Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/372ea1c71703030030aabbd340fcec3a13012e60.roa
File:                     372ea1c71703030030aabbd340fcec3a13012e60.roa (raw, json)
Hash identifier:          3lKPveU+eOwUKn6dYr0tCpBKh/E0ni5O+XyaK1w97dI=
Subject key identifier:   2A:EC:98:4E:02:AF:68:18:8A:BF:4B:14:DF:4F:84:89:C3:5F:79:0C
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       0A9770
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/372ea1c71703030030aabbd340fcec3a13012e60.roa
Signing time:             Wed 24 Mar 2021 14:34:12 +0000
ROA not before:           Wed 24 Mar 2021 14:34:12 +0000
ROA not after:            Tue 24 Mar 2026 14:34:12 +0000
asID:                     11340
IP address blocks:        146.83.0.0/16 maxlen: 24
                          2001:1310::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694128 (0xa9770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: Mar 24 14:34:12 2021 GMT
            Not After : Mar 24 14:34:12 2026 GMT
        Subject: CN=372ea1c71703030030aabbd340fcec3a13012e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:f5:a6:2f:bb:61:52:66:6c:40:ef:f9:c6:
                    74:0e:a5:a8:b8:f2:1e:51:03:ff:30:51:6c:53:12:
                    84:10:7b:2f:1d:83:37:15:fb:80:9c:8d:4c:b7:b3:
                    67:18:db:1b:d0:e3:ed:00:ca:8f:14:c7:81:15:08:
                    13:5a:2d:18:7b:a1:70:ec:1f:62:fe:30:2c:7f:bb:
                    12:a5:d2:00:d1:8b:67:54:01:36:ec:1d:73:41:33:
                    bc:62:07:75:a9:02:93:20:76:af:49:8e:5b:1d:42:
                    e0:78:8f:0e:59:68:39:04:c0:cf:72:e7:4b:9a:b9:
                    81:81:35:20:50:dc:fc:f7:58:dd:98:68:3d:6b:4d:
                    b6:ac:f7:e4:8b:55:1a:e4:38:89:ec:76:0c:22:fb:
                    56:e8:d3:3f:c7:41:0b:5c:d6:a9:4a:bf:8a:82:3d:
                    a5:f0:14:29:a4:4b:be:64:cd:c4:79:95:10:46:75:
                    3e:46:56:d2:5a:ac:90:de:92:6a:de:39:82:a9:80:
                    5f:25:ec:f8:19:7b:35:fc:5b:ec:4f:11:ac:d6:1b:
                    6e:a1:db:c1:bc:24:76:87:15:0e:33:72:38:84:ef:
                    2e:11:78:d5:5c:d6:b0:20:4f:69:ea:14:25:1f:0b:
                    c6:e1:ee:1f:8c:9a:32:f9:ad:c7:9b:fd:4a:a4:a2:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EC:98:4E:02:AF:68:18:8A:BF:4B:14:DF:4F:84:89:C3:5F:79:0C
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/372ea1c71703030030aabbd340fcec3a13012e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.0.0/16
                IPv6:
                  2001:1310::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:75:b8:d6:57:20:25:37:d7:3b:9e:25:3f:e6:a0:ab:b6:03:
         14:a5:ca:10:d7:2e:5e:5c:98:35:86:2a:9b:a1:9f:df:aa:6f:
         ce:9e:ee:d9:36:77:63:3c:ce:e5:58:8e:9a:ff:b6:7d:db:ff:
         93:68:37:c9:c6:cb:32:09:f1:8d:c5:b3:94:ed:97:94:23:c4:
         e3:81:d1:f6:26:40:0e:7b:c8:da:f2:d6:0e:43:fc:9d:94:4a:
         0b:85:71:09:fb:3d:19:45:ee:eb:2c:d9:e5:22:a0:31:32:c4:
         e0:65:e9:da:f8:17:dd:d2:e4:93:76:6b:53:3e:ad:de:9f:71:
         84:a7:d0:9f:f9:8f:57:4b:80:18:81:d5:b0:b7:be:ce:86:f4:
         43:00:9b:7f:da:25:f9:b7:e9:d7:45:02:5d:ad:fb:fb:6c:a6:
         89:f8:2e:db:80:8c:3e:c5:2d:a6:3c:f1:ca:d9:ec:40:fd:2a:
         f2:5b:33:5e:35:06:bc:b1:0d:b7:47:39:bd:b8:79:3a:ac:e2:
         f6:8e:1d:67:33:1c:f8:e6:45:ff:d3:c0:4d:04:b7:41:1e:cd:
         82:8c:ac:ce:bc:9a:f0:37:f8:15:2e:91:3f:16:9d:34:15:8d:
         ce:10:cf:3b:47:70:fa:b9:99:67:3f:ef:3b:77:93:1b:4d:b2:
         5a:e2:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----