Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d04948d-abb7-48ef-9c03-606768ae1c88/0dda031692def1904f19deb935e78584e86f6ebb.roa
File:                     0dda031692def1904f19deb935e78584e86f6ebb.roa (raw, json)
Hash identifier:          6GkPHmMC7BDyP/bMUmgRr7v1HhlibBF2/Ib2oNrS0qc=
Subject key identifier:   5B:AD:75:28:C1:69:CE:32:70:AC:D1:E9:E1:95:0B:29:63:35:66:4D
Certificate issuer:       /CN=048de645b373fe5a6a9e19ce0fa720fb3755f233
Certificate serial:       0C96C6
Authority key identifier: CE:25:A8:DC:73:3C:54:7D:33:E2:B4:22:DB:B6:8B:78:26:A5:B9:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048de645b373fe5a6a9e19ce0fa720fb3755f233.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d04948d-abb7-48ef-9c03-606768ae1c88/0dda031692def1904f19deb935e78584e86f6ebb.roa
Signing time:             Wed 24 Mar 2021 14:36:34 +0000
ROA not before:           Wed 24 Mar 2021 14:36:34 +0000
ROA not after:            Tue 24 Mar 2026 14:36:34 +0000
asID:                     266869
IP address blocks:        192.68.185.0/24 maxlen: 24
                          2801:14:f000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825030 (0xc96c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048de645b373fe5a6a9e19ce0fa720fb3755f233
        Validity
            Not Before: Mar 24 14:36:34 2021 GMT
            Not After : Mar 24 14:36:34 2026 GMT
        Subject: CN=0dda031692def1904f19deb935e78584e86f6ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:84:73:94:d3:60:5e:ec:c5:0d:5d:4d:b6:
                    b9:8e:b3:0c:7a:f3:cd:c8:e1:12:d9:88:d5:f1:eb:
                    fd:05:82:c6:18:ef:f5:41:36:66:07:e5:f2:04:cf:
                    a8:12:21:f2:da:f2:95:5e:cc:dc:67:6b:2a:53:32:
                    ff:67:1f:50:44:c9:3e:0e:b1:6f:43:1b:42:7b:1b:
                    d2:09:55:b9:db:2c:a7:27:ed:49:cc:ed:e0:76:08:
                    09:b8:03:25:68:ce:a4:0f:4a:35:2d:4a:a3:09:8d:
                    b7:87:34:c0:ff:08:eb:ed:89:bc:66:5c:73:b4:30:
                    4d:e1:66:50:dc:ea:c1:e9:ef:b9:11:37:8e:9f:c4:
                    e6:59:8a:9b:b0:a2:81:b0:82:5f:ab:c2:89:3a:52:
                    e6:80:d0:c0:d1:7e:29:4a:03:f7:25:ab:db:43:26:
                    19:3f:6b:00:a6:8c:1a:a7:44:19:4f:53:57:d4:f4:
                    05:46:78:21:7c:0c:fe:02:b2:da:22:0a:76:56:c1:
                    33:8f:81:d2:f5:49:14:52:6d:38:ec:f6:4f:70:6a:
                    cc:82:58:41:6d:86:fb:1d:1f:57:d2:49:d7:ca:a8:
                    d2:e0:1a:a0:89:35:12:e5:47:91:4d:a1:3d:c8:11:
                    4f:ff:cc:76:9c:0d:be:ad:80:03:83:65:5a:14:da:
                    35:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AD:75:28:C1:69:CE:32:70:AC:D1:E9:E1:95:0B:29:63:35:66:4D
            X509v3 Authority Key Identifier:
                keyid:CE:25:A8:DC:73:3C:54:7D:33:E2:B4:22:DB:B6:8B:78:26:A5:B9:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048de645b373fe5a6a9e19ce0fa720fb3755f233.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d04948d-abb7-48ef-9c03-606768ae1c88/0dda031692def1904f19deb935e78584e86f6ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d04948d-abb7-48ef-9c03-606768ae1c88/048de645b373fe5a6a9e19ce0fa720fb3755f233.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.185.0/24
                IPv6:
                  2801:14:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:42:87:bc:f7:16:be:4e:74:ba:15:29:ec:d2:36:ba:de:0d:
         5e:11:4e:8f:19:58:99:c6:e6:74:c4:a0:f1:3c:92:13:1f:8d:
         45:d0:70:94:fa:07:bc:43:03:4d:69:06:a0:06:ea:d4:e1:83:
         d4:2b:b9:1e:bc:db:29:f9:f9:10:00:98:79:28:c1:f4:18:53:
         8b:a5:60:4a:97:6c:2a:f9:29:e8:df:5e:a2:72:71:af:7a:61:
         e9:b8:ba:cc:ba:31:82:78:93:94:3f:8c:d1:e0:e4:da:4b:61:
         f9:56:dd:f8:8b:85:e6:9d:1f:8f:08:6e:79:c6:79:11:60:10:
         eb:4d:26:56:fa:c3:f2:3b:4e:cd:f8:73:3f:2c:98:5e:b6:e5:
         98:56:d7:b8:08:bb:e6:32:aa:a9:1e:d8:bc:6c:59:49:68:bc:
         42:f0:14:ba:54:cf:f4:24:10:69:4f:14:d4:24:73:17:cd:e5:
         12:fc:ef:f2:f5:e4:17:d7:27:6b:b0:0a:e1:65:6c:9f:94:30:
         60:86:e6:f4:18:99:88:9d:64:74:60:49:92:7b:c8:14:1e:90:
         28:73:bd:f3:38:b0:a5:8e:7d:c7:e3:1a:18:4a:76:f8:f3:98:
         34:48:8b:3c:7a:b8:01:d6:2b:21:37:2f:ad:1f:94:ab:86:f5:
         d8:c9:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----