Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7914dff3-e96b-490e-84a5-40b7109d9006/bedd49f31697c05bc5350190ccb7cace5c986065.roa
File:                     bedd49f31697c05bc5350190ccb7cace5c986065.roa (raw, json)
Hash identifier:          Cqu0bPtF1s/TmV1KIBlsx23+FQ0M2x9PIAWgwZ62+aQ=
Subject key identifier:   3D:A4:4A:DE:E7:21:57:09:E7:5D:91:11:3E:32:88:38:56:3B:72:12
Certificate issuer:       /CN=0f9bb7543db2b3a0a338c76a51790115e3158bb2
Certificate serial:       0BDB9E
Authority key identifier: 09:8C:2A:0B:FE:1F:2B:5B:D5:EF:86:3D:26:80:63:DC:EB:4F:E2:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f9bb7543db2b3a0a338c76a51790115e3158bb2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7914dff3-e96b-490e-84a5-40b7109d9006/bedd49f31697c05bc5350190ccb7cace5c986065.roa
Signing time:             Wed 24 Mar 2021 14:42:33 +0000
ROA not before:           Wed 24 Mar 2021 14:42:33 +0000
ROA not after:            Tue 24 Mar 2026 14:42:33 +0000
asID:                     52262
IP address blocks:        186.2.129.0/24 maxlen: 24
                          186.2.131.0/24 maxlen: 24
                          186.2.132.0/22 maxlen: 24
                          186.2.136.0/21 maxlen: 24
                          186.2.144.0/20 maxlen: 24
                          2803:8d43::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777118 (0xbdb9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9bb7543db2b3a0a338c76a51790115e3158bb2
        Validity
            Not Before: Mar 24 14:42:33 2021 GMT
            Not After : Mar 24 14:42:33 2026 GMT
        Subject: CN=bedd49f31697c05bc5350190ccb7cace5c986065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:5f:c6:f7:c4:12:22:01:0e:71:51:5b:25:
                    81:be:b3:35:4d:70:69:86:22:62:da:f9:e7:fd:af:
                    7d:2a:6e:59:54:7f:6e:65:4a:b6:7c:25:17:bf:a7:
                    09:59:0e:82:10:e0:1a:d8:0e:2d:32:0f:a9:2c:0b:
                    ce:7e:74:c4:59:57:2a:83:f7:a1:aa:68:83:84:84:
                    be:57:61:2e:53:c7:be:c0:ff:b8:4b:23:09:3d:6b:
                    3e:f9:bf:59:04:41:a8:c3:1a:ac:54:44:94:24:cb:
                    d6:cb:3b:55:8b:67:e6:19:1d:5a:1d:7d:ea:e8:4a:
                    87:84:c8:d3:7b:37:c5:7b:16:55:fb:ad:18:65:3f:
                    92:93:d2:b7:f5:e0:bd:37:36:e0:58:4b:6e:8e:3b:
                    07:49:12:8b:86:d4:0b:3f:cf:e4:2e:bd:13:d2:f1:
                    1f:ce:bc:ec:5b:98:7a:66:11:e6:f3:2f:58:44:b1:
                    52:f7:f9:8f:bf:19:93:aa:e2:64:b1:a8:cb:33:25:
                    50:6e:e3:d3:31:ff:6f:b0:e0:5f:c1:1a:f2:84:3e:
                    5a:95:72:32:31:58:35:e9:13:42:75:bd:a9:36:a4:
                    2e:cb:a7:2d:23:ed:dd:8c:6c:eb:c2:70:9a:be:a7:
                    d4:98:9a:cf:2f:dd:0e:ee:6c:cb:fc:59:06:e2:a0:
                    95:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A4:4A:DE:E7:21:57:09:E7:5D:91:11:3E:32:88:38:56:3B:72:12
            X509v3 Authority Key Identifier:
                keyid:09:8C:2A:0B:FE:1F:2B:5B:D5:EF:86:3D:26:80:63:DC:EB:4F:E2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f9bb7543db2b3a0a338c76a51790115e3158bb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7914dff3-e96b-490e-84a5-40b7109d9006/bedd49f31697c05bc5350190ccb7cace5c986065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7914dff3-e96b-490e-84a5-40b7109d9006/0f9bb7543db2b3a0a338c76a51790115e3158bb2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.129.0/24
                  186.2.131.0-186.2.159.255
                IPv6:
                  2803:8d43::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:7b:b6:fe:67:03:dd:99:f8:8a:2e:8b:b8:66:de:87:fb:93:
         cc:f2:5e:42:3f:61:b8:34:47:96:a8:d6:ce:cb:04:d3:fb:c7:
         b0:a5:50:ba:be:d6:0e:4f:f7:24:21:af:0d:a1:35:77:e2:a6:
         b3:ff:ec:41:71:e5:f8:29:b9:c5:e1:de:b7:1c:85:6d:c2:89:
         23:ce:b5:4e:9f:07:76:d6:b8:f4:1b:f3:6f:ba:f3:b2:5a:d1:
         ee:f4:8c:15:53:49:ca:af:ab:1c:aa:a5:85:d8:4a:0e:63:b7:
         c3:1c:92:9b:85:3b:cb:b5:5d:08:d2:6d:2f:da:ed:f5:7c:36:
         34:b1:e5:c0:fe:ab:b2:d9:2d:2c:18:45:0a:02:fc:39:ad:fd:
         fb:a5:42:3b:65:76:8d:57:47:73:73:b7:2a:8b:34:37:ec:70:
         00:a2:15:96:fe:c1:ea:ea:64:c9:cb:2a:75:4c:85:2a:cf:50:
         f5:b3:bd:04:e3:45:0e:d6:5a:d2:8a:e5:29:09:d4:00:10:60:
         b7:b6:42:22:94:7a:f4:45:62:69:d0:14:48:fa:23:c0:9f:00:
         13:ad:c2:39:7b:d9:3f:7c:6f:21:cf:cd:ec:79:d6:59:a5:ce:
         53:b7:21:75:93:b2:b3:05:fa:2e:c6:cf:a2:e2:ee:c5:26:d3:
         e0:98:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----