Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50290e9b-49dc-4760-9d13-189cdcb58e66/2140e3b44430e0d26a76ba7e711f6b183c79ab3f.roa
File:                     2140e3b44430e0d26a76ba7e711f6b183c79ab3f.roa (raw, json)
Hash identifier:          DpCVHjNTrrNSSkmnvJVsbTZvo0ZfO/2S7B8XygDbWx4=
Subject key identifier:   B8:7E:49:D4:FC:24:24:A2:92:97:B5:D5:A9:25:E9:3B:31:55:DA:41
Certificate issuer:       /CN=5d3cf2f8cfb3657f866677511306c8536579ab5a
Certificate serial:       0D7029
Authority key identifier: 7E:77:46:78:0A:D0:AC:23:5A:5F:79:ED:E4:F4:C9:AB:40:96:FB:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3cf2f8cfb3657f866677511306c8536579ab5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50290e9b-49dc-4760-9d13-189cdcb58e66/2140e3b44430e0d26a76ba7e711f6b183c79ab3f.roa
Signing time:             Wed 24 Mar 2021 14:31:28 +0000
ROA not before:           Wed 24 Mar 2021 14:31:28 +0000
ROA not after:            Tue 24 Mar 2026 14:31:28 +0000
asID:                     262174
IP address blocks:        179.0.0.0/23 maxlen: 23
                          200.61.254.0/23 maxlen: 23
                          207.248.76.0/23 maxlen: 23
                          2801:0:160::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880681 (0xd7029)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d3cf2f8cfb3657f866677511306c8536579ab5a
        Validity
            Not Before: Mar 24 14:31:28 2021 GMT
            Not After : Mar 24 14:31:28 2026 GMT
        Subject: CN=2140e3b44430e0d26a76ba7e711f6b183c79ab3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:48:86:07:73:1b:f0:c5:bc:33:49:c9:1e:
                    59:d0:f6:d2:72:de:ac:14:3c:a0:b0:e6:cf:2a:8d:
                    6b:7c:dc:e4:de:10:14:80:17:8d:aa:07:cc:36:eb:
                    5d:a2:2d:6b:58:cb:87:88:01:a2:91:81:b9:9c:e1:
                    a8:fb:38:3f:cd:40:f5:9a:6e:9b:e7:ac:33:18:95:
                    43:7b:4d:4a:d4:fb:69:64:5c:c7:54:09:11:a3:07:
                    c7:fe:59:aa:b5:c8:da:c8:0d:e9:5d:9b:1f:e0:ba:
                    5b:22:a2:ce:37:9b:30:56:8f:83:4e:3b:34:04:37:
                    a2:13:b6:7c:6c:7c:c9:c5:d3:28:a2:1c:5c:a1:18:
                    84:f8:c6:27:42:f8:77:fe:d9:7b:e3:0c:1a:2f:e1:
                    13:ed:24:0a:c9:70:2e:cc:ac:1a:1f:12:77:7a:89:
                    e5:60:1e:a1:3c:99:86:1f:44:f0:49:d9:21:4e:a1:
                    2b:44:19:88:74:12:fd:55:2c:53:8b:52:8e:6a:62:
                    4f:7c:fb:45:75:92:2a:bb:fe:43:84:69:a8:45:c9:
                    3a:9a:ad:df:3f:c6:56:7f:32:31:78:b6:98:c1:cb:
                    33:c2:eb:42:9a:81:b1:d7:c3:7a:29:8a:ad:c4:30:
                    bb:41:da:d2:b7:d0:d8:f4:9b:df:1c:9c:8a:94:b6:
                    98:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7E:49:D4:FC:24:24:A2:92:97:B5:D5:A9:25:E9:3B:31:55:DA:41
            X509v3 Authority Key Identifier:
                keyid:7E:77:46:78:0A:D0:AC:23:5A:5F:79:ED:E4:F4:C9:AB:40:96:FB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3cf2f8cfb3657f866677511306c8536579ab5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50290e9b-49dc-4760-9d13-189cdcb58e66/2140e3b44430e0d26a76ba7e711f6b183c79ab3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50290e9b-49dc-4760-9d13-189cdcb58e66/5d3cf2f8cfb3657f866677511306c8536579ab5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.0.0/23
                  200.61.254.0/23
                  207.248.76.0/23
                IPv6:
                  2801:0:160::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:36:81:3e:e6:d9:fd:f3:fd:3e:19:ac:af:51:43:ec:ab:5a:
         57:7f:0d:8f:a9:15:e4:be:c6:f0:44:e9:0f:7a:e3:94:bb:03:
         20:dd:c8:4b:30:20:ca:be:68:68:d9:d9:45:e1:20:4d:af:af:
         cf:e7:06:4b:09:b5:4d:4c:1e:39:7c:f2:0d:4d:36:83:28:b8:
         c6:c5:16:dc:5f:bf:36:4a:24:71:37:c1:55:5f:6f:b3:3f:3e:
         30:c7:72:d8:d8:58:44:f3:95:66:af:49:2a:2a:08:e4:ab:f1:
         d5:83:05:40:31:78:96:6f:23:f8:21:fa:1b:15:8a:5c:57:dc:
         2f:6e:32:49:4e:01:94:33:d8:6e:5f:2b:44:91:3d:66:0f:de:
         08:58:83:e8:ff:3e:ca:8c:3c:96:74:27:e7:cc:6a:ae:bc:38:
         ed:25:7e:a5:29:53:ea:fd:67:04:46:8b:4b:d1:de:84:6d:6b:
         49:2b:f3:88:b9:c9:35:40:00:49:0e:58:e2:11:79:0c:b7:c3:
         bf:80:f2:0f:e5:aa:58:8a:58:4b:4f:db:da:c6:6c:88:8a:bb:
         34:45:c0:22:d4:84:6c:83:50:2e:85:79:78:35:e9:44:cc:5c:
         e1:b7:af:c3:e0:33:01:ea:12:dd:42:79:c3:7a:f0:14:5c:99:
         27:3f:cb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----