Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71af4cf4-9dc5-4466-b9df-1b574bd53ecc/7340b09afbad1cac96be7c2bb12c2c1657755562.roa
File:                     7340b09afbad1cac96be7c2bb12c2c1657755562.roa (raw, json)
Hash identifier:          U3q+F2h7SPeygD84BxS/XHiuBucEZC0ru+QZ7J9dCDU=
Subject key identifier:   84:80:74:A7:28:9D:59:33:B1:14:7B:B3:24:9C:58:0A:FC:98:68:7C
Certificate issuer:       /CN=f6c754f9c074b1d41d0fcc50ef1becf23c78d140
Certificate serial:       093055
Authority key identifier: F0:A4:F9:A9:CF:42:13:77:3F:C5:A9:E3:CA:57:C0:A1:11:2D:CA:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6c754f9c074b1d41d0fcc50ef1becf23c78d140.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71af4cf4-9dc5-4466-b9df-1b574bd53ecc/7340b09afbad1cac96be7c2bb12c2c1657755562.roa
Signing time:             Wed 24 Mar 2021 14:29:40 +0000
ROA not before:           Wed 24 Mar 2021 14:29:40 +0000
ROA not after:            Tue 24 Mar 2026 14:29:40 +0000
asID:                     52444
IP address blocks:        131.161.184.0/22 maxlen: 24
                          2803:b380::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602197 (0x93055)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c754f9c074b1d41d0fcc50ef1becf23c78d140
        Validity
            Not Before: Mar 24 14:29:40 2021 GMT
            Not After : Mar 24 14:29:40 2026 GMT
        Subject: CN=7340b09afbad1cac96be7c2bb12c2c1657755562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f5:ba:ca:f4:14:7b:9c:a1:d3:6b:c9:b5:67:
                    87:0b:61:fb:8e:0d:06:5c:dc:17:fa:41:41:8b:49:
                    7e:67:cc:b6:b4:4d:b5:d3:60:5b:fe:63:f0:f6:45:
                    24:bb:13:fc:5a:13:00:2e:8b:db:40:f0:60:e2:45:
                    c9:08:ec:00:90:4e:ce:21:16:00:a3:6c:81:85:1e:
                    13:94:da:48:a2:c3:51:44:88:6b:ba:32:e1:38:d0:
                    e8:e5:eb:3a:65:01:a3:d2:33:61:d9:c0:f8:89:36:
                    dc:11:37:3b:8e:a8:d5:f4:9c:17:9d:3a:d1:17:f2:
                    98:25:0a:3d:b7:d1:75:6f:c7:eb:8e:2e:a1:9e:50:
                    b5:8e:8c:bc:c0:40:18:ed:63:d9:7a:a0:91:4f:40:
                    e4:3d:aa:28:ca:ce:95:b8:a4:c7:42:bf:34:0b:be:
                    28:7f:dc:ee:31:3b:2b:0c:66:1c:c8:bf:6a:88:28:
                    a1:1d:4d:7b:48:4f:8e:5e:e2:c5:e3:5c:b2:bf:09:
                    b1:0f:f5:3d:31:92:3d:b1:0c:a3:d8:73:f7:86:9b:
                    2e:97:5e:aa:ed:dd:22:f0:b8:12:2a:8e:ec:27:fb:
                    0b:d6:63:d2:3e:03:1a:ce:15:ac:b9:56:a8:22:0a:
                    7f:c5:c8:28:9b:78:9e:cb:3a:7b:18:5e:1a:29:1f:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:80:74:A7:28:9D:59:33:B1:14:7B:B3:24:9C:58:0A:FC:98:68:7C
            X509v3 Authority Key Identifier:
                keyid:F0:A4:F9:A9:CF:42:13:77:3F:C5:A9:E3:CA:57:C0:A1:11:2D:CA:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6c754f9c074b1d41d0fcc50ef1becf23c78d140.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71af4cf4-9dc5-4466-b9df-1b574bd53ecc/7340b09afbad1cac96be7c2bb12c2c1657755562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71af4cf4-9dc5-4466-b9df-1b574bd53ecc/f6c754f9c074b1d41d0fcc50ef1becf23c78d140.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.184.0/22
                IPv6:
                  2803:b380::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:5b:eb:ff:c5:78:22:32:6e:63:ba:ac:61:6c:e2:40:60:
         d9:d2:ca:b7:63:f5:93:19:a8:bd:48:df:a8:98:10:1c:7f:3e:
         dd:40:ca:45:ad:bd:63:7f:99:18:c1:1e:7b:9d:45:c4:ce:2e:
         e1:7d:93:72:a0:63:84:62:70:4e:5b:8d:f5:51:50:aa:fd:70:
         51:f9:7d:90:8b:be:10:93:78:c8:02:e7:82:50:aa:c5:15:f3:
         0b:9a:25:5d:9b:8f:4c:72:d1:b6:ea:87:bd:63:c1:7a:90:88:
         ba:53:c2:e4:f9:b7:aa:72:ce:38:07:d9:12:53:cb:8e:b7:8a:
         82:77:6e:19:51:4a:80:64:16:86:f5:30:3f:46:aa:97:e0:ef:
         e2:49:3c:a5:91:c6:84:c0:30:36:17:b0:56:a5:26:ce:17:ce:
         f6:c8:93:d2:4e:92:b9:b1:3c:c3:b0:88:bc:8d:f7:83:20:6a:
         af:a6:bf:3a:8c:ff:e6:57:8a:75:4c:a9:53:ed:1e:de:6d:bf:
         57:de:07:e0:94:a5:ee:94:7c:84:1a:f3:5f:ec:5b:83:f1:5e:
         60:ca:60:c6:70:3a:c0:84:07:40:75:64:56:e3:83:41:a4:97:
         ba:50:e7:26:67:92:b6:68:28:08:b3:a9:e6:bf:01:9d:cd:c9:
         f9:cf:44:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----