Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b754424-a379-4653-a764-a232cd80bd2b/59a7192cb37d18c6212ff4b26efd7cf967d3eb1c.roa
File:                     59a7192cb37d18c6212ff4b26efd7cf967d3eb1c.roa (raw, json)
Hash identifier:          2OtnsKpSnMqTju52C6A3STGKDZ7n6J2ESYjOpjzy2X4=
Subject key identifier:   51:76:67:CF:01:8F:DB:3F:CE:16:30:F1:E1:83:E8:E7:B4:EC:51:D7
Certificate issuer:       /CN=07f5706186903b292b8510d789cdfaf1f978ac03
Certificate serial:       015892
Authority key identifier: 32:B9:37:6F:8C:A2:64:9E:B5:F0:6A:6E:AD:66:17:64:C0:03:FB:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07f5706186903b292b8510d789cdfaf1f978ac03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b754424-a379-4653-a764-a232cd80bd2b/59a7192cb37d18c6212ff4b26efd7cf967d3eb1c.roa
Signing time:             Wed 24 Mar 2021 14:43:11 +0000
ROA not before:           Wed 24 Mar 2021 14:43:11 +0000
ROA not after:            Tue 24 Mar 2026 14:43:11 +0000
asID:                     270126
IP address blocks:        190.171.68.0/22 maxlen: 24
                          2806:3cf::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88210 (0x15892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f5706186903b292b8510d789cdfaf1f978ac03
        Validity
            Not Before: Mar 24 14:43:11 2021 GMT
            Not After : Mar 24 14:43:11 2026 GMT
        Subject: CN=59a7192cb37d18c6212ff4b26efd7cf967d3eb1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:b6:29:4a:ac:9d:17:c8:24:f7:a9:11:97:
                    7c:2f:31:ce:af:13:0d:79:47:e6:52:f8:9a:31:5d:
                    39:fc:43:d2:19:02:4f:68:01:7b:4e:f0:5c:af:25:
                    2f:b5:15:9d:84:82:e3:3a:a5:1c:e2:d6:80:8c:4a:
                    3d:7d:c0:33:46:0e:42:0b:1e:fc:64:7a:42:b2:df:
                    53:b4:c7:a9:08:de:01:22:ae:51:23:2a:df:6a:d5:
                    4b:c9:10:79:4e:a9:ec:80:fa:a5:45:ae:11:5f:fd:
                    03:f5:13:f8:2f:69:3b:f3:c4:7b:76:a5:78:07:18:
                    84:ce:5c:ab:cc:be:10:23:61:fb:b5:09:0a:8a:43:
                    a2:a0:80:e9:db:cd:5c:0f:da:b3:8a:f6:f0:1e:6f:
                    fd:29:8b:d3:d5:31:cb:72:84:2f:e6:e3:c4:34:39:
                    aa:20:38:5f:ac:e4:d6:9f:8e:8f:0b:d0:37:a2:e8:
                    85:1e:e1:c0:74:0e:fb:e7:b4:63:f9:d7:c5:8a:b5:
                    bc:6f:a6:6b:04:61:31:9d:4f:87:75:78:3d:70:7c:
                    45:bb:24:8e:b0:04:f0:b5:c3:8e:7b:7c:72:cb:71:
                    7a:77:61:b5:00:72:ef:03:95:6b:32:62:a2:78:4f:
                    76:39:01:37:52:af:cd:e1:c0:bd:1d:4f:59:23:d4:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:76:67:CF:01:8F:DB:3F:CE:16:30:F1:E1:83:E8:E7:B4:EC:51:D7
            X509v3 Authority Key Identifier:
                keyid:32:B9:37:6F:8C:A2:64:9E:B5:F0:6A:6E:AD:66:17:64:C0:03:FB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07f5706186903b292b8510d789cdfaf1f978ac03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b754424-a379-4653-a764-a232cd80bd2b/59a7192cb37d18c6212ff4b26efd7cf967d3eb1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b754424-a379-4653-a764-a232cd80bd2b/07f5706186903b292b8510d789cdfaf1f978ac03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.68.0/22
                IPv6:
                  2806:3cf::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:00:4d:b3:00:ba:d5:68:1f:24:b1:ae:a5:b7:3f:b0:98:76:
         6e:3b:ff:b1:99:f2:1c:bd:a2:37:1d:ff:d8:05:eb:ab:4d:f6:
         54:c8:03:60:a5:36:9f:40:3d:6c:0f:9a:ac:e7:68:b5:b1:e4:
         53:b1:82:38:d9:e0:7b:1e:f3:70:3d:20:a1:b7:bf:f9:3c:b9:
         7b:34:18:59:e7:da:c4:80:9e:5d:7c:22:6d:3e:3f:6b:c2:db:
         ce:b8:1d:ae:57:20:e9:8a:0d:80:8f:1e:4b:3f:54:8d:7a:2a:
         65:a6:51:03:ca:79:7a:d9:f8:1a:c7:2b:51:8d:f5:94:73:6c:
         16:79:32:d6:bf:e7:96:bd:35:ab:bb:b1:c3:1f:1a:e1:bb:6c:
         ad:b6:e0:fa:a1:ad:4f:e9:34:33:9d:46:97:80:d3:09:fe:fe:
         f1:7a:1c:c7:c7:3d:37:0b:b8:48:26:39:8a:6e:58:51:7c:59:
         07:06:55:53:19:30:da:21:33:f9:b5:90:65:3e:2a:f5:72:eb:
         50:86:81:01:6e:11:9e:5b:fd:85:77:83:8c:bb:f2:8f:f9:3d:
         57:3b:6d:87:db:7a:11:5c:5a:d2:08:5e:01:d7:64:2f:89:5c:
         0f:f0:30:39:7e:48:c8:26:c6:38:3c:ce:89:76:33:c4:0f:9c:
         7d:97:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----