Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7ff4117-12d3-426d-b6ff-615cb20b7e29/f90c44f797909dcaf1966232a9ff6560a6f92195.roa
File:                     f90c44f797909dcaf1966232a9ff6560a6f92195.roa (raw, json)
Hash identifier:          +8/6TqKBCjiKHqRyIwzthMxlUDXuU6WMyx/7U1FA77I=
Subject key identifier:   C5:95:D2:92:2A:17:50:03:1C:E0:A6:89:25:C8:40:05:FD:70:77:73
Certificate issuer:       /CN=1e23412834c61e55039b9f85602d63503526daab
Certificate serial:       0D3495
Authority key identifier: 0B:54:05:B5:02:43:2F:B4:23:A3:FE:A2:6F:CE:4A:ED:9A:91:5D:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e23412834c61e55039b9f85602d63503526daab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7ff4117-12d3-426d-b6ff-615cb20b7e29/f90c44f797909dcaf1966232a9ff6560a6f92195.roa
Signing time:             Wed 24 Mar 2021 14:31:49 +0000
ROA not before:           Wed 24 Mar 2021 14:31:49 +0000
ROA not after:            Tue 24 Mar 2026 14:31:49 +0000
asID:                     11014
IP address blocks:        179.60.168.0/21 maxlen: 21
                          2803:4880::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865429 (0xd3495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e23412834c61e55039b9f85602d63503526daab
        Validity
            Not Before: Mar 24 14:31:49 2021 GMT
            Not After : Mar 24 14:31:49 2026 GMT
        Subject: CN=f90c44f797909dcaf1966232a9ff6560a6f92195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:17:f7:15:ca:44:67:f9:6d:18:6b:1e:b4:
                    90:79:08:5d:16:51:73:0b:02:71:30:6d:bd:0c:e4:
                    eb:b4:f1:8b:f5:a5:68:43:05:3e:7b:c5:6c:f3:fd:
                    0d:fb:2b:0d:cc:17:41:6f:15:d6:df:3c:5b:65:e0:
                    ac:8c:77:64:cb:1c:67:cc:5f:e8:c7:ad:77:b9:cd:
                    bf:c6:e8:50:04:e9:0b:bd:3a:2c:b7:2d:56:e5:f2:
                    a1:72:af:a4:a0:d6:91:bf:73:39:53:37:eb:11:5d:
                    e9:5c:39:56:2d:b4:39:42:f1:d7:46:72:f3:8d:8d:
                    d4:4b:a8:6e:bb:10:af:ef:c8:ee:6d:1f:70:82:82:
                    5d:63:6f:40:34:1e:0e:0e:58:7e:e7:7e:ca:fb:b9:
                    20:70:dc:07:89:15:5e:18:fe:e9:cc:5a:e8:ff:f8:
                    bc:1f:65:c3:e3:21:fe:6e:39:7d:bd:2e:23:fc:17:
                    e6:96:bd:63:59:fa:13:5d:45:58:d1:70:6f:63:31:
                    2b:8c:41:07:cc:f0:3a:63:73:01:29:86:e3:81:5c:
                    3c:08:17:c1:e9:15:5b:0a:56:33:29:e8:7f:42:54:
                    9c:8c:90:5d:77:44:ae:e1:6f:78:71:ef:57:ba:37:
                    51:c8:ec:b3:58:44:1b:5c:75:7b:a7:5b:ea:fe:fd:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:95:D2:92:2A:17:50:03:1C:E0:A6:89:25:C8:40:05:FD:70:77:73
            X509v3 Authority Key Identifier:
                keyid:0B:54:05:B5:02:43:2F:B4:23:A3:FE:A2:6F:CE:4A:ED:9A:91:5D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e23412834c61e55039b9f85602d63503526daab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7ff4117-12d3-426d-b6ff-615cb20b7e29/f90c44f797909dcaf1966232a9ff6560a6f92195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7ff4117-12d3-426d-b6ff-615cb20b7e29/1e23412834c61e55039b9f85602d63503526daab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.168.0/21
                IPv6:
                  2803:4880::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:25:e5:4a:94:1e:16:06:50:e6:4f:ce:20:c2:d4:5c:80:58:
         8d:c9:76:01:f5:de:6f:b0:7b:dd:26:db:95:f6:96:09:50:e0:
         90:ae:93:d8:f4:8a:a4:5c:ee:7c:bf:97:2c:a2:c0:89:58:56:
         bf:be:77:e7:46:3d:ae:1b:8b:41:10:4e:06:93:8b:e5:e8:c3:
         d4:37:fa:72:7a:3a:3d:6f:1e:3f:57:2a:9d:b1:d6:9f:54:9e:
         ea:e7:70:d7:17:d3:06:d5:ce:82:57:82:24:de:71:0f:29:db:
         47:17:c3:60:b7:e3:0c:f6:d5:ae:2f:ee:6e:28:35:a0:4b:6c:
         47:f8:af:f7:b7:c4:75:0d:99:ef:5f:c0:5c:8f:7e:69:c7:dc:
         3f:00:08:f7:d2:85:d1:e6:3d:ba:5c:cd:45:d1:ad:91:0e:67:
         fc:c8:2e:e4:9d:3e:bf:a6:80:56:b4:a6:a5:c3:9f:65:66:1e:
         af:dc:13:3e:3b:27:7e:6c:22:4d:b3:bd:c5:3e:1e:59:c7:66:
         71:2e:08:56:e3:98:34:86:c3:c6:3d:12:0b:89:1a:f3:bc:e7:
         36:2b:cf:ef:9f:4f:99:81:e9:d5:0c:7a:7b:3b:3d:83:28:6e:
         3f:79:86:15:ee:68:bd:49:ba:e2:ec:37:c8:a2:72:97:0f:88:
         02:05:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----