Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93e54eab-d710-4982-b577-6da5f0077d85/61af3ac8c3ae7857df7cf1c7766e28d30fdab510.roa
File:                     61af3ac8c3ae7857df7cf1c7766e28d30fdab510.roa (raw, json)
Hash identifier:          IBDDnXJBEfcn2S1OJ8a2hzU1e9gn4rBB1vDlfpx/B/M=
Subject key identifier:   18:FD:6C:08:65:1B:09:98:C8:01:9C:45:A0:FA:71:16:69:FB:97:74
Certificate issuer:       /CN=4f53fcfde23625867afb2a1134998b78d084d178
Certificate serial:       0D854A
Authority key identifier: 30:64:58:57:D8:52:31:DA:3F:40:12:99:3F:66:02:A4:76:40:23:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f53fcfde23625867afb2a1134998b78d084d178.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93e54eab-d710-4982-b577-6da5f0077d85/61af3ac8c3ae7857df7cf1c7766e28d30fdab510.roa
Signing time:             Wed 24 Mar 2021 14:32:54 +0000
ROA not before:           Wed 24 Mar 2021 14:32:54 +0000
ROA not after:            Tue 24 Mar 2026 14:32:54 +0000
asID:                     27839
IP address blocks:        200.107.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886090 (0xd854a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f53fcfde23625867afb2a1134998b78d084d178
        Validity
            Not Before: Mar 24 14:32:54 2021 GMT
            Not After : Mar 24 14:32:54 2026 GMT
        Subject: CN=61af3ac8c3ae7857df7cf1c7766e28d30fdab510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:68:5a:40:bb:70:93:8c:ad:e4:b3:26:43:
                    cc:9c:92:13:0e:72:75:9c:92:e0:c1:1f:92:20:74:
                    1f:20:44:31:82:37:9b:74:fa:c7:67:62:7b:de:5f:
                    89:a1:28:ff:38:8f:eb:9f:94:00:b4:44:34:32:b0:
                    92:34:bd:8e:19:a8:e5:92:a0:41:95:ef:6c:2a:30:
                    bb:b7:69:2a:ee:9b:cb:76:cf:d9:18:dd:14:ad:08:
                    d7:ba:48:4e:df:5c:9d:85:59:24:d5:df:7f:78:f9:
                    ad:e9:9d:df:31:7f:b1:99:db:d7:f9:76:df:f2:b5:
                    5e:77:73:18:97:8b:c4:f7:85:cb:8d:81:6e:31:46:
                    01:eb:96:12:6a:1a:e8:ce:d3:a1:19:92:c6:f4:87:
                    c4:a5:9e:88:72:f1:84:93:5d:68:bc:61:a1:e7:25:
                    32:ae:52:15:2b:3a:00:18:0b:19:5c:42:4d:7e:25:
                    b5:19:9b:e5:b7:80:aa:12:9d:cd:84:e9:53:e4:a7:
                    42:c4:00:26:09:bc:3c:5d:9e:df:ae:6c:c2:8a:4c:
                    5f:d3:48:f3:37:b2:9f:43:e6:02:d7:51:55:f9:17:
                    f2:0c:2e:34:5d:29:dc:0c:95:f7:46:23:6d:64:e3:
                    f7:ca:15:c0:e6:24:d9:12:10:32:e0:2f:57:d7:0a:
                    4e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FD:6C:08:65:1B:09:98:C8:01:9C:45:A0:FA:71:16:69:FB:97:74
            X509v3 Authority Key Identifier:
                keyid:30:64:58:57:D8:52:31:DA:3F:40:12:99:3F:66:02:A4:76:40:23:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f53fcfde23625867afb2a1134998b78d084d178.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93e54eab-d710-4982-b577-6da5f0077d85/61af3ac8c3ae7857df7cf1c7766e28d30fdab510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93e54eab-d710-4982-b577-6da5f0077d85/4f53fcfde23625867afb2a1134998b78d084d178.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:0b:8f:97:e1:1d:a5:c2:2e:c4:2f:58:5b:b6:0f:76:c3:84:
         f4:b9:98:62:09:c0:96:ab:f5:d8:d7:ad:dc:12:f7:42:a1:c2:
         73:83:c9:1d:20:67:31:d9:f0:1b:0a:1b:d1:b3:9f:36:d8:a1:
         3c:8a:d7:c9:f0:8f:af:3f:49:c2:e8:04:1f:74:ec:4b:26:f3:
         ab:d9:b0:b6:0e:16:ee:a1:47:5f:79:f6:30:d8:f7:d0:49:ba:
         de:63:c6:b9:49:77:4c:c6:3b:25:d4:62:74:ca:95:2d:f4:0f:
         25:01:49:0b:be:1a:83:ba:b1:a9:13:9c:8e:2a:3b:4b:e7:cd:
         51:f9:a5:76:9e:4a:9d:cf:24:44:6f:8d:8f:18:de:38:3e:ac:
         4f:12:cb:96:1e:76:dc:90:e0:27:7c:7b:fe:8f:e6:ce:11:ea:
         9a:3b:b1:d3:1e:a1:73:97:db:de:2f:84:24:5a:3d:0a:e5:fd:
         77:a0:a3:a0:34:fc:ee:a7:31:4e:e0:1d:29:ef:9d:3f:3f:63:
         e2:b6:92:a2:29:66:bb:3e:e1:b2:a9:22:11:78:d6:0e:d9:7c:
         6d:06:f4:40:bd:91:f3:de:76:28:67:97:0f:52:08:76:82:ad:
         87:d4:13:e8:49:bf:50:d3:98:92:dd:e8:1a:f2:f7:ad:8f:26:
         47:f0:f0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----