Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/f079cdfd10ad521f8e56b40fcd6daa8e74a77bc0.roa
File:                     f079cdfd10ad521f8e56b40fcd6daa8e74a77bc0.roa (raw, json)
Hash identifier:          266kbrSjpq/d08GtQj/Cl0zCluH7ITbZWx5L1AF7W48=
Subject key identifier:   DD:33:1B:D7:F1:82:CC:89:BF:60:15:D8:9D:5B:A8:0B:6E:E3:87:36
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A2E88
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/f079cdfd10ad521f8e56b40fcd6daa8e74a77bc0.roa
Signing time:             Wed 24 Mar 2021 14:43:21 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        189.202.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667272 (0xa2e88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=f079cdfd10ad521f8e56b40fcd6daa8e74a77bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:ad:d8:83:7e:3a:fb:b1:7c:25:4f:b3:83:
                    5a:36:5a:3c:7f:95:48:39:83:46:2b:54:a0:ef:32:
                    8e:16:da:bc:c4:17:b9:2b:ad:14:dd:78:49:c8:97:
                    db:2d:d8:fc:58:65:60:db:49:0d:59:c5:b0:e9:66:
                    a9:2e:b3:d2:25:3d:02:2d:a4:a4:94:7d:8a:99:e5:
                    f0:de:b6:ed:7e:e6:77:84:e0:ff:d5:32:4b:e5:01:
                    1b:fa:e2:58:93:c8:6b:78:8f:79:cf:40:28:e4:d4:
                    4a:ca:43:91:ea:e8:32:fb:c6:f6:75:a4:75:05:81:
                    3c:38:70:ef:fd:1a:91:f0:49:5b:41:47:2a:db:fc:
                    ee:cf:9c:7d:3a:31:c0:e9:ca:6b:66:86:f6:1a:cf:
                    4f:45:ab:57:46:ae:69:0c:04:bc:61:7f:74:db:fe:
                    db:0a:91:a8:43:87:57:d4:ec:70:b2:c1:c0:21:0f:
                    23:9a:fd:3a:b2:b5:f0:b0:62:6a:04:a5:15:79:35:
                    e9:86:1c:14:de:23:31:82:0c:84:9f:1f:a5:7a:db:
                    26:04:e2:d2:4b:6d:77:1f:6d:6e:70:7a:ce:d3:0c:
                    7a:ba:29:18:af:e5:05:c0:51:98:33:38:d2:89:71:
                    ec:47:14:93:e7:b7:4a:9b:42:0f:3d:cf:76:73:ce:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:33:1B:D7:F1:82:CC:89:BF:60:15:D8:9D:5B:A8:0B:6E:E3:87:36
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/f079cdfd10ad521f8e56b40fcd6daa8e74a77bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8b:60:b3:87:bb:29:63:12:6e:6e:23:61:19:7e:88:94:cb:a4:
         96:5b:70:47:1c:30:82:38:eb:ab:21:b6:7a:bb:6f:a1:f7:28:
         7f:bf:40:fb:45:1a:6a:c5:67:a4:4a:27:59:d9:ad:64:23:33:
         29:39:48:5c:db:96:44:e5:1f:ed:72:e6:b3:fc:46:f0:4c:95:
         a0:ab:42:89:28:52:7c:b5:a1:73:3a:dc:4a:53:cc:05:b5:80:
         82:44:c5:a4:4f:9f:18:ba:a0:91:25:c7:f3:f8:de:fb:fb:12:
         18:db:10:5f:b1:88:0c:63:99:f4:56:9a:6b:55:51:61:23:4f:
         35:99:6b:92:ea:df:8b:0a:09:32:b7:24:d0:45:43:5b:98:32:
         84:e1:1e:31:fb:ea:b4:a4:8f:d3:39:e7:0b:25:44:b0:7b:0f:
         e2:00:62:15:18:18:cd:85:d1:04:d7:e6:c3:c2:e2:36:09:74:
         c0:9e:da:06:ad:48:ca:67:32:58:d3:09:a6:17:4b:5a:07:d8:
         b8:a4:41:74:b1:e0:ce:ae:7f:bf:49:b5:a7:e1:4b:f6:b7:e7:
         32:65:00:4b:f3:2a:a3:c3:d4:5d:a0:e2:13:06:ea:cd:0a:03:
         af:48:bc:de:61:19:e9:38:21:d8:52:e4:e5:6f:54:be:99:ce:
         78:11:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----