Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/f527866a991c5f0e0e58f5737b9132575b6ac9f8.roa
File:                     f527866a991c5f0e0e58f5737b9132575b6ac9f8.roa (raw, json)
Hash identifier:          iDQDQvcHTKln2Ju62lR65t54KnMR12upCDFT001gsfw=
Subject key identifier:   F3:A4:26:17:8B:A2:BB:5B:C7:68:63:73:07:3C:E8:85:14:6C:DB:F0
Certificate issuer:       /CN=4ff66b8a7de8fbaabda6df89d24dc89b663c67b6
Certificate serial:       0D4D35
Authority key identifier: B5:24:EE:78:56:06:DD:F9:B4:D2:AC:F4:E7:6B:05:B0:E4:27:64:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/f527866a991c5f0e0e58f5737b9132575b6ac9f8.roa
Signing time:             Wed 24 Mar 2021 14:40:51 +0000
ROA not before:           Wed 24 Mar 2021 14:40:50 +0000
ROA not after:            Tue 24 Mar 2026 14:40:50 +0000
asID:                     266839
IP address blocks:        181.191.232.0/22 maxlen: 24
                          2803:8820::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871733 (0xd4d35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff66b8a7de8fbaabda6df89d24dc89b663c67b6
        Validity
            Not Before: Mar 24 14:40:50 2021 GMT
            Not After : Mar 24 14:40:50 2026 GMT
        Subject: CN=f527866a991c5f0e0e58f5737b9132575b6ac9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:99:21:c0:9e:92:e1:61:2d:a4:e3:cb:7f:3e:
                    9d:98:29:2a:da:46:84:cf:8d:2d:fd:ab:81:11:b3:
                    4a:ce:cd:5f:3c:b4:9e:4a:93:85:1f:d8:ec:24:f9:
                    25:14:9f:3e:a2:b5:fe:39:ff:97:b7:6b:b5:2c:d6:
                    dd:49:e3:b2:72:bb:9a:43:f6:ce:74:32:03:7f:ff:
                    99:5f:11:ed:83:77:3e:2a:2d:7c:7b:86:47:61:ce:
                    4d:6b:8b:00:bd:74:e7:97:78:46:99:fd:af:6d:92:
                    a6:2d:9b:5a:3a:fa:41:8a:8e:b8:4c:9a:87:20:b4:
                    0e:6d:de:2b:8e:96:d2:c1:a1:08:ca:44:b7:98:30:
                    1e:f4:96:39:5b:f7:c8:69:7b:4c:77:86:18:36:75:
                    fd:78:0a:12:99:ae:ad:49:a7:10:78:0a:4d:29:21:
                    0e:01:8b:6a:26:46:e1:e5:6a:1f:91:2d:7a:12:68:
                    5b:81:f0:48:34:62:fc:41:ca:ba:61:0d:df:fc:6a:
                    83:86:cf:0c:c7:73:0a:95:3b:59:b8:42:7e:8c:da:
                    c4:47:53:25:b3:4c:a8:95:97:7e:6f:5d:44:98:14:
                    86:46:29:97:b3:90:e0:d9:5b:e6:98:22:bb:58:fe:
                    d7:dd:e3:7b:cb:bb:01:c6:e5:2e:5e:95:30:eb:0c:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A4:26:17:8B:A2:BB:5B:C7:68:63:73:07:3C:E8:85:14:6C:DB:F0
            X509v3 Authority Key Identifier:
                keyid:B5:24:EE:78:56:06:DD:F9:B4:D2:AC:F4:E7:6B:05:B0:E4:27:64:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/f527866a991c5f0e0e58f5737b9132575b6ac9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.232.0/22
                IPv6:
                  2803:8820::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:d6:40:f7:15:9b:6d:f8:0f:ea:f3:41:9a:8b:0d:61:d0:5b:
         00:67:96:07:e7:6a:d5:c8:ef:ed:bf:e9:b7:ce:68:64:f7:dc:
         6c:d3:6e:e2:a1:30:6c:28:d4:78:e6:59:0f:23:bc:d2:86:a1:
         1f:76:7c:df:45:6d:3c:8e:8d:21:bb:11:3b:94:b1:78:4b:98:
         87:db:71:f9:7c:7e:66:b1:88:0f:9a:fc:96:28:51:91:d2:06:
         d1:ba:85:84:90:84:01:3c:64:91:b1:0f:c2:50:44:a1:75:b5:
         5c:da:4c:ad:98:f3:02:f8:60:28:8a:8e:70:da:24:50:62:61:
         16:4b:ac:44:11:a9:e4:3c:59:39:d8:e9:c7:fc:15:61:80:ea:
         74:77:cb:dc:21:6e:62:cc:9c:7e:19:64:fa:4a:5f:2a:1e:a2:
         d7:af:fa:78:df:53:19:af:35:98:c2:26:c5:c1:30:bd:1f:76:
         e5:29:72:69:c5:df:1b:42:3a:8a:25:98:c8:c4:fb:4c:e2:2b:
         86:7e:b8:47:34:fa:08:96:1e:5e:45:2a:ea:92:e0:df:f7:c2:
         f6:17:63:d2:f0:7a:30:aa:1e:a7:cf:86:b2:5b:80:79:4c:31:
         08:f1:c1:68:eb:68:b4:52:f5:5a:2f:14:2b:e4:54:07:7b:fc:
         b8:28:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----