Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1676f1d-6ef1-4402-89c1-507345c9d2f0/7e938847cde954d3c9de9fff4f92286d0f27724b.roa
File:                     7e938847cde954d3c9de9fff4f92286d0f27724b.roa (raw, json)
Hash identifier:          sl2yDwX7+lifmUIK7S5rzG5J3ov72siJTIf/GuTmTtk=
Subject key identifier:   87:35:35:1A:9C:4D:8E:5A:AD:80:33:C7:5A:94:1C:0D:EA:05:07:6A
Certificate issuer:       /CN=5e8c8f9dcd3993cbc0fbaef96ef286a3dde70d1e
Certificate serial:       0C0E80
Authority key identifier: 3D:A6:CE:6D:5F:A4:66:2B:A4:A9:05:F3:61:97:87:25:05:43:B1:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e8c8f9dcd3993cbc0fbaef96ef286a3dde70d1e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a1676f1d-6ef1-4402-89c1-507345c9d2f0/7e938847cde954d3c9de9fff4f92286d0f27724b.roa
Signing time:             Wed 24 Mar 2021 14:42:48 +0000
ROA not before:           Wed 24 Mar 2021 14:42:48 +0000
ROA not after:            Tue 24 Mar 2026 14:42:48 +0000
asID:                     28056
IP address blocks:        200.0.18.0/24 maxlen: 24
                          2001:13c7:6003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790144 (0xc0e80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8c8f9dcd3993cbc0fbaef96ef286a3dde70d1e
        Validity
            Not Before: Mar 24 14:42:48 2021 GMT
            Not After : Mar 24 14:42:48 2026 GMT
        Subject: CN=7e938847cde954d3c9de9fff4f92286d0f27724b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a2:67:6b:f3:09:b7:a5:b5:1f:97:cf:19:a3:
                    b7:dc:09:c2:58:bb:d7:cc:a8:61:12:0f:19:bc:95:
                    11:1b:95:8e:75:29:d9:73:00:c1:e8:21:10:1e:d8:
                    d4:65:d5:e8:08:3f:d4:81:6a:83:45:8d:22:12:20:
                    c9:d0:5b:7a:6a:37:c1:bd:f7:5d:6a:16:69:bd:53:
                    63:ba:46:43:5b:ef:8a:41:f8:c4:a2:a0:4a:f7:57:
                    38:0e:b4:2a:22:91:5f:20:3a:2b:a7:42:af:18:24:
                    e5:92:39:42:0f:19:1b:0a:18:9d:8a:42:7f:ad:92:
                    3b:21:21:3e:f8:f9:37:15:a3:61:2d:eb:c8:07:f7:
                    86:5d:c1:8d:22:c5:35:b4:84:1c:2f:dc:2c:40:c7:
                    91:ff:62:56:7c:68:fc:3b:26:af:b9:bd:b7:25:99:
                    ae:51:f2:42:b0:c8:21:6f:41:03:ee:04:60:31:ca:
                    da:97:f8:1f:a9:be:48:1c:e8:c8:c9:77:5e:d0:10:
                    a9:0c:20:39:43:64:8d:a7:4c:f3:aa:e1:12:a0:bc:
                    7e:b2:74:02:95:15:45:91:be:74:30:8e:37:32:c8:
                    cf:99:59:86:fc:ec:b9:11:02:77:3a:04:85:4c:f8:
                    cd:1a:4a:af:d4:71:97:4a:d0:ec:61:a7:44:ac:68:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:35:35:1A:9C:4D:8E:5A:AD:80:33:C7:5A:94:1C:0D:EA:05:07:6A
            X509v3 Authority Key Identifier:
                keyid:3D:A6:CE:6D:5F:A4:66:2B:A4:A9:05:F3:61:97:87:25:05:43:B1:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e8c8f9dcd3993cbc0fbaef96ef286a3dde70d1e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1676f1d-6ef1-4402-89c1-507345c9d2f0/7e938847cde954d3c9de9fff4f92286d0f27724b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a1676f1d-6ef1-4402-89c1-507345c9d2f0/5e8c8f9dcd3993cbc0fbaef96ef286a3dde70d1e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.18.0/24
                IPv6:
                  2001:13c7:6003::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:f3:ae:de:8d:f5:ff:e5:02:8b:1c:99:39:85:48:d6:4f:30:
         00:ed:57:77:d4:2a:d5:cc:12:79:c3:eb:28:b5:1f:88:81:35:
         c6:68:ba:fe:46:3d:0e:ac:40:10:f7:a3:a7:4a:57:42:11:a4:
         0f:d6:69:64:db:bf:c6:68:eb:e8:52:6e:41:65:dd:05:98:da:
         74:23:a5:5f:29:ce:15:a5:0f:c8:82:00:a2:e5:fb:d4:1e:d4:
         09:59:56:c7:77:ac:04:23:19:7f:b8:6a:11:3c:7c:d3:05:65:
         2b:58:3e:aa:a1:dc:f8:41:ae:d9:02:c6:25:17:0c:d9:f6:cc:
         ea:66:d2:75:81:18:af:51:7f:cb:e0:d2:68:b7:cd:cb:6f:3a:
         23:a9:58:53:29:56:9e:cd:f0:70:7b:fd:11:b8:b7:41:64:5f:
         02:21:02:06:15:b2:71:6f:41:b6:e9:58:38:64:c0:05:74:e2:
         e4:55:b5:c1:50:1b:1d:06:01:c1:bf:52:81:43:7c:8d:60:a6:
         ec:94:02:cc:0a:88:e3:9e:8f:19:08:22:09:eb:aa:a9:ac:58:
         76:40:e1:76:ea:30:29:be:ae:03:c1:09:9f:10:52:07:fb:be:
         1b:3b:76:26:f8:d6:2b:95:9c:38:30:21:f9:1f:6d:64:49:b4:
         0a:a2:91:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----