Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/c62ce89ac47f0abf8c9c27674cca86d5ff181569.roa
File:                     c62ce89ac47f0abf8c9c27674cca86d5ff181569.roa (raw, json)
Hash identifier:          eTEQRkjvZcrczBUClagjPfQpTtdeXZHAnwn5rZaAyzk=
Subject key identifier:   EE:51:76:8D:B6:A6:1E:3B:65:7E:47:D4:82:B8:2C:E6:E3:C0:0E:FB
Certificate issuer:       /CN=c1b10fed8d73bc6fca227c206b112f9a09361b3e
Certificate serial:       0DD924
Authority key identifier: DA:3C:C7:79:11:12:49:F0:4D:43:52:CB:60:BC:23:A4:4B:9F:76:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b10fed8d73bc6fca227c206b112f9a09361b3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/c62ce89ac47f0abf8c9c27674cca86d5ff181569.roa
Signing time:             Wed 24 Mar 2021 14:39:00 +0000
ROA not before:           Wed 24 Mar 2021 14:39:00 +0000
ROA not after:            Tue 24 Mar 2026 14:39:00 +0000
asID:                     19582
IP address blocks:        179.0.204.0/24 maxlen: 24
                          200.0.63.0/24 maxlen: 24
                          2801:0:4d0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907556 (0xdd924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b10fed8d73bc6fca227c206b112f9a09361b3e
        Validity
            Not Before: Mar 24 14:39:00 2021 GMT
            Not After : Mar 24 14:39:00 2026 GMT
        Subject: CN=c62ce89ac47f0abf8c9c27674cca86d5ff181569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:b9:8c:fe:af:e3:70:18:a6:0e:89:55:37:
                    70:6d:c9:20:b7:9f:4e:de:c1:4e:63:3e:64:66:94:
                    19:51:78:b4:78:d0:b9:ba:e1:6c:8a:35:c5:88:9e:
                    1a:9d:9a:92:ad:b0:da:c4:84:da:b1:c1:6e:58:61:
                    cd:08:ad:1c:14:8e:b5:53:70:6b:f2:35:0d:75:b0:
                    f0:3b:ff:28:2a:13:70:28:f7:f1:b4:41:a7:56:94:
                    fb:b0:d6:4a:80:38:bd:13:cd:07:6f:85:e8:ce:63:
                    0c:1d:d0:63:3b:67:50:a3:0a:23:f8:aa:06:b6:a7:
                    b2:b5:aa:4f:1c:77:9b:96:e2:cf:14:64:a3:6e:1a:
                    b0:e4:71:01:a5:a4:a4:35:42:1a:a7:d9:da:0c:c4:
                    90:9d:0f:76:09:79:81:3f:c3:0c:ea:cf:b6:46:a7:
                    10:9b:c9:49:63:9a:3b:89:8d:75:45:ed:6f:6c:aa:
                    70:6f:dd:f2:27:0b:89:7a:bc:60:c3:90:9e:0a:42:
                    06:06:2a:94:ad:09:9b:4b:99:18:6a:e9:4d:28:88:
                    b4:fe:ee:24:51:6f:45:94:ca:f1:39:df:93:1b:72:
                    e1:6f:46:17:1e:c4:c9:d5:bb:6f:b6:04:6c:d8:3a:
                    de:4b:f6:39:b1:fe:6e:a5:1c:17:ba:12:c2:95:9f:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:51:76:8D:B6:A6:1E:3B:65:7E:47:D4:82:B8:2C:E6:E3:C0:0E:FB
            X509v3 Authority Key Identifier:
                keyid:DA:3C:C7:79:11:12:49:F0:4D:43:52:CB:60:BC:23:A4:4B:9F:76:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b10fed8d73bc6fca227c206b112f9a09361b3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/c62ce89ac47f0abf8c9c27674cca86d5ff181569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/c1b10fed8d73bc6fca227c206b112f9a09361b3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.204.0/24
                  200.0.63.0/24
                IPv6:
                  2801:0:4d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:de:e3:21:cb:32:17:53:4f:c9:b6:c3:dc:96:35:19:97:
         43:20:e9:4a:ce:3d:a6:e1:c9:e7:e6:b8:f1:ea:e3:cb:f6:36:
         24:6a:9a:ea:9b:de:4e:0c:80:56:36:1c:22:28:3e:49:67:f7:
         e5:14:ff:35:76:92:58:09:1e:c7:6a:7b:ec:5a:c1:a2:5f:cc:
         bd:80:6d:d0:82:69:ec:1c:cc:6a:8d:52:8a:3f:5d:93:90:83:
         a7:ea:1b:15:e8:99:44:09:15:f6:d6:af:b3:83:7c:e2:ff:67:
         22:d7:1c:d5:a0:49:ae:dd:2f:13:91:1b:82:68:78:89:fb:25:
         f7:04:74:4e:e0:ff:dc:fd:53:9e:60:27:d5:2a:12:61:00:74:
         bf:b5:de:4c:77:c4:a0:e4:30:ef:08:ca:c8:13:03:8b:d4:d4:
         b7:ac:df:32:01:62:a7:35:05:f8:b0:03:3c:b7:6e:ee:10:cc:
         59:f2:14:3c:d7:99:7a:03:ed:6e:35:b7:85:80:a6:36:5d:a9:
         36:28:4c:ec:40:3e:e7:b4:52:cc:86:c9:78:45:b6:51:81:11:
         c0:c8:e0:14:93:52:3b:5c:cb:7b:94:be:25:9a:6c:fc:02:11:
         77:6d:f2:76:ff:91:78:3e:73:31:ba:14:73:ac:31:94:1a:0a:
         6e:6a:54:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----