Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/5103dfea1c9bbf705d60c836949e49176fd588cd.roa
File:                     5103dfea1c9bbf705d60c836949e49176fd588cd.roa (raw, json)
Hash identifier:          Uusa63L+8f3EGwTy3ugzSig/KDWL0UfXh1rpLfhWmLE=
Subject key identifier:   3E:04:7C:A2:01:03:0D:AA:F9:86:58:F9:75:1F:25:28:5B:BA:42:F3
Certificate issuer:       /CN=ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8
Certificate serial:       131A12
Authority key identifier: 89:45:5B:B7:4F:80:8D:EB:D1:D4:05:DA:C8:34:E4:27:DC:2B:30:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/5103dfea1c9bbf705d60c836949e49176fd588cd.roa
Signing time:             Wed 03 Nov 2021 21:00:24 +0000
ROA not before:           Wed 03 Nov 2021 21:00:23 +0000
ROA not after:            Tue 03 Nov 2026 21:00:23 +0000
asID:                     265696
IP address blocks:        131.196.208.0/22 maxlen: 23
                          2801:19:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251858 (0x131a12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8
        Validity
            Not Before: Nov  3 21:00:23 2021 GMT
            Not After : Nov  3 21:00:23 2026 GMT
        Subject: CN=5103dfea1c9bbf705d60c836949e49176fd588cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:6c:1e:5a:c5:e4:45:fe:82:3b:f4:71:47:
                    6e:44:da:13:cc:7d:d3:bc:5e:22:ec:20:77:e8:fa:
                    cb:0e:59:07:3e:fa:87:9d:ff:e6:3b:d1:fa:46:a9:
                    4c:a4:4e:df:2a:89:15:16:60:db:77:71:31:2d:74:
                    d1:2c:22:46:67:05:af:2c:99:4b:d0:50:74:c7:e4:
                    d3:0e:b2:16:cd:c0:33:71:d3:88:66:74:5d:9b:d4:
                    db:df:c8:89:e2:6c:da:43:33:0b:b7:bc:45:51:0c:
                    ec:3e:c7:91:05:1c:89:5f:28:b7:bd:23:29:38:a3:
                    6e:a4:45:35:54:f8:66:90:e1:a5:78:6e:96:8b:64:
                    61:02:9d:c1:8a:bc:b4:86:16:74:8d:cc:2a:52:d2:
                    53:42:9c:72:6b:13:85:97:97:16:0a:7f:5d:c2:52:
                    bf:7d:8b:8b:f4:7c:40:bc:4f:9d:32:e3:7c:64:64:
                    85:1f:2c:74:1c:ad:a9:10:43:32:04:d5:48:78:74:
                    e7:72:2b:69:94:ef:ae:41:8d:33:84:2c:54:73:4f:
                    54:90:2d:ea:b9:10:ec:5d:11:85:7e:6d:07:91:df:
                    d3:99:ad:78:ee:2b:28:42:33:f4:73:54:53:cb:11:
                    08:1d:49:36:07:70:e6:31:0c:04:75:12:b4:53:fc:
                    23:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:04:7C:A2:01:03:0D:AA:F9:86:58:F9:75:1F:25:28:5B:BA:42:F3
            X509v3 Authority Key Identifier:
                keyid:89:45:5B:B7:4F:80:8D:EB:D1:D4:05:DA:C8:34:E4:27:DC:2B:30:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/5103dfea1c9bbf705d60c836949e49176fd588cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.208.0/22
                IPv6:
                  2801:19:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:bc:f5:e2:c0:93:ce:e8:52:c2:58:c5:43:ce:4a:74:58:f3:
         6b:08:06:28:18:74:ec:bd:96:5f:74:5f:6f:27:f1:9f:94:2a:
         a0:98:f9:fe:f8:83:7f:45:bb:6e:50:7b:41:ca:25:71:91:3d:
         df:4f:9b:ba:4b:4e:60:aa:f4:41:3b:19:98:8b:8b:dd:9c:3a:
         6c:5a:bf:0b:9f:27:68:b5:62:eb:09:90:a4:97:69:9f:de:b6:
         37:1b:15:52:bd:bc:36:cf:57:99:7d:ff:cb:9b:80:33:b2:b6:
         f7:11:ae:91:a6:2e:01:fc:ed:1a:65:eb:4a:b5:68:46:3b:84:
         c2:c3:c1:1e:9e:26:69:a4:77:f3:d1:7b:49:d0:02:27:86:42:
         23:6c:ad:75:9f:74:bb:97:3a:c2:2a:50:95:32:60:ec:9e:93:
         0d:f1:99:12:1d:f4:8a:88:eb:3f:fb:a7:6d:c5:08:09:37:00:
         c9:86:35:24:fb:f8:cc:13:13:5f:70:a6:f7:d3:86:54:b0:96:
         a9:ed:3d:08:3a:c8:6d:e9:40:84:d4:0f:93:1f:af:aa:8e:5a:
         bf:ff:a4:80:48:8d:72:33:f0:f4:9a:12:a2:8f:bc:35:ca:79:
         87:e0:09:48:67:f3:9d:c1:b7:fb:16:26:5b:e2:5c:4a:fb:53:
         69:f9:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----