Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49930b94-1f5d-44a7-a04d-5cc014b2e05b/4bc91c0c5a1e1dfe7780f61e72dbab66306c7ddc.roa
File:                     4bc91c0c5a1e1dfe7780f61e72dbab66306c7ddc.roa (raw, json)
Hash identifier:          sCMYNcbSkFlbE2mlF9w39LgXA+OrFzIg6oJde1qKb+c=
Subject key identifier:   C5:8B:AA:2C:B7:5A:AA:A5:DE:3E:A4:89:DE:36:CD:60:30:D2:20:51
Certificate issuer:       /CN=c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf
Certificate serial:       06F08A
Authority key identifier: 8A:04:13:E4:CA:41:9E:4C:EC:96:9D:21:C4:54:54:44:49:87:C4:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49930b94-1f5d-44a7-a04d-5cc014b2e05b/4bc91c0c5a1e1dfe7780f61e72dbab66306c7ddc.roa
Signing time:             Wed 24 Mar 2021 14:34:24 +0000
ROA not before:           Wed 24 Mar 2021 14:34:24 +0000
ROA not after:            Tue 24 Mar 2026 14:34:24 +0000
asID:                     264827
IP address blocks:        187.102.192.0/22 maxlen: 24
                          2803:79e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454794 (0x6f08a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf
        Validity
            Not Before: Mar 24 14:34:24 2021 GMT
            Not After : Mar 24 14:34:24 2026 GMT
        Subject: CN=4bc91c0c5a1e1dfe7780f61e72dbab66306c7ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:c9:85:ea:de:47:2e:15:95:87:65:b1:75:
                    2c:50:83:79:11:60:00:dd:c5:c5:c3:71:d0:32:64:
                    89:0c:6b:04:33:87:2f:b6:21:39:cd:2e:f9:9a:b7:
                    18:04:49:0b:a3:61:32:2d:56:e6:49:d6:fb:9a:9e:
                    4e:e0:c2:0e:54:36:3e:82:46:41:b5:8e:1f:fb:ec:
                    b8:b0:ff:ee:a6:c9:33:1f:11:23:e7:0f:58:1d:24:
                    0e:27:36:2b:83:bd:e5:1d:5e:0c:be:d8:05:2f:a9:
                    5c:88:9f:a0:af:6b:09:1a:84:b5:f6:fc:f7:a9:da:
                    19:23:b1:3d:d7:a2:42:9c:e5:c2:d9:fc:43:53:50:
                    61:a3:67:a6:82:c5:f1:7e:3a:43:36:8c:59:99:90:
                    b7:1a:a1:5a:f7:30:57:66:b4:34:f2:49:b1:d1:80:
                    9a:86:5c:c2:7d:51:28:8c:02:1a:59:af:c5:7b:79:
                    f2:1b:48:1a:3e:6a:13:13:8c:b0:13:06:2b:45:f7:
                    db:10:34:38:a8:52:46:4a:0e:bd:86:b4:1b:4d:a7:
                    00:64:f6:dd:d3:15:2c:f9:97:d4:ad:67:b7:a8:36:
                    bd:05:ff:f5:5d:18:fb:72:7f:62:c3:c2:b7:df:4e:
                    73:fd:9d:41:34:cd:e3:67:3f:34:cc:d2:c7:2e:85:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8B:AA:2C:B7:5A:AA:A5:DE:3E:A4:89:DE:36:CD:60:30:D2:20:51
            X509v3 Authority Key Identifier:
                keyid:8A:04:13:E4:CA:41:9E:4C:EC:96:9D:21:C4:54:54:44:49:87:C4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49930b94-1f5d-44a7-a04d-5cc014b2e05b/4bc91c0c5a1e1dfe7780f61e72dbab66306c7ddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49930b94-1f5d-44a7-a04d-5cc014b2e05b/c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.192.0/22
                IPv6:
                  2803:79e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:1f:19:b6:08:8f:73:0a:2e:3e:18:79:2c:4f:3f:f1:51:0b:
         66:dc:55:0b:05:c6:94:fd:7d:a6:00:f1:fd:f4:ec:68:94:fd:
         84:c4:b9:25:e9:13:8f:52:90:40:a3:27:30:db:a3:06:0c:d1:
         93:b0:cc:49:fe:ae:cf:f4:df:4c:84:96:31:da:fb:9e:ca:15:
         9e:60:6a:b9:c7:3c:b8:29:b1:9e:cc:85:95:28:0e:8a:0f:56:
         2f:43:08:6d:df:ae:37:80:ec:bd:3b:3f:7f:2f:68:31:95:f3:
         20:93:41:04:49:e2:4e:67:9b:ca:81:cf:18:0c:b3:88:af:39:
         de:0f:62:e6:b3:41:fb:4c:e5:18:94:ce:69:b3:93:5d:97:9a:
         d9:d9:7b:84:6b:74:c8:2d:7c:6d:e9:0c:e3:55:a6:82:51:88:
         bd:4c:09:dc:b9:4c:80:c6:19:ea:ae:7b:2f:1f:78:5a:1b:cd:
         b7:c7:a4:f5:e9:59:65:5a:9b:54:da:c8:2b:98:09:56:6a:e3:
         44:23:f3:05:13:8a:d8:59:df:a5:42:37:f8:17:63:90:2a:55:
         51:92:33:7b:68:dd:ee:3a:3b:3c:01:8f:54:18:2c:1c:01:5d:
         88:df:9e:a1:70:94:56:bd:86:d1:fb:33:01:77:79:fb:10:2c:
         7f:77:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----