Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/b1127a96cfbef55da775bffad3272d4ddfe332f1.roa
File:                     b1127a96cfbef55da775bffad3272d4ddfe332f1.roa (raw, json)
Hash identifier:          ih1WFSgB9LKzKDgTG0WQFlZu/W3X+fVugxfI5RG8Z8Y=
Subject key identifier:   9F:F3:51:D5:E4:56:70:CD:E0:2E:DE:BA:6A:7A:68:21:D9:48:2A:A3
Certificate issuer:       /CN=f10755e086c3f00dedf6589d23f8331bfccf8397
Certificate serial:       0DD0A6
Authority key identifier: E8:E3:21:E4:E0:29:1A:C1:D4:7E:E0:CF:EA:40:A4:B5:13:DA:66:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f10755e086c3f00dedf6589d23f8331bfccf8397.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/b1127a96cfbef55da775bffad3272d4ddfe332f1.roa
Signing time:             Wed 24 Mar 2021 14:48:17 +0000
ROA not before:           Wed 24 Mar 2021 14:48:17 +0000
ROA not after:            Tue 24 Mar 2026 14:48:17 +0000
asID:                     27893
IP address blocks:        190.170.64.0/18 maxlen: 18
                          2800:a030::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905382 (0xdd0a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10755e086c3f00dedf6589d23f8331bfccf8397
        Validity
            Not Before: Mar 24 14:48:17 2021 GMT
            Not After : Mar 24 14:48:17 2026 GMT
        Subject: CN=b1127a96cfbef55da775bffad3272d4ddfe332f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f2:78:80:da:39:6b:ec:35:49:56:24:b3:0b:
                    86:a9:82:d3:10:ee:85:64:ac:b4:6c:8f:13:43:59:
                    16:44:25:3d:fb:a1:0f:56:5a:64:38:4f:6f:42:70:
                    2d:5d:1c:50:de:5b:cd:39:59:1e:cd:d5:fc:9e:8c:
                    9e:f6:26:5d:a0:91:a7:a3:98:63:fd:77:39:b8:d0:
                    76:3c:2f:cb:7a:f9:44:f0:fd:34:ac:8c:37:3c:4c:
                    4a:ae:47:db:3d:80:53:33:42:0f:9c:69:12:d5:85:
                    7f:74:fe:3c:45:2f:b2:94:6d:5f:37:3a:5d:ba:51:
                    5d:64:d3:b0:16:d7:42:a6:d3:c4:82:d3:b7:2b:85:
                    7e:bc:63:3d:14:95:2b:3f:6c:3e:43:c8:ec:d5:d4:
                    61:fa:dc:be:f2:25:11:4e:86:b0:11:cd:ac:3d:c9:
                    3e:a9:31:3d:9c:9e:35:d7:97:48:b2:c6:f3:33:a5:
                    37:e0:14:36:76:f5:b4:62:23:f1:da:14:d8:bc:cb:
                    66:c6:9d:f5:76:92:b6:d1:ca:f9:7c:c2:db:38:30:
                    d4:6e:50:30:db:20:4d:f4:33:85:84:d1:ae:b2:ae:
                    0c:da:29:12:9f:85:70:7a:a7:54:c8:c9:2a:80:dd:
                    43:0f:40:cc:cf:f6:31:2a:f3:a8:74:0a:26:8d:00:
                    45:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F3:51:D5:E4:56:70:CD:E0:2E:DE:BA:6A:7A:68:21:D9:48:2A:A3
            X509v3 Authority Key Identifier:
                keyid:E8:E3:21:E4:E0:29:1A:C1:D4:7E:E0:CF:EA:40:A4:B5:13:DA:66:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f10755e086c3f00dedf6589d23f8331bfccf8397.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/b1127a96cfbef55da775bffad3272d4ddfe332f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/f10755e086c3f00dedf6589d23f8331bfccf8397.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.64.0/18
                IPv6:
                  2800:a030::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:19:72:13:39:be:1b:77:66:57:7f:de:4d:94:45:08:d6:ba:
         9e:7a:12:6d:50:c9:36:95:4f:dd:2f:5a:87:d3:30:fb:fb:c4:
         59:da:ed:79:ca:71:ee:05:cf:fa:39:2b:b8:ff:4a:03:b8:29:
         96:d1:ab:2c:7c:f4:20:b3:0e:7d:4d:f5:e3:73:46:a7:f3:0e:
         42:51:10:89:42:cc:5e:3c:8e:fd:63:b7:5d:45:a2:0e:01:02:
         88:db:5a:5f:15:e2:84:b3:61:87:ca:16:53:e8:69:56:68:65:
         c1:92:b7:03:a4:4f:07:f6:9b:63:b0:e7:2d:23:9d:06:f2:5f:
         11:50:ae:9f:74:45:59:e7:a2:dc:46:d7:b1:2d:75:1e:69:4b:
         ec:de:d8:d0:f5:6f:d0:50:6d:d6:e2:ad:fb:ae:bb:ce:1f:32:
         ad:3c:16:3e:2c:85:5f:8f:27:96:98:9d:6f:6a:64:a6:8b:66:
         1a:10:47:f4:73:e3:28:28:b9:74:46:a9:c3:74:b2:6e:8a:ee:
         b4:a3:21:0b:19:e8:11:e2:18:67:de:d6:4e:d7:f9:24:42:e7:
         f3:e8:e1:08:cd:da:68:47:39:68:a4:59:0f:8a:0a:67:83:02:
         cc:20:c0:38:c0:de:c7:9f:ae:dc:7c:00:a0:d3:29:ee:87:df:
         60:2a:63:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----