Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69ed6f5c-b899-49ff-8a94-095b893b7dc6/017ee07244c2bd75fe03dfaae94843a60858fc2d.roa
File:                     017ee07244c2bd75fe03dfaae94843a60858fc2d.roa (raw, json)
Hash identifier:          8rI0HZcBLIbyMWGWrO3Y4BZaVpapeCzzZb2DYOgD0oc=
Subject key identifier:   C6:AA:B6:2B:89:EA:CD:2F:21:B3:B2:BC:78:8A:DF:7B:51:C3:CE:2B
Certificate issuer:       /CN=8e43fff1c256eaadb6ff94c1dc866e122058a304
Certificate serial:       0CF879
Authority key identifier: 00:E9:9D:FE:A6:91:07:F8:42:8F:DB:5F:3D:ED:DB:CE:69:04:B9:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e43fff1c256eaadb6ff94c1dc866e122058a304.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69ed6f5c-b899-49ff-8a94-095b893b7dc6/017ee07244c2bd75fe03dfaae94843a60858fc2d.roa
Signing time:             Wed 24 Mar 2021 14:35:10 +0000
ROA not before:           Wed 24 Mar 2021 14:35:10 +0000
ROA not after:            Tue 24 Mar 2026 14:35:10 +0000
asID:                     27650
IP address blocks:        190.5.192.0/23 maxlen: 24
                          190.5.194.0/23 maxlen: 24
                          190.5.196.0/22 maxlen: 24
                          190.5.200.0/21 maxlen: 24
                          190.115.224.0/19 maxlen: 24
                          2803:fe00::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850041 (0xcf879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e43fff1c256eaadb6ff94c1dc866e122058a304
        Validity
            Not Before: Mar 24 14:35:10 2021 GMT
            Not After : Mar 24 14:35:10 2026 GMT
        Subject: CN=017ee07244c2bd75fe03dfaae94843a60858fc2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:de:64:84:44:f7:2c:ac:8a:c3:37:4e:81:
                    bf:20:5e:1c:a6:c1:16:cc:e6:7d:1a:d3:71:03:ae:
                    b7:fb:7b:6c:17:4b:af:f6:a6:c9:d9:22:ff:26:7a:
                    76:16:15:f1:75:3f:96:25:5b:ea:68:37:42:04:e8:
                    22:1f:27:98:f6:61:75:8a:a4:ff:5c:96:03:24:f5:
                    7d:60:8d:8b:e2:e1:01:11:97:43:2c:7d:0b:50:78:
                    fb:c4:5b:ae:3c:0a:5e:e4:fd:8b:c1:aa:08:eb:2d:
                    4e:a1:25:de:bb:d0:b1:d6:ab:1a:da:8e:24:22:62:
                    af:ee:d5:2c:21:e4:39:34:09:15:aa:be:c3:28:e0:
                    c0:73:be:c2:cb:27:54:01:ef:de:2b:1b:f8:d6:20:
                    3b:e9:9f:8b:ee:99:52:ba:85:b9:ee:e4:88:d9:43:
                    f1:69:19:dc:f0:4c:5e:97:09:5c:16:bf:ce:ad:be:
                    c2:3c:3f:24:8c:3b:74:b3:5b:8a:4b:b7:06:48:4a:
                    00:bb:f9:e9:ac:1d:ad:56:6e:1f:a9:30:c3:d8:47:
                    bc:af:75:a6:18:2d:f4:e8:bb:92:31:b1:60:f2:e6:
                    f1:19:ec:fb:9b:04:01:07:ee:af:17:1c:e5:e0:44:
                    d4:f5:ef:ec:5b:1c:58:43:2b:32:ec:5d:23:2c:f8:
                    a6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AA:B6:2B:89:EA:CD:2F:21:B3:B2:BC:78:8A:DF:7B:51:C3:CE:2B
            X509v3 Authority Key Identifier:
                keyid:00:E9:9D:FE:A6:91:07:F8:42:8F:DB:5F:3D:ED:DB:CE:69:04:B9:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e43fff1c256eaadb6ff94c1dc866e122058a304.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69ed6f5c-b899-49ff-8a94-095b893b7dc6/017ee07244c2bd75fe03dfaae94843a60858fc2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69ed6f5c-b899-49ff-8a94-095b893b7dc6/8e43fff1c256eaadb6ff94c1dc866e122058a304.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.192.0/20
                  190.115.224.0/19
                IPv6:
                  2803:fe00::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:d3:09:1a:ae:b7:ef:1a:68:66:73:87:a1:97:f1:05:c8:84:
         a9:83:9c:4f:ee:da:6a:15:e5:46:cb:c8:75:ec:80:69:5d:e7:
         7e:6b:5c:4c:04:72:8c:06:4a:df:19:91:ed:56:c7:d2:df:48:
         9b:f9:f8:28:c9:e7:88:a1:50:6f:83:e8:e9:ea:d4:67:7a:6d:
         60:b5:9e:87:f6:58:a8:96:0e:25:9e:4a:8b:15:ac:85:e0:cb:
         6d:03:30:35:00:a3:52:63:37:64:eb:1f:2d:b4:8e:e5:52:6e:
         bf:35:6d:20:25:78:2c:c8:dd:7e:18:83:21:dc:1c:ef:55:5c:
         52:04:8f:25:f3:72:68:e2:98:56:8d:0d:0b:25:df:fc:a7:33:
         51:59:6f:9d:95:29:ce:c9:39:db:97:84:4f:be:dc:43:78:ba:
         ca:7f:15:18:e9:ae:89:52:46:f4:87:4e:3c:42:4a:1b:60:c6:
         41:46:d9:5d:33:ec:94:03:2e:8a:0e:d0:f3:d0:28:ac:c7:b1:
         3d:ca:e0:01:c7:80:7b:6b:15:6f:d9:55:f8:8f:0b:8b:9e:1a:
         99:7f:03:ba:53:58:0f:87:1a:8a:d8:a0:0e:b2:d1:91:62:dd:
         30:79:3a:a9:78:c9:39:20:0e:7a:b7:ae:fc:b6:53:14:44:19:
         5d:b9:9a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----