Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/566a23ea-27cb-443a-9dcc-19ebf3aac68c/e39f0bd5a15630dbaba9dd2b4abfd1916d9ef066.roa
File:                     e39f0bd5a15630dbaba9dd2b4abfd1916d9ef066.roa (raw, json)
Hash identifier:          zkWNKAabPs5Hkif1JAbwDlIKAjk/Uk2XXk6hb+QcKMI=
Subject key identifier:   51:68:48:48:BE:4D:0B:00:9A:A5:AE:DD:27:72:47:66:3B:15:22:1F
Certificate issuer:       /CN=d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f
Certificate serial:       0F12CF
Authority key identifier: 65:CA:6C:4F:D1:55:D0:04:51:3F:3A:E8:82:DE:75:E0:C6:6C:34:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/566a23ea-27cb-443a-9dcc-19ebf3aac68c/e39f0bd5a15630dbaba9dd2b4abfd1916d9ef066.roa
Signing time:             Tue 19 Apr 2022 22:21:55 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27708
IP address blocks:        190.151.176.0/20 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987855 (0xf12cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=e39f0bd5a15630dbaba9dd2b4abfd1916d9ef066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c2:62:17:a5:fa:02:1e:86:0c:15:4e:02:80:
                    ea:1c:23:a9:d5:de:e9:62:a4:d4:ee:f9:90:a9:99:
                    cb:79:ac:40:42:1d:e1:7c:62:16:1a:46:77:d2:c7:
                    48:a3:94:e9:8c:01:15:02:ad:3b:24:7a:fd:1c:70:
                    9f:ae:aa:44:35:75:9a:3f:9d:43:fd:18:35:d2:a2:
                    b6:87:69:a9:48:03:51:fc:3d:16:1b:96:c7:f7:23:
                    a4:0b:07:fe:58:38:a1:8a:8a:38:5b:a6:41:f1:7d:
                    0d:52:7e:a1:66:69:05:2f:ef:31:f4:03:ae:79:36:
                    81:c7:f4:4d:09:e3:cc:90:69:22:53:0b:57:32:a8:
                    e5:17:7b:f0:0e:73:9f:0e:55:a7:9b:3d:4c:ad:50:
                    65:f0:6b:c8:60:d3:f1:38:a3:78:10:a3:4f:03:e2:
                    26:12:0c:61:dc:51:07:29:9d:4a:21:b3:fe:11:ef:
                    08:27:79:2b:80:76:dd:0e:f7:ea:ea:4f:7c:75:6d:
                    85:5f:3d:4e:8a:f3:30:b5:c7:c8:04:66:92:4a:48:
                    81:d7:f8:e4:b7:66:7d:e4:e5:e3:5c:be:c6:65:69:
                    94:39:78:ca:1e:29:57:65:ef:86:b2:f2:8f:c3:85:
                    44:8b:96:83:36:df:15:31:5a:ba:00:e0:80:dd:67:
                    ea:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:68:48:48:BE:4D:0B:00:9A:A5:AE:DD:27:72:47:66:3B:15:22:1F
            X509v3 Authority Key Identifier:
                keyid:65:CA:6C:4F:D1:55:D0:04:51:3F:3A:E8:82:DE:75:E0:C6:6C:34:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/566a23ea-27cb-443a-9dcc-19ebf3aac68c/e39f0bd5a15630dbaba9dd2b4abfd1916d9ef066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/566a23ea-27cb-443a-9dcc-19ebf3aac68c/d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:21:64:dc:c9:f8:c3:1a:6d:7b:3a:85:82:f4:8e:dc:5b:2b:
         ad:67:ec:08:cd:bf:ef:3a:5c:df:ed:b2:99:41:c5:c4:97:5d:
         d4:17:5c:1b:fe:26:7e:0f:b7:d1:d2:82:95:52:2c:db:78:cc:
         b8:52:4e:6c:d3:1e:44:ae:f9:05:28:cb:ad:53:19:af:3d:f3:
         50:d1:85:b2:65:69:30:47:33:89:64:28:b5:60:81:cb:02:43:
         2c:cf:58:2a:3d:b0:3d:3f:26:50:bf:e4:52:3d:02:86:71:b6:
         ef:86:1d:74:e5:49:0e:17:2b:f4:63:ea:6e:6a:75:d9:2f:20:
         55:17:b3:01:78:af:f2:f9:66:9d:c3:c3:31:07:d3:62:bc:14:
         52:7e:0e:b7:7f:0a:1a:76:2e:99:fc:3c:dd:7d:65:ef:cf:ff:
         c9:26:88:98:02:e5:75:82:66:b2:12:47:9d:6f:bc:9a:e7:74:
         a3:c2:c7:de:55:30:a4:8b:fd:0f:8c:0a:47:cf:ed:fe:6a:f1:
         b3:45:16:24:b3:f8:5e:38:ac:4d:b0:5d:c5:ae:54:bf:24:ac:
         c8:a0:e4:7c:12:70:d6:8e:c9:f0:36:44:4a:0e:b0:5a:9d:a2:
         f6:b0:c1:4e:96:66:ca:ff:d1:39:2f:50:ae:5e:5b:fe:10:07:
         25:0f:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----