Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83fbc5ae-3df1-406b-b4a9-6c39fdc29573/e20039c09aecb7ce1db8f6477a531bbc4792bd83.roa
File:                     e20039c09aecb7ce1db8f6477a531bbc4792bd83.roa (raw, json)
Hash identifier:          0b484T7qoGdEqKneFgQZRgKQqQuBOAow7r6sPEDgQVU=
Subject key identifier:   0B:FC:8F:F5:0F:AE:B6:F0:77:5B:7D:83:B3:F4:EC:AE:70:73:49:DE
Certificate issuer:       /CN=92107f32f7512ff7c8629e32c158eed42fc5f6a2
Certificate serial:       0D4475
Authority key identifier: 61:C3:9C:F3:67:E5:00:20:D0:05:66:E7:D8:E2:46:6C:2A:C3:E3:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92107f32f7512ff7c8629e32c158eed42fc5f6a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83fbc5ae-3df1-406b-b4a9-6c39fdc29573/e20039c09aecb7ce1db8f6477a531bbc4792bd83.roa
Signing time:             Wed 24 Mar 2021 14:37:32 +0000
ROA not before:           Wed 24 Mar 2021 14:37:30 +0000
ROA not after:            Tue 24 Mar 2026 14:37:30 +0000
asID:                     262242
IP address blocks:        170.246.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869493 (0xd4475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92107f32f7512ff7c8629e32c158eed42fc5f6a2
        Validity
            Not Before: Mar 24 14:37:30 2021 GMT
            Not After : Mar 24 14:37:30 2026 GMT
        Subject: CN=e20039c09aecb7ce1db8f6477a531bbc4792bd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:84:37:7f:51:f9:43:1d:ea:38:82:d2:f9:
                    7c:07:fe:e7:5b:d4:c0:40:64:71:3e:4c:a3:c2:b3:
                    48:bc:7c:54:f7:13:a3:72:62:f1:33:ee:3c:d2:21:
                    1a:97:64:da:27:5d:f4:0b:8a:e7:18:28:eb:09:fe:
                    83:64:d6:eb:0c:eb:47:bd:bd:07:c6:27:6b:d7:6b:
                    9e:c1:b8:3a:53:79:1a:16:68:59:22:6b:da:6a:8a:
                    fd:18:7a:2d:3f:af:ad:ad:42:f2:03:99:f2:ba:95:
                    4a:c5:03:f5:37:19:fc:54:07:e9:af:6d:62:40:c2:
                    ea:b0:ff:b7:bd:2b:13:38:83:1c:cf:59:ff:7c:f9:
                    0a:16:38:44:f0:6a:df:70:e8:1c:5b:6e:62:84:37:
                    28:79:44:da:66:18:59:6b:d9:76:f2:db:f8:65:f4:
                    7d:ba:c3:8b:b5:5d:48:a8:06:d0:2d:94:8f:c3:6a:
                    9d:f7:d5:28:68:84:f5:97:ab:0e:85:07:db:2d:28:
                    47:4c:49:d3:56:56:77:eb:4f:58:59:6e:ea:5f:c4:
                    14:2d:6b:9e:84:cf:aa:59:4a:14:21:17:a4:88:53:
                    03:da:55:2d:0e:fe:95:af:00:74:2e:ac:65:53:3d:
                    fe:f7:90:97:a4:85:31:f8:81:b0:26:a3:9f:7f:c8:
                    a4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FC:8F:F5:0F:AE:B6:F0:77:5B:7D:83:B3:F4:EC:AE:70:73:49:DE
            X509v3 Authority Key Identifier:
                keyid:61:C3:9C:F3:67:E5:00:20:D0:05:66:E7:D8:E2:46:6C:2A:C3:E3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92107f32f7512ff7c8629e32c158eed42fc5f6a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83fbc5ae-3df1-406b-b4a9-6c39fdc29573/e20039c09aecb7ce1db8f6477a531bbc4792bd83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83fbc5ae-3df1-406b-b4a9-6c39fdc29573/92107f32f7512ff7c8629e32c158eed42fc5f6a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:ff:9f:d4:e0:d6:07:76:cc:2a:19:e3:d7:00:46:92:98:3a:
         88:67:25:5b:b7:62:17:1a:25:f4:dd:8c:fe:a9:b8:26:f6:5a:
         c4:7d:08:4e:2f:f0:38:b2:68:9c:34:6e:68:56:bc:da:55:0d:
         74:4c:e0:f4:ac:b6:a5:a2:96:fb:7c:8c:53:60:72:6c:1f:ab:
         8e:7f:2a:5a:e3:ae:84:35:3b:8e:e5:4e:bb:12:61:a1:0a:e9:
         d7:9e:75:92:9a:08:45:37:60:3b:dc:7e:36:71:cf:8c:da:8e:
         9f:d7:20:ab:5c:22:e5:2b:12:bb:44:d4:f4:eb:46:9e:af:3e:
         30:6f:55:15:30:e4:68:23:15:fd:ff:8e:36:60:1a:c1:1c:f9:
         b2:b4:fd:92:65:da:07:a7:45:b9:43:77:8d:01:99:61:78:6f:
         bc:bc:cc:16:c6:34:a5:98:0e:cb:67:8a:b4:a6:ad:6d:e0:c9:
         5c:89:67:13:74:84:68:55:81:cb:1c:16:66:a8:83:21:91:f5:
         9b:9b:60:62:c3:c6:96:07:f9:aa:ae:db:fb:63:68:6f:cc:a8:
         05:9b:1f:44:27:5d:10:b4:3c:11:f1:8e:92:a9:25:ee:35:e4:
         a8:45:6e:91:3b:90:f7:2b:a6:d5:67:45:8f:0b:14:be:29:9b:
         e6:ff:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----