Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/3e236739167f75f14d1d98b448f78bedef00895e.roa
File:                     3e236739167f75f14d1d98b448f78bedef00895e.roa (raw, json)
Hash identifier:          XwlnPcN7NpxJ0gZu602tPuEsT0oOTeC6cMqm3hIs4ZQ=
Subject key identifier:   18:52:6D:60:99:31:56:B5:3D:11:DE:10:CB:F4:FE:BA:56:BA:88:03
Certificate issuer:       /CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
Certificate serial:       0D685C
Authority key identifier: C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/3e236739167f75f14d1d98b448f78bedef00895e.roa
Signing time:             Wed 24 Mar 2021 14:37:38 +0000
ROA not before:           Wed 24 Mar 2021 14:37:36 +0000
ROA not after:            Tue 24 Mar 2026 14:37:36 +0000
asID:                     52263
IP address blocks:        190.113.96.0/20 maxlen: 24
                          190.113.112.0/20 maxlen: 24
                          190.171.96.0/19 maxlen: 24
                          200.105.96.0/21 maxlen: 24
                          2803:1300::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878684 (0xd685c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
        Validity
            Not Before: Mar 24 14:37:36 2021 GMT
            Not After : Mar 24 14:37:36 2026 GMT
        Subject: CN=3e236739167f75f14d1d98b448f78bedef00895e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:55:79:6c:b4:ea:f0:05:5c:49:bb:f1:d6:
                    9b:13:0a:77:83:c8:fc:ce:5f:22:ea:e6:46:9f:ce:
                    0f:d1:a8:d7:cb:e8:b1:d4:61:4e:74:9b:a0:0b:b1:
                    4e:e1:86:74:d5:4d:2a:e7:b3:e8:98:9e:08:dd:02:
                    fa:77:a8:0f:db:1f:0c:ce:fd:58:e4:65:a7:a5:6d:
                    00:39:bb:ed:df:4d:8b:15:ec:49:34:6a:c0:43:e9:
                    f7:b1:3b:de:65:22:1a:19:7b:d0:dc:e6:37:ac:90:
                    43:26:6e:55:6c:25:bb:5f:a0:49:a5:4f:4f:4a:20:
                    aa:19:32:2e:94:80:2b:92:dc:a2:c1:df:3f:c8:66:
                    62:4f:37:c8:56:91:eb:70:8b:fa:cc:38:dd:45:dc:
                    ce:58:3b:0c:92:05:7b:5e:42:b0:bf:24:da:de:f1:
                    40:b1:4f:c6:f0:14:d0:65:f2:aa:47:15:fc:4e:bd:
                    d2:ae:88:db:39:86:ce:a9:34:aa:81:9d:a6:0a:36:
                    4a:37:ed:77:dd:11:70:81:33:db:c5:f3:8b:b5:22:
                    1c:73:bf:f5:0f:83:8f:ce:96:9c:ce:8f:a7:a7:e8:
                    09:dc:a3:cd:dc:ac:48:54:67:e9:07:42:06:bd:e2:
                    40:17:d3:87:70:df:aa:35:ae:6e:ae:95:2c:a0:90:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:52:6D:60:99:31:56:B5:3D:11:DE:10:CB:F4:FE:BA:56:BA:88:03
            X509v3 Authority Key Identifier:
                keyid:C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/3e236739167f75f14d1d98b448f78bedef00895e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.96.0/19
                  190.171.96.0/19
                  200.105.96.0/21
                IPv6:
                  2803:1300::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:9c:19:eb:06:d2:1d:46:9d:20:c4:3a:0c:72:13:71:33:a1:
         80:dd:fa:42:91:22:4b:ef:7e:20:bc:f9:63:81:8c:b0:ea:c8:
         33:e0:7e:c6:d3:5b:92:dd:9a:8a:4e:5b:8c:c8:5b:3f:78:d2:
         ef:a7:d3:0e:17:12:87:c9:fe:a3:2c:7a:b1:54:2e:a5:76:da:
         c7:3b:82:5e:b5:46:13:b7:8f:74:30:96:a3:02:78:47:da:84:
         db:c7:91:92:01:23:66:84:28:eb:95:f6:b3:12:2d:84:36:f3:
         b2:6a:33:c2:d5:82:77:dd:bf:8f:b4:d5:8b:bf:e2:d1:5a:5f:
         ee:a5:85:df:c0:4b:88:bc:d8:12:7e:21:93:b1:93:86:0b:10:
         47:f1:84:b0:43:33:df:d3:04:24:0a:aa:96:7c:4e:d2:cb:58:
         29:4e:c0:22:3e:10:40:38:4f:12:a6:b8:8f:8a:6e:a8:08:ab:
         f1:c3:97:80:e0:9a:7b:d0:4d:0a:2c:5d:6b:9e:73:ad:c6:6a:
         24:f0:ed:17:c2:ce:4d:32:b0:a2:d9:ee:45:79:96:fc:04:8c:
         86:a1:b3:f3:14:a6:b0:49:b4:14:ac:be:06:53:0c:45:9e:92:
         b7:85:e9:e9:6c:16:1e:1c:cf:56:5e:06:2b:02:33:cd:8d:97:
         e3:ff:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----