP address blocks:        138.204.152.0/22 maxlen: 24
                          2803:9240::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b833f978906a56f53c19df6f741ff60b3fc358df
        Validity
            Not Before: Oct 27 03:00:00 2021 GMT
            Not After : Oct 27 03:00:00 2026 GMT
        Subject: CN=06e65cf27933d91ce28853a42ffe306a1ed8a7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6e:19:e0:ae:b5:06:81:b8:15:da:65:77:58:
                    ff:f7:5f:ee:70:99:98:44:35:fd:c8:dc:44:ea:a8:
                    31:f1:14:ef:a5:ad:77:20:83:c8:10:25:99:8d:10:
                    3e:a3:d7:a5:9a:6f:49:9a:aa:4b:65:d3:43:d3:2d:
                    dd:74:14:3e:32:4f:dc:45:f4:65:42:3c:07:a7:7a:
                    ba:4f:ed:8e:b3:ba:b2:48:ef:35:ba:66:5b:23:d2:
                    12:26:5f:d2:f6:cb:47:0e:8a:72:67:16:ba:93:3d:
                    37:4a:cd:eb:73:1d:93:06:b2:4b:1c:56:d6:ca:f0:
                    48:ac:09:a5:0b:ab:98:46:b6:85:75:77:86:df:a1:
                    94:e3:e4:4e:d1:4f:e3:62:f8:3b:ec:41:e5:e7:62:
                    4b:8e:81:83:93:a0:63:8a:bb:47:0a:54:69:86:c9:
                    a7:06:c1:53:fd:c4:d2:fd:5e:9f:62:44:e4:c0:f4:
                    65:ac:37:0e:9a:70:23:e3:d6:a8:d0:08:07:c3:58:
                    16:df:12:0b:87:96:b8:d0:ac:e9:82:20:85:54:be:
                    5c:0f:b1:1d:94:a0:88:4b:5e:4f:38:d0:07:16:f6:
                    c3:bb:42:43:23:3b:16:b8:0f:55:f6:4e:9d:ab:62:
                    89:05:b3:dc:0a:db:95:0e:d6:e2:91:51:6c:5d:5f:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CE:6A:03:10:98:62:B9:BD:97:23:FF:8A:01:3E:3A:D1:AC:4B:E8
            X509v3 Authority Key Identifier:
                keyid:56:31:C7:F3:12:81:D7:46:EE:47:49:1D:0E:92:18:81:DE:06:0C:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b833f978906a56f53c19df6f741ff60b3fc358df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41886493-a62c-41b3-8d36-d45fa59d1c42/06e65cf27933d91ce28853a42ffe306a1ed8a7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41886493-a62c-41b3-8d36-d45fa59d1c42/b833f978906a56f53c19df6f741ff60b3fc358df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.152.0/22
                IPv6:
                  2803:9240::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:6f:eb:23:c8:4b:cb:b4:53:58:98:a2:9b:77:c3:49:13:1d:
         6e:62:f9:fd:f8:d3:60:43:46:7a:23:ce:9d:a9:7c:10:de:92:
         02:8a:81:cd:e4:97:fd:88:c7:d8:06:23:3f:ae:a9:f2:5a:9d:
         96:30:d4:89:30:aa:12:48:9e:09:bb:bb:ae:d1:04:61:37:7d:
         a8:7d:1b:37:3b:db:23:1a:63:27:1a:13:6b:3b:05:13:76:f6:
         4d:ed:61:04:23:92:6c:59:66:8f:80:4c:fe:32:e8:9e:cb:ea:
         a5:c4:50:61:ac:53:6a:b5:5d:40:0c:0b:d2:19:e5:a1:eb:4f:
         6e:75:5b:8d:15:4a:1a:26:0d:57:0a:6f:5d:ec:0d:b7:50:fe:
         2e:94:bc:17:b8:4c:96:3b:32:f7:f8:24:8c:a5:5d:40:01:33:
         58:56:12:7b:de:da:fb:7e:58:9a:23:13:a5:e7:78:08:3c:c5:
         37:3f:10:cd:57:b3:70:19:e0:5a:00:78:b6:bd:d9:b0:53:07:
         5c:e8:8c:eb:15:b2:07:cb:b8:1a:08:45:30:53:86:90:b2:d8:
         d4:b6:e7:34:69:17:1a:c1:7b:b3:55:9a:88:6c:cd:f2:bb:27:
         ce:40:80:31:d8:71:d7:8d:1e:31:65:40:85:1e:d4:64:be:aa:
         d4:52:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----