Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5815b874-63ea-46ad-80f9-5e2c731c2159/a6b1ad2e1163687ab65531fb19d741e42a5925c8.roa
File:                     a6b1ad2e1163687ab65531fb19d741e42a5925c8.roa (raw, json)
Hash identifier:          P8Z//tNMACKNSG4IkJ1059/V/ZU2BMoDd+KWPm07XQU=
Subject key identifier:   96:D4:B2:90:5F:16:32:C4:55:F9:FE:06:BF:9E:67:25:F2:B0:B8:18
Certificate issuer:       /CN=c6e2ae5210e2706096a35963c0712c39ac108d6e
Certificate serial:       0D6B1D
Authority key identifier: 00:7C:73:EB:3E:E2:AC:3E:4E:06:B1:6B:7C:34:CC:82:1C:EF:22:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e2ae5210e2706096a35963c0712c39ac108d6e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5815b874-63ea-46ad-80f9-5e2c731c2159/a6b1ad2e1163687ab65531fb19d741e42a5925c8.roa
Signing time:             Wed 24 Mar 2021 14:36:36 +0000
ROA not before:           Wed 24 Mar 2021 14:36:36 +0000
ROA not after:            Tue 24 Mar 2026 14:36:36 +0000
asID:                     52488
IP address blocks:        200.3.144.0/23 maxlen: 24
                          2801:190::/40 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879389 (0xd6b1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e2ae5210e2706096a35963c0712c39ac108d6e
        Validity
            Not Before: Mar 24 14:36:36 2021 GMT
            Not After : Mar 24 14:36:36 2026 GMT
        Subject: CN=a6b1ad2e1163687ab65531fb19d741e42a5925c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:23:74:01:d0:e7:04:d3:4c:b9:81:68:f6:
                    2a:ed:b4:15:e6:89:fc:a7:12:50:88:fe:f1:89:d9:
                    3f:43:99:19:3b:18:0b:8c:0d:97:1b:b7:4e:4d:c9:
                    8c:21:41:20:87:7d:69:e3:37:9c:01:49:7a:5c:04:
                    73:2b:2a:95:5b:7a:c7:2d:59:e3:9a:44:42:53:f6:
                    47:65:09:28:94:05:85:39:e0:28:d9:9b:d0:3b:62:
                    1d:98:02:70:33:89:5a:6a:aa:50:dd:55:c8:82:d9:
                    0d:70:6a:4a:5c:c7:00:81:f5:5a:16:18:a5:c1:2a:
                    ef:4c:e1:63:1c:73:5b:53:e5:9b:ab:ab:fa:4d:28:
                    72:c8:48:18:6a:69:ce:6e:69:1d:02:62:49:07:8a:
                    3b:3e:b5:1f:4e:d4:05:bb:1e:3b:f7:24:59:49:c6:
                    eb:c2:fa:48:aa:82:b6:f4:f1:a5:fd:89:66:36:ea:
                    78:26:4d:52:23:6c:a3:d6:63:61:41:09:b6:ca:0b:
                    1c:73:4c:4b:8a:04:43:99:30:d5:51:1a:a0:78:a8:
                    91:96:4f:85:c3:5d:b9:43:e7:ad:2c:82:c3:b0:87:
                    17:04:bd:5e:7e:a0:68:cc:2a:bd:28:85:f1:2e:87:
                    0c:fd:5b:5b:be:9a:74:0a:49:45:78:90:7a:77:3f:
                    74:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D4:B2:90:5F:16:32:C4:55:F9:FE:06:BF:9E:67:25:F2:B0:B8:18
            X509v3 Authority Key Identifier:
                keyid:00:7C:73:EB:3E:E2:AC:3E:4E:06:B1:6B:7C:34:CC:82:1C:EF:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e2ae5210e2706096a35963c0712c39ac108d6e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5815b874-63ea-46ad-80f9-5e2c731c2159/a6b1ad2e1163687ab65531fb19d741e42a5925c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5815b874-63ea-46ad-80f9-5e2c731c2159/c6e2ae5210e2706096a35963c0712c39ac108d6e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.144.0/23
                IPv6:
                  2801:190::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:d4:e1:5c:6a:b6:a8:69:62:45:32:92:14:2a:a8:9a:30:50:
         98:4a:95:64:8b:4a:37:ec:47:be:40:97:7c:f1:09:76:71:da:
         07:f6:89:b4:56:09:98:fd:9f:e8:fb:a4:68:fe:02:c9:1d:5b:
         92:8c:69:95:db:45:c3:a9:9d:58:d5:87:db:9f:e2:95:3d:ba:
         3f:7b:83:ed:a1:bd:25:8a:98:e7:45:8b:51:92:a5:6e:2b:5d:
         94:dd:f2:b2:c5:aa:f9:98:44:7e:ab:32:80:a0:b1:96:c2:e7:
         c0:23:6b:67:15:74:d2:16:6e:e3:3c:f6:a1:eb:41:71:68:59:
         a2:af:6c:19:68:3c:4d:c2:89:c5:c0:8f:66:37:09:8e:dd:09:
         46:44:a3:22:b2:44:d6:bb:d2:0e:df:6b:eb:f1:d0:66:b0:ad:
         17:a3:79:97:58:f5:12:92:bd:96:fe:40:26:5f:5d:a8:35:6a:
         1e:8d:29:96:e4:91:1b:9f:df:a9:eb:91:21:88:ea:f1:a4:06:
         8f:76:7a:c0:df:80:7f:22:cc:4b:1c:13:ec:3a:01:0a:92:5c:
         6b:34:44:6a:04:e0:65:93:35:9a:82:4d:c7:b6:17:bc:6c:17:
         b9:f0:ed:ff:54:1a:6c:7f:7e:96:24:c3:45:2b:47:96:98:ed:
         12:68:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----