Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/543e38d7-bd22-4290-ab4b-de3782447a1c/d612c3f68f40273456db32639d15494a78f90a45.roa
File:                     d612c3f68f40273456db32639d15494a78f90a45.roa (raw, json)
Hash identifier:          JS9ZGh8CW7Z9b+d2Xs7zfaQy+quPDst9RaDsQZH/w8A=
Subject key identifier:   52:BC:84:96:E5:46:F1:3B:D5:7D:E4:17:95:B8:96:B6:C8:BC:CF:B9
Certificate issuer:       /CN=df6777c83b4a4a37f042b28ecdd7c8deadefd729
Certificate serial:       039A5C
Authority key identifier: D1:46:18:6D:FD:86:FF:1E:39:B4:EA:7B:D0:8E:B1:C6:14:A3:D4:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df6777c83b4a4a37f042b28ecdd7c8deadefd729.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/543e38d7-bd22-4290-ab4b-de3782447a1c/d612c3f68f40273456db32639d15494a78f90a45.roa
Signing time:             Wed 24 Mar 2021 14:36:11 +0000
ROA not before:           Wed 24 Mar 2021 14:36:11 +0000
ROA not after:            Tue 24 Mar 2026 14:36:11 +0000
asID:                     27817
IP address blocks:        167.249.40.0/22 maxlen: 24
                          190.15.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236124 (0x39a5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6777c83b4a4a37f042b28ecdd7c8deadefd729
        Validity
            Not Before: Mar 24 14:36:11 2021 GMT
            Not After : Mar 24 14:36:11 2026 GMT
        Subject: CN=d612c3f68f40273456db32639d15494a78f90a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:44:b8:7f:8f:ab:d3:5b:03:2e:4d:28:39:
                    7a:6a:6f:c6:1e:13:29:34:c9:0a:d2:cb:72:cb:45:
                    0d:b5:a0:67:ac:47:94:4d:72:d2:d7:94:83:67:26:
                    9f:44:e4:d7:4b:60:ff:13:0f:79:a1:d1:4b:13:cf:
                    0a:49:72:be:54:63:f3:e1:68:7e:85:59:47:a4:1b:
                    f6:2a:7e:55:63:4a:bc:9e:6b:40:28:94:ef:67:bb:
                    e6:d8:c2:a5:3b:8e:f7:f2:c6:12:f7:65:7f:7c:e8:
                    81:53:5b:57:36:62:57:91:ea:05:7a:c2:12:da:d1:
                    fc:82:e5:2a:e6:11:a5:96:3c:c7:6b:ca:2b:f8:8d:
                    f1:1f:20:00:4e:1b:48:6e:13:6c:47:a6:ef:db:1b:
                    0f:04:e2:3b:ab:0b:06:d5:2e:7a:7e:29:cd:69:20:
                    56:e6:3d:27:2b:5b:ee:74:a2:a5:b8:ca:c4:aa:e3:
                    4d:11:df:7a:ac:27:8b:f1:81:ee:1f:55:9a:a3:b7:
                    3a:7d:e5:7c:b9:c5:41:37:c5:ab:f7:21:dd:07:75:
                    7f:14:1c:67:91:ec:a1:ba:95:41:29:0c:62:83:22:
                    83:93:6c:cd:0c:42:be:74:2b:31:a0:8e:9a:20:99:
                    02:ed:9a:22:3c:3b:39:73:72:19:e0:6e:cb:db:89:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BC:84:96:E5:46:F1:3B:D5:7D:E4:17:95:B8:96:B6:C8:BC:CF:B9
            X509v3 Authority Key Identifier:
                keyid:D1:46:18:6D:FD:86:FF:1E:39:B4:EA:7B:D0:8E:B1:C6:14:A3:D4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df6777c83b4a4a37f042b28ecdd7c8deadefd729.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/543e38d7-bd22-4290-ab4b-de3782447a1c/d612c3f68f40273456db32639d15494a78f90a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/543e38d7-bd22-4290-ab4b-de3782447a1c/df6777c83b4a4a37f042b28ecdd7c8deadefd729.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.40.0/22
                  190.15.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:06:e0:d9:45:bc:a6:17:25:70:a3:49:68:f5:f9:8a:4c:
         25:fc:5f:80:aa:b1:c9:bf:bc:20:09:72:b9:bb:0d:02:f4:ed:
         79:5f:1e:c1:30:a5:0a:14:52:96:26:b9:38:10:fa:04:6e:8d:
         98:29:59:43:74:d6:c9:4f:8d:bc:3f:6d:47:9b:5a:76:55:c1:
         fe:f3:f3:9b:07:31:3b:bc:2c:ec:0b:a3:d4:34:6a:15:88:f8:
         b7:d9:17:37:99:29:a9:f9:ad:06:6b:1b:3f:15:0d:cc:a2:d6:
         4f:7e:12:ee:6e:13:45:f0:95:36:ed:a7:ac:2c:13:35:99:82:
         0b:76:17:bc:94:c2:da:2f:88:b4:39:21:cd:6a:5a:8f:a3:0e:
         a0:f1:60:f6:15:b8:7f:c6:46:c6:28:15:47:aa:a7:83:a3:3e:
         33:db:3c:64:b7:0c:71:29:19:d4:86:35:7e:50:22:04:da:ef:
         2b:08:36:1b:8b:14:30:b5:ab:85:f2:1a:c7:a7:dd:54:41:74:
         68:a8:89:c0:26:8b:ec:4d:38:0a:14:95:26:50:36:fd:2f:6d:
         5e:74:9f:b1:a2:66:e2:54:ff:72:f2:c5:55:c7:52:31:b6:47:
         1d:77:44:b9:4c:6b:37:89:b7:96:ae:c0:38:e7:de:21:30:6a:
         c5:3a:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----