Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ca60485-2cab-4dd7-a900-d6ec55512b39/a5cea12b48c88386e944bfce8e0674235d218c6c.roa
File:                     a5cea12b48c88386e944bfce8e0674235d218c6c.roa (raw, json)
Hash identifier:          JaC2c2UFK4HzcvsNdgkigJaFI9j/7T+rzt2TZFGPoIg=
Subject key identifier:   50:5C:D5:2C:D0:06:96:CA:92:C7:82:43:E0:D6:20:55:F5:86:02:41
Certificate issuer:       /CN=4328269692686901800dbd7c2b50a46670d186cd
Certificate serial:       05E4C2
Authority key identifier: B8:7E:A0:6E:D6:89:73:CD:A1:31:74:FC:99:F0:15:31:AB:5B:BF:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4328269692686901800dbd7c2b50a46670d186cd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ca60485-2cab-4dd7-a900-d6ec55512b39/a5cea12b48c88386e944bfce8e0674235d218c6c.roa
Signing time:             Wed 24 Mar 2021 14:31:45 +0000
ROA not before:           Wed 24 Mar 2021 14:31:45 +0000
ROA not after:            Tue 24 Mar 2026 14:31:45 +0000
asID:                     263217
IP address blocks:        179.0.151.0/24 maxlen: 24
                          201.131.102.0/24 maxlen: 24
                          2801:19:c000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386242 (0x5e4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4328269692686901800dbd7c2b50a46670d186cd
        Validity
            Not Before: Mar 24 14:31:45 2021 GMT
            Not After : Mar 24 14:31:45 2026 GMT
        Subject: CN=a5cea12b48c88386e944bfce8e0674235d218c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:c9:38:36:17:19:97:ba:0e:f5:e8:8a:c7:
                    44:81:0e:24:a9:40:33:5e:42:75:c7:67:e5:01:97:
                    c6:64:49:1a:30:ff:0f:e0:68:7f:5d:73:45:bf:d6:
                    c3:eb:65:96:ba:d0:be:1f:a1:ee:b9:37:29:34:d2:
                    49:92:ef:ea:f3:3a:d3:92:ce:a0:95:1e:7a:c7:0c:
                    2e:d3:f2:20:f7:f9:a3:08:68:ab:b1:47:f3:38:ca:
                    b5:32:71:f6:32:b8:eb:11:98:5c:b5:aa:54:50:d4:
                    a5:24:14:22:bc:0e:e1:7e:86:a9:4b:f8:9a:91:25:
                    64:62:11:14:cd:10:92:47:80:94:9e:c2:ac:96:7b:
                    10:ad:c2:38:f2:95:5e:c4:7e:15:b0:db:5d:1b:e1:
                    dc:00:1f:1c:c6:6d:f7:b1:e1:e1:25:d8:0b:63:72:
                    7a:13:e9:fa:e8:33:43:1b:ee:a8:6d:24:9b:ff:f3:
                    bd:bd:2a:0c:0e:18:4b:fc:cd:88:53:89:1f:fc:eb:
                    ab:58:9b:88:42:5a:a3:6b:74:6a:8f:bb:4b:49:45:
                    cf:0e:a0:17:a2:b2:e0:e9:a3:1a:a1:c5:62:14:dc:
                    a6:a6:71:08:4d:a7:5b:98:a0:86:a7:1c:94:94:cf:
                    66:51:11:1c:18:48:75:d9:0b:60:a4:30:d8:d2:06:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5C:D5:2C:D0:06:96:CA:92:C7:82:43:E0:D6:20:55:F5:86:02:41
            X509v3 Authority Key Identifier:
                keyid:B8:7E:A0:6E:D6:89:73:CD:A1:31:74:FC:99:F0:15:31:AB:5B:BF:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4328269692686901800dbd7c2b50a46670d186cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ca60485-2cab-4dd7-a900-d6ec55512b39/a5cea12b48c88386e944bfce8e0674235d218c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ca60485-2cab-4dd7-a900-d6ec55512b39/4328269692686901800dbd7c2b50a46670d186cd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.151.0/24
                  201.131.102.0/24
                IPv6:
                  2801:19:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:73:01:cf:4e:e0:ec:a7:e9:93:1b:9a:a9:13:a8:ad:84:3a:
         c1:62:9f:a9:44:bd:61:5c:cc:52:54:c2:79:7b:98:1f:ad:86:
         9c:4b:65:ca:8e:a5:e7:0d:7d:9c:2a:86:4a:27:79:ae:c8:d2:
         b2:a3:81:85:03:4e:d7:32:48:12:77:c8:24:b5:d2:54:25:c5:
         25:0a:a8:41:96:42:18:51:08:cd:44:2c:8f:8c:be:62:c2:24:
         e0:ef:cb:35:49:f7:57:cd:c0:1e:b7:50:e8:6c:b1:d0:d9:63:
         47:72:0b:e6:05:6b:e0:db:b7:15:fd:c3:0c:ed:d1:bc:ed:09:
         03:d7:cc:79:b4:97:48:97:2f:1c:0d:8b:46:0c:83:20:7e:03:
         45:27:b3:9d:05:65:82:82:94:45:79:71:de:20:0a:d0:f6:53:
         11:03:33:a7:00:1a:49:00:29:18:fd:0f:e5:63:1e:6b:d9:a9:
         0e:1a:3f:aa:2e:93:50:e3:c9:c1:ba:83:c6:75:56:db:a0:bf:
         45:e0:0c:1f:a8:eb:bd:0e:f7:da:14:58:c6:b4:64:8e:71:f6:
         c4:1d:26:d5:0f:ca:17:a4:c1:1a:12:85:ee:13:7a:3f:b5:35:
         55:ef:72:0e:29:0e:28:17:12:6a:2c:c3:85:5f:b9:a2:cf:cb:
         cb:6c:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----