Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d0fdb62-8757-451a-8c05-761a650e2cc0/49613a5930f3c166b9a3dac24a914960635d42cb.roa
File:                     49613a5930f3c166b9a3dac24a914960635d42cb.roa (raw, json)
Hash identifier:          +Yu5lGUJ9DcWmxrfjcAfFTtpUao62k6T1YsJoIoDmPg=
Subject key identifier:   C9:3A:88:5B:65:3E:70:68:60:CF:D2:9B:75:F5:AA:3F:96:9E:8F:D1
Certificate issuer:       /CN=df3ed304f279cd1a26f829d0aaec961d5ab9b301
Certificate serial:       099E4E
Authority key identifier: 4E:42:72:4D:DC:80:C9:B9:03:F1:F5:B1:E2:F8:96:90:D4:C7:D7:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df3ed304f279cd1a26f829d0aaec961d5ab9b301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d0fdb62-8757-451a-8c05-761a650e2cc0/49613a5930f3c166b9a3dac24a914960635d42cb.roa
Signing time:             Wed 24 Mar 2021 14:36:30 +0000
ROA not before:           Wed 24 Mar 2021 14:36:30 +0000
ROA not after:            Tue 24 Mar 2026 14:36:30 +0000
asID:                     3603
IP address blocks:        157.253.0.0/16 maxlen: 24
                          2800:2d0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630350 (0x99e4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df3ed304f279cd1a26f829d0aaec961d5ab9b301
        Validity
            Not Before: Mar 24 14:36:30 2021 GMT
            Not After : Mar 24 14:36:30 2026 GMT
        Subject: CN=49613a5930f3c166b9a3dac24a914960635d42cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d9:7b:ad:18:9e:49:f0:40:45:de:b5:d1:bc:
                    30:5d:33:e5:71:8f:13:b3:da:d8:63:a3:23:fb:26:
                    ba:72:3c:1f:c3:54:64:0b:9e:79:c1:80:53:11:37:
                    0f:26:bf:37:61:42:a0:76:33:7c:bf:a8:ae:81:14:
                    18:86:a6:9f:ec:3f:a7:d9:a8:b5:60:38:20:ba:d2:
                    d7:c4:33:0b:89:b9:02:ef:b6:2e:3c:af:b8:0a:2f:
                    a2:3c:39:a8:2d:5e:f8:0b:9b:36:43:f9:0d:d9:ae:
                    ed:72:f6:0c:47:06:9b:c2:5d:a6:9d:be:03:da:77:
                    5d:09:36:54:8c:4a:49:e9:28:a9:25:61:15:88:e2:
                    3a:61:39:04:c8:b2:2d:9c:f9:18:9a:e7:0d:52:a0:
                    f7:fa:ba:e8:9e:4e:92:f1:3d:df:1b:df:c8:7f:c4:
                    e0:09:35:97:e5:5f:8f:90:79:b4:a7:42:99:cb:93:
                    1c:f2:e1:fc:35:3e:fa:86:cf:30:f0:dd:84:6e:de:
                    ca:26:6c:16:e6:30:2a:00:49:b9:7c:bf:79:e6:55:
                    72:f1:b5:90:bc:b6:84:0f:dd:90:8d:1b:e4:51:93:
                    75:f8:65:f9:5f:d7:c1:a3:0a:23:3b:76:c7:fd:d9:
                    47:25:42:b5:9d:93:82:c1:f1:15:17:64:d3:07:b5:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3A:88:5B:65:3E:70:68:60:CF:D2:9B:75:F5:AA:3F:96:9E:8F:D1
            X509v3 Authority Key Identifier:
                keyid:4E:42:72:4D:DC:80:C9:B9:03:F1:F5:B1:E2:F8:96:90:D4:C7:D7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df3ed304f279cd1a26f829d0aaec961d5ab9b301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d0fdb62-8757-451a-8c05-761a650e2cc0/49613a5930f3c166b9a3dac24a914960635d42cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d0fdb62-8757-451a-8c05-761a650e2cc0/df3ed304f279cd1a26f829d0aaec961d5ab9b301.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.253.0.0/16
                IPv6:
                  2800:2d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:eb:06:77:6f:68:3a:2a:74:ce:95:b4:97:ad:f9:a9:87:cf:
         88:60:de:b6:8e:38:5b:a3:71:99:27:d9:4c:ac:5d:52:35:ec:
         a7:eb:f6:d4:d9:d2:53:52:81:23:8c:64:56:ab:5c:36:32:41:
         3e:05:d4:c1:6f:a8:53:fb:db:34:54:f3:03:1c:f1:ec:0e:9e:
         54:24:b7:da:19:26:64:85:a8:13:13:96:9b:bd:34:63:2f:c2:
         02:84:5f:aa:62:eb:95:29:b0:c3:bd:49:b2:36:7e:72:89:43:
         99:5f:93:0b:2e:91:69:35:9f:03:5d:b2:61:a0:30:b1:a8:13:
         3b:c5:83:41:bd:fe:eb:0a:1e:5c:32:fa:a7:7b:5c:f6:83:c0:
         f0:3b:c7:84:0f:51:c5:3d:ab:2d:ac:d0:a9:08:fb:33:a0:58:
         71:b7:42:a8:38:0c:a0:3b:26:96:87:52:ba:f5:f2:1f:89:c5:
         e0:f7:91:32:e3:2f:b8:9b:44:e8:b1:80:ce:9c:98:d4:d6:f9:
         78:34:78:29:b6:e9:d8:88:ad:a4:39:33:50:ea:37:c9:89:cf:
         0f:29:b3:10:5f:44:df:60:ed:30:b9:ad:40:1c:5f:48:fe:4c:
         6b:0c:c1:12:29:d9:e9:7d:85:95:ca:33:d9:ec:07:84:08:6f:
         a3:6f:0b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----