Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/7911d8a15db5de462f6fa8f1ee8b32f29ce379f1.roa
File:                     7911d8a15db5de462f6fa8f1ee8b32f29ce379f1.roa (raw, json)
Hash identifier:          IbmghJjjg+/AEdo75UXKDDNXyQYi0WvmInF1EgHO0NE=
Subject key identifier:   D9:F2:63:00:BF:F1:46:2B:4D:CD:39:FD:43:A8:AF:16:98:A2:1D:0A
Certificate issuer:       /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial:       0D6005
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/7911d8a15db5de462f6fa8f1ee8b32f29ce379f1.roa
Signing time:             Wed 24 Mar 2021 14:34:09 +0000
ROA not before:           Wed 24 Mar 2021 14:34:07 +0000
ROA not after:            Tue 24 Mar 2026 14:34:07 +0000
asID:                     27901
IP address blocks:        179.60.64.0/19 maxlen: 24
                          190.5.32.0/19 maxlen: 24
                          190.102.224.0/20 maxlen: 24
                          190.102.240.0/20 maxlen: 24
                          190.110.160.0/20 maxlen: 24
                          190.114.32.0/19 maxlen: 24
                          200.73.120.0/21 maxlen: 24
                          2803:c600::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876549 (0xd6005)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
        Validity
            Not Before: Mar 24 14:34:07 2021 GMT
            Not After : Mar 24 14:34:07 2026 GMT
        Subject: CN=7911d8a15db5de462f6fa8f1ee8b32f29ce379f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:fe:66:10:45:9b:15:ef:68:68:dc:62:db:
                    98:c4:6f:8c:a9:85:bc:25:01:ce:ed:be:ba:6f:f7:
                    ef:40:c2:1f:ce:ca:21:4f:61:63:f5:95:d8:f2:0f:
                    c9:ae:01:9e:f4:f3:58:4b:df:91:6a:70:12:24:dd:
                    55:a3:ad:34:11:14:f2:d3:ee:70:4d:a2:b6:b4:62:
                    84:27:51:48:4b:6e:6c:f5:50:83:a6:27:b6:f6:98:
                    e9:79:0c:5e:29:0f:95:0d:20:f6:07:4a:34:de:52:
                    2b:42:cc:8a:31:85:72:d2:39:3c:53:24:5f:f3:3b:
                    b3:92:65:64:a5:62:dd:e8:29:3a:2b:62:38:ae:75:
                    72:cf:0f:bc:e6:dc:3a:46:de:81:61:e0:55:85:e4:
                    27:33:e4:cd:d6:b0:02:9f:36:81:b9:23:95:71:5c:
                    14:7a:4d:4e:8a:20:90:20:dc:9c:7f:d9:b0:0f:aa:
                    c4:78:c7:26:53:4a:1f:ed:c9:74:3d:cd:90:51:f1:
                    a4:3d:ea:92:62:23:f7:9a:16:89:34:4d:ac:f8:71:
                    c6:44:fa:31:e7:14:9b:2b:17:cc:61:17:7f:7a:45:
                    77:5b:cb:01:e1:d2:41:d9:da:a8:01:72:2b:44:43:
                    24:50:5c:f8:2a:3b:b4:54:82:7c:6b:1d:e2:a1:24:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F2:63:00:BF:F1:46:2B:4D:CD:39:FD:43:A8:AF:16:98:A2:1D:0A
            X509v3 Authority Key Identifier:
                keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/7911d8a15db5de462f6fa8f1ee8b32f29ce379f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.64.0/19
                  190.5.32.0/19
                  190.102.224.0/19
                  190.110.160.0/20
                  190.114.32.0/19
                  200.73.120.0/21
                IPv6:
                  2803:c600::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:c3:1f:4a:dd:4f:8e:49:2a:54:48:62:63:5f:47:ec:19:87:
         f3:ee:cb:6f:f3:6d:77:1d:51:df:29:0d:58:3c:c5:e9:c6:02:
         e4:cb:14:cc:5d:38:a4:3b:81:35:2c:64:a7:16:cb:95:fe:5b:
         7d:e5:d2:2a:83:06:5a:83:27:10:3f:2b:73:f0:71:63:81:bf:
         be:99:7d:60:6f:67:33:63:51:da:99:a1:68:8d:c7:e9:a9:0b:
         06:01:8f:52:c1:95:43:dc:9f:e1:82:24:11:62:95:f7:c1:22:
         54:66:c5:50:92:bc:8f:e5:62:95:ed:86:9c:f5:d7:c8:61:07:
         42:7a:4e:a9:b1:28:42:ea:22:11:0b:ac:05:76:2f:a8:a8:fd:
         da:15:2b:21:5d:bd:97:c3:5b:71:26:87:97:08:5a:83:70:f6:
         18:67:dd:c2:e4:32:21:b7:98:95:03:d3:06:a5:04:c9:90:e2:
         93:9f:63:b8:0c:c4:6e:ad:f7:04:c2:ba:b1:a8:f4:1d:ee:6f:
         41:45:07:49:6c:f8:5c:c4:c2:e3:ec:96:03:9d:25:6b:8d:8c:
         94:05:69:f3:34:11:47:67:b2:e7:e6:3f:c0:fe:77:9e:fe:6f:
         9d:e6:0a:27:ed:51:88:94:e8:fc:0f:d6:27:08:92:42:f0:ba:
         0d:0f:53:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----