Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7baa62ee-03f0-482b-aa7f-b7ebb4254be3/76b6a429013bf58a8a98fe65905e2c022b2e5657.roa
File:                     76b6a429013bf58a8a98fe65905e2c022b2e5657.roa (raw, json)
Hash identifier:          hprmPKmLdDYvP3gxzlzzb1PSKppuj3vGUWJKJm+4V6s=
Subject key identifier:   3B:82:BD:66:8E:79:28:4B:F4:02:77:9A:3F:98:8C:C7:1A:78:19:44
Certificate issuer:       /CN=0caf13e83a07d8f8f77a243f318dc657c0ce1104
Certificate serial:       0316
Authority key identifier: 62:D1:4A:1D:F8:AE:FE:2C:B7:F6:5E:58:D6:40:E3:3A:66:7D:35:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0caf13e83a07d8f8f77a243f318dc657c0ce1104.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7baa62ee-03f0-482b-aa7f-b7ebb4254be3/76b6a429013bf58a8a98fe65905e2c022b2e5657.roa
Signing time:             Wed 30 Jun 2021 17:58:45 +0000
ROA not before:           Wed 30 Jun 2021 03:00:00 +0000
ROA not after:            Fri 30 Jun 2023 03:00:00 +0000
asID:                     264677
IP address blocks:        170.244.40.0/22 maxlen: 22
                          2803:2580::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0caf13e83a07d8f8f77a243f318dc657c0ce1104
        Validity
            Not Before: Jun 30 03:00:00 2021 GMT
            Not After : Jun 30 03:00:00 2023 GMT
        Subject: CN=76b6a429013bf58a8a98fe65905e2c022b2e5657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ba:f3:3a:6b:71:72:dc:11:a7:9d:dd:7b:ff:
                    ed:b6:af:bc:29:a8:83:d4:07:41:b8:f3:bc:05:86:
                    95:de:0a:92:81:ee:77:77:67:44:96:b6:76:17:ad:
                    a5:42:8b:0e:54:32:c0:2b:a3:53:29:d8:c3:d2:12:
                    cf:fa:65:88:70:02:5b:f2:0d:b9:4e:ce:6e:0e:23:
                    d5:fe:0f:21:26:bc:7e:1e:59:39:f1:ff:59:a9:33:
                    cb:92:b5:87:3c:d0:00:3c:b3:9c:8c:ca:d7:e4:2b:
                    f6:f0:9f:de:4c:18:06:21:84:da:53:4d:22:4c:da:
                    b0:26:6d:21:bd:d1:b5:4d:31:ba:8a:94:7d:94:ff:
                    fa:ba:ac:e3:f6:00:1b:4a:fa:27:34:ba:20:1b:63:
                    20:4f:5d:44:93:11:1f:d7:8b:da:7d:25:1f:1f:06:
                    54:d4:4c:57:34:0f:8e:2f:8a:26:cb:2a:c4:22:b5:
                    83:c1:f5:2d:38:51:1d:ff:f9:b7:04:06:29:6d:5f:
                    03:0b:61:9d:bf:7b:19:d5:81:b1:90:34:f8:06:6b:
                    13:66:84:4f:4a:87:34:4d:12:1f:59:a9:40:a2:f1:
                    e7:cd:4f:15:1b:e6:01:0a:7e:24:db:15:27:a5:3f:
                    a6:2e:cd:ed:9f:3d:00:fa:11:6f:3a:b1:ba:b3:29:
                    f2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:82:BD:66:8E:79:28:4B:F4:02:77:9A:3F:98:8C:C7:1A:78:19:44
            X509v3 Authority Key Identifier:
                keyid:62:D1:4A:1D:F8:AE:FE:2C:B7:F6:5E:58:D6:40:E3:3A:66:7D:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0caf13e83a07d8f8f77a243f318dc657c0ce1104.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7baa62ee-03f0-482b-aa7f-b7ebb4254be3/76b6a429013bf58a8a98fe65905e2c022b2e5657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7baa62ee-03f0-482b-aa7f-b7ebb4254be3/0caf13e83a07d8f8f77a243f318dc657c0ce1104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.40.0/22
                IPv6:
                  2803:2580::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:d0:66:2f:00:80:48:6c:ca:93:9a:8d:dd:7b:e5:e7:5d:ba:
         14:35:08:d9:e4:c0:b4:00:9d:8b:e0:6b:4b:f8:dd:5c:9c:ad:
         65:59:81:9d:06:81:2e:de:57:ab:dd:ab:1b:c0:7e:cd:75:ca:
         40:d7:4a:9d:d0:4e:31:9c:d9:52:da:e0:a6:6b:ca:27:0c:31:
         d0:63:32:d7:e2:61:7d:ee:a9:95:ee:5c:23:42:32:17:c5:64:
         62:ae:91:8b:18:2b:da:f5:ff:fe:10:6c:08:1e:ac:67:44:b8:
         c6:97:32:de:a0:2b:ac:ea:8a:fe:9c:3f:81:b4:a9:84:e2:57:
         e8:f8:51:ad:c0:97:32:1c:72:47:c2:3f:d3:d9:05:ea:36:e0:
         2f:3b:e7:16:9b:a1:1b:52:91:1a:74:8a:c0:32:77:4b:5f:fa:
         66:c5:91:44:84:8b:2d:6f:92:58:37:7b:70:3e:40:74:60:ed:
         07:1c:92:04:aa:62:b1:10:13:77:1d:f1:ff:70:fc:7d:0f:6d:
         15:26:42:53:a4:eb:f3:05:87:61:35:c5:cc:62:a8:86:ee:2d:
         ea:35:be:61:a4:5e:29:80:78:a3:05:3e:8f:4a:85:7e:64:20:
         16:a3:74:2a:bf:4f:da:26:12:d1:49:7e:bb:93:f7:a1:8b:05:
         aa:c2:5b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----