Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92142a74-1778-410d-bd44-01664f7a9d1c/d2fac3188e35004edb2ccf19085e330c222c06c4.roa
File:                     d2fac3188e35004edb2ccf19085e330c222c06c4.roa (raw, json)
Hash identifier:          Pp+T/Q7k5/9Bb1+NGjG7TgBu0QxmwuVccqzo+I+dDXo=
Subject key identifier:   00:80:3C:75:E0:78:48:1C:7E:2A:6E:1D:C1:32:6C:8F:35:EE:47:78
Certificate issuer:       /CN=bb4fd535c300d54ba9be3ddfdc8df3424c4467d4
Certificate serial:       033737
Authority key identifier: 53:45:61:AD:EE:66:46:6B:06:3A:56:80:93:87:9F:18:C1:E2:7A:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb4fd535c300d54ba9be3ddfdc8df3424c4467d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92142a74-1778-410d-bd44-01664f7a9d1c/d2fac3188e35004edb2ccf19085e330c222c06c4.roa
Signing time:             Wed 24 Mar 2021 14:29:04 +0000
ROA not before:           Wed 24 Mar 2021 14:29:04 +0000
ROA not after:            Tue 24 Mar 2026 14:29:04 +0000
asID:                     52354
IP address blocks:        181.224.184.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210743 (0x33737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4fd535c300d54ba9be3ddfdc8df3424c4467d4
        Validity
            Not Before: Mar 24 14:29:04 2021 GMT
            Not After : Mar 24 14:29:04 2026 GMT
        Subject: CN=d2fac3188e35004edb2ccf19085e330c222c06c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:ea:d3:fd:98:64:5c:9d:b9:e6:e8:44:9d:
                    80:e1:7f:bb:3b:b3:6f:cc:aa:16:49:82:f0:c6:72:
                    81:63:41:1c:a0:fb:c1:bc:99:dd:56:cd:74:f8:c8:
                    b3:e9:83:e6:11:01:74:56:01:4d:ce:1c:1b:be:3c:
                    d2:2f:d7:a7:14:30:a0:5f:b2:fa:dd:cc:c4:44:3e:
                    4d:ab:32:98:72:78:46:05:73:82:4c:bc:24:30:39:
                    39:41:b9:74:c1:9b:ba:93:4f:3e:67:b4:11:c7:b1:
                    56:63:b3:93:42:23:1e:dd:9f:e0:32:cf:64:73:15:
                    ed:dc:2b:11:e3:3f:d5:31:80:14:db:7a:f5:fe:01:
                    cd:79:67:9d:95:8b:bc:27:35:e0:5c:e1:15:77:83:
                    c7:dd:2d:e6:1c:ac:b3:6d:5c:ab:69:64:8d:8b:7f:
                    38:9c:b8:91:7c:06:d7:55:f6:5f:13:4e:43:5f:20:
                    2f:96:c4:03:7a:7f:a5:50:94:f9:fd:c0:46:4d:ae:
                    55:aa:15:e7:72:17:c3:96:5f:d1:cf:8f:ce:b8:7e:
                    54:e2:8d:7c:eb:b9:67:17:74:8e:fa:4c:db:99:ca:
                    ac:89:a4:02:27:01:ea:f9:52:48:e1:65:40:f4:e9:
                    b8:e3:b7:e9:4d:af:08:c0:85:05:28:f4:75:e7:31:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:80:3C:75:E0:78:48:1C:7E:2A:6E:1D:C1:32:6C:8F:35:EE:47:78
            X509v3 Authority Key Identifier:
                keyid:53:45:61:AD:EE:66:46:6B:06:3A:56:80:93:87:9F:18:C1:E2:7A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb4fd535c300d54ba9be3ddfdc8df3424c4467d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92142a74-1778-410d-bd44-01664f7a9d1c/d2fac3188e35004edb2ccf19085e330c222c06c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92142a74-1778-410d-bd44-01664f7a9d1c/bb4fd535c300d54ba9be3ddfdc8df3424c4467d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c6:72:9c:86:0c:90:48:ee:ac:05:af:92:87:58:f4:25:66:6b:
         6e:5b:54:bc:6c:a6:8d:33:47:7e:55:9c:a6:1b:7c:ae:33:39:
         41:e0:8b:85:2b:2a:eb:5a:41:7f:5a:a9:28:84:91:31:17:47:
         15:f3:96:23:b2:dc:21:15:8b:1b:d3:64:56:6c:50:60:a1:c6:
         c4:ea:0a:c3:08:0a:28:4a:3c:e6:3b:8f:23:96:25:0b:71:a4:
         6a:6f:c1:1c:f1:27:85:3c:ef:f4:a9:2f:0d:99:10:ee:9f:0a:
         7f:47:e8:18:d0:2f:35:e2:bd:68:da:ec:b2:cb:3d:ef:62:3a:
         a1:d8:b9:28:f0:bf:6d:96:a2:c2:22:67:39:a2:09:a0:03:f8:
         35:b6:dd:3b:6b:0f:1d:71:fc:75:02:b2:95:d0:ac:fd:ad:d0:
         c5:3f:14:db:30:af:dc:88:d4:69:09:4f:5b:0a:c4:4f:49:44:
         19:51:d1:25:3f:7c:4d:fd:6d:9a:f7:2d:34:0b:b1:83:75:40:
         cf:57:81:f8:e2:42:ab:e0:ee:54:7b:c3:96:09:a7:4c:1b:99:
         d3:c6:60:77:5b:59:c3:55:fc:ee:75:a8:f5:35:0d:40:54:50:
         08:09:9d:ee:e1:6d:91:ce:07:75:18:eb:a9:0b:d3:d0:2a:81:
         1f:49:e7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----