Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/286f1a9ea6e0fe7b510f13ef49f17ccf79ce7faf.roa
File:                     286f1a9ea6e0fe7b510f13ef49f17ccf79ce7faf.roa (raw, json)
Hash identifier:          WVFhIjluaIu6V9oUPS+ysgdzmZnx+ecUmBJdllLIIZ4=
Subject key identifier:   CF:96:50:13:E7:E8:C4:4D:45:8C:04:4A:D1:BF:1C:4C:F4:C0:EF:47
Certificate issuer:       /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial:       0D3AA7
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/286f1a9ea6e0fe7b510f13ef49f17ccf79ce7faf.roa
Signing time:             Wed 24 Mar 2021 14:35:02 +0000
ROA not before:           Wed 24 Mar 2021 14:35:01 +0000
ROA not after:            Tue 24 Mar 2026 14:35:01 +0000
asID:                     27817
IP address blocks:        190.14.239.128/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866983 (0xd3aa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
        Validity
            Not Before: Mar 24 14:35:01 2021 GMT
            Not After : Mar 24 14:35:01 2026 GMT
        Subject: CN=286f1a9ea6e0fe7b510f13ef49f17ccf79ce7faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:ea:18:b8:55:b3:80:39:6a:cf:de:d6:c9:
                    36:58:fd:ba:92:0d:3e:3d:5a:a3:91:9d:7e:17:2f:
                    a9:c5:a8:52:8a:49:97:11:6c:b5:60:ee:ba:75:97:
                    34:f1:d0:0a:62:58:24:1b:3b:ef:fa:66:7b:67:7b:
                    18:bc:73:a2:08:68:79:e8:2d:23:9d:9d:3b:f8:37:
                    41:73:94:ca:8e:7a:e7:20:ab:04:2e:bc:e4:57:df:
                    5f:bb:c2:c6:01:12:c1:d7:12:8c:1f:79:13:32:f8:
                    f1:ea:99:88:8f:d2:af:b2:87:4a:91:3d:aa:fe:aa:
                    69:60:f3:63:44:30:c0:23:b9:3c:59:b9:b2:81:8d:
                    79:43:fa:39:40:8e:8a:68:98:b8:14:87:ce:f9:ed:
                    1f:3c:32:bd:8c:d4:c7:bd:d5:3c:12:cb:6a:fd:43:
                    f2:c3:bc:ef:17:a3:15:80:b7:e6:1d:33:74:3d:2f:
                    d1:3b:6e:ad:39:44:39:93:89:2c:f6:9c:4e:15:0d:
                    85:ed:a6:6a:a7:b3:94:a5:cb:cf:e5:46:00:85:2d:
                    74:b0:29:01:df:2a:2c:42:bc:c5:75:13:e4:9b:38:
                    8b:c4:83:26:c1:ad:f2:93:d9:2e:e9:82:ed:dc:68:
                    ac:55:c5:d0:a9:5b:1a:c2:f0:94:d4:d7:95:ab:5f:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:96:50:13:E7:E8:C4:4D:45:8C:04:4A:D1:BF:1C:4C:F4:C0:EF:47
            X509v3 Authority Key Identifier:
                keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/286f1a9ea6e0fe7b510f13ef49f17ccf79ce7faf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.239.128/25

    Signature Algorithm: sha256WithRSAEncryption
         b4:83:f7:68:3d:41:f8:aa:46:5b:7b:14:de:c3:47:2f:e6:fe:
         c5:00:0d:ba:bf:f0:69:95:ac:2b:6a:82:f6:0a:32:7a:b7:8e:
         74:f9:a5:90:fb:cc:d1:39:5d:88:f1:51:8e:56:7b:de:f2:30:
         3f:fb:b6:b3:f5:6e:ec:de:bb:1a:fd:57:2d:db:ef:ae:01:da:
         8e:62:ec:d7:c1:bd:8b:19:7e:5e:f1:06:9d:7c:33:75:c2:bc:
         dd:0d:17:d5:e5:2a:7c:c8:12:85:bb:c8:57:54:c9:ff:a1:bd:
         7b:13:1d:0e:7c:58:f7:f7:8c:9c:89:87:23:32:40:80:bd:ff:
         34:6f:1e:1d:2d:a8:2f:e0:a2:ac:f5:76:3d:5b:ff:6b:40:58:
         2b:39:7d:de:cb:6c:44:f2:d9:67:9f:4c:a9:23:45:e8:fe:d2:
         c3:d5:2d:74:ac:d0:11:01:ac:c4:ee:cf:d2:6b:4a:47:22:5f:
         b6:b3:94:ec:41:80:d6:ac:5f:ad:91:b9:5a:52:81:be:13:0b:
         12:11:48:68:d3:d1:e2:f6:04:aa:94:20:0a:f9:18:df:56:ad:
         8d:03:96:98:e1:6d:a7:df:3f:6f:8d:35:43:41:06:96:39:6f:
         ba:07:35:bf:46:ce:b0:60:84:d5:e5:75:f8:00:a9:d1:56:76:
         c1:cc:f9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----