Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8038d483-b436-444a-80d7-9065f08956e3/416b18469d5d3fea844ea2fa5c793cada9a40b6f.roa
File:                     416b18469d5d3fea844ea2fa5c793cada9a40b6f.roa (raw, json)
Hash identifier:          Pfg3LrwXnY/hdnMMA+nlNif69eckKEhimKPm/WQ8QRo=
Subject key identifier:   4D:C9:F1:53:44:56:CE:4F:CE:55:BD:BE:70:F7:46:9E:42:95:13:5E
Certificate issuer:       /CN=e4173af14a44128ed6833e80756dce8b3f11fa94
Certificate serial:       04C9A6
Authority key identifier: 7A:E0:65:0A:31:56:4E:A0:CA:9E:06:9A:04:E1:E4:A4:39:53:67:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4173af14a44128ed6833e80756dce8b3f11fa94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8038d483-b436-444a-80d7-9065f08956e3/416b18469d5d3fea844ea2fa5c793cada9a40b6f.roa
Signing time:             Wed 24 Mar 2021 14:37:15 +0000
ROA not before:           Wed 24 Mar 2021 14:37:14 +0000
ROA not after:            Tue 24 Mar 2026 14:37:14 +0000
asID:                     270058
IP address blocks:        190.115.200.0/22 maxlen: 22
                          2803:1de0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313766 (0x4c9a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4173af14a44128ed6833e80756dce8b3f11fa94
        Validity
            Not Before: Mar 24 14:37:14 2021 GMT
            Not After : Mar 24 14:37:14 2026 GMT
        Subject: CN=416b18469d5d3fea844ea2fa5c793cada9a40b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:91:f5:d3:fa:b3:3f:27:a1:ee:3f:fc:bb:
                    86:31:b6:b9:78:a1:d5:d7:6c:a6:cc:1b:42:be:07:
                    bb:f4:71:b2:e6:19:db:b0:23:2b:a5:a5:00:e0:41:
                    de:d1:07:37:40:6a:9c:d2:77:40:d1:81:53:af:fc:
                    11:76:e9:8d:90:3a:bb:b5:54:2d:8f:40:55:e2:5b:
                    57:4c:db:e9:38:60:2a:a5:3d:18:99:eb:5c:5f:31:
                    87:b9:27:57:4b:cf:0b:1e:dc:5d:ca:5c:3c:13:fd:
                    04:93:2e:95:11:51:5d:a5:c9:1d:51:26:02:7f:5b:
                    85:40:3b:55:f9:61:9f:e8:06:e0:37:bd:87:44:35:
                    c6:64:5a:70:83:ef:94:30:6a:da:d6:15:cd:32:5a:
                    18:9a:b2:37:c8:8c:0c:2e:ef:ef:29:09:9a:b5:cd:
                    67:95:bb:de:0b:36:b4:71:da:04:38:f5:fa:cb:df:
                    03:89:94:72:6b:d2:69:94:89:be:c6:66:d3:b9:17:
                    0c:12:86:41:e1:76:72:6e:04:dd:d9:fa:4e:25:f0:
                    c0:2b:c4:b3:82:2d:19:4b:bd:13:59:ce:33:18:a8:
                    5d:0a:25:18:2a:56:43:ac:3d:ff:a8:55:b9:32:f2:
                    5c:d9:3d:1d:4c:b1:67:60:8c:ae:55:8a:6e:21:64:
                    e3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C9:F1:53:44:56:CE:4F:CE:55:BD:BE:70:F7:46:9E:42:95:13:5E
            X509v3 Authority Key Identifier:
                keyid:7A:E0:65:0A:31:56:4E:A0:CA:9E:06:9A:04:E1:E4:A4:39:53:67:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4173af14a44128ed6833e80756dce8b3f11fa94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8038d483-b436-444a-80d7-9065f08956e3/416b18469d5d3fea844ea2fa5c793cada9a40b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8038d483-b436-444a-80d7-9065f08956e3/e4173af14a44128ed6833e80756dce8b3f11fa94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.200.0/22
                IPv6:
                  2803:1de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:cd:24:08:52:91:a6:93:7b:7f:d6:19:58:c0:b7:9a:07:00:
         ec:41:ff:ed:7d:00:36:39:9b:de:b8:e8:3e:ac:8b:17:e4:b7:
         c2:44:be:03:c4:c0:30:24:94:49:05:61:03:d5:6f:da:60:3d:
         9c:23:1e:13:40:1a:07:1f:d3:12:22:5b:b7:3b:f0:4c:87:0a:
         c0:c7:ad:b7:06:a6:8d:b0:95:66:55:05:81:46:f2:5d:ee:c7:
         a8:af:34:83:83:ad:a7:50:83:7c:10:87:79:a6:f8:96:5c:2d:
         5c:98:f7:a8:0e:00:d3:dd:e4:1d:a1:73:06:84:76:b6:b3:e1:
         b5:d4:69:cb:36:0a:ea:3f:a0:f0:d0:67:19:98:2c:17:01:6c:
         20:5e:24:04:15:dd:1b:10:4e:e2:0d:df:4e:9a:8e:49:17:fa:
         f6:45:f7:dd:9c:65:85:b8:2d:c1:44:f4:0e:b3:87:74:c8:fb:
         cd:71:dd:60:3c:b4:b5:42:6d:eb:9a:da:8e:08:cc:bd:a2:eb:
         48:3e:db:cb:6b:f0:c9:cc:0d:63:02:51:e3:ec:27:ec:d7:a1:
         af:6f:a7:98:fb:d3:de:80:f2:e7:72:62:f3:e0:01:bc:49:39:
         c0:e1:d8:8e:a0:e6:af:ad:93:5c:5a:23:cd:b8:df:38:58:b5:
         5b:f5:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----