Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bfde46-965e-4f2f-a700-5dfff7003c4f/d713564bada01f2839145a3e60ef574ebaa9fbab.roa
File:                     d713564bada01f2839145a3e60ef574ebaa9fbab.roa (raw, json)
Hash identifier:          kner+tlCh0muOozExPe+y99nwRvW+7NPbMsX5C1TyK4=
Subject key identifier:   E7:CD:E0:0E:1E:2C:33:D7:69:8C:B1:D7:4E:6F:F0:05:19:B2:1D:81
Certificate issuer:       /CN=e8edbd424bc6f52628bd857c3013fb4651fe6e40
Certificate serial:       0C9256
Authority key identifier: 57:8C:9C:D5:55:B0:47:63:08:D2:FB:73:A3:BB:AF:E0:4D:F5:C8:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8edbd424bc6f52628bd857c3013fb4651fe6e40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bfde46-965e-4f2f-a700-5dfff7003c4f/d713564bada01f2839145a3e60ef574ebaa9fbab.roa
Signing time:             Wed 24 Mar 2021 14:47:08 +0000
ROA not before:           Wed 24 Mar 2021 14:47:08 +0000
ROA not after:            Tue 24 Mar 2026 14:47:08 +0000
asID:                     27924
IP address blocks:        186.96.208.0/20 maxlen: 24
                          200.125.160.0/21 maxlen: 24
                          2800:180::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823894 (0xc9256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8edbd424bc6f52628bd857c3013fb4651fe6e40
        Validity
            Not Before: Mar 24 14:47:08 2021 GMT
            Not After : Mar 24 14:47:08 2026 GMT
        Subject: CN=d713564bada01f2839145a3e60ef574ebaa9fbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:0c:47:3c:7e:91:3f:81:2d:1c:03:68:b4:
                    37:6d:dd:39:fe:33:6e:0d:7b:95:fe:f2:7b:d0:60:
                    87:78:9c:1f:6d:70:48:95:09:da:ef:15:2d:e4:88:
                    e3:cd:25:c7:98:12:a6:21:4f:2a:c0:20:1b:af:31:
                    27:cf:99:3e:98:65:50:27:a5:dd:6a:28:98:58:37:
                    8a:08:8a:8b:2a:7b:89:23:c0:aa:07:8c:ad:ec:f1:
                    d1:bf:1c:1c:31:17:e7:bc:ff:95:49:6c:0d:34:33:
                    50:0c:58:6e:c7:fa:35:75:84:f1:12:94:62:83:cd:
                    af:8f:37:6b:0d:c2:4c:8e:b0:d9:e0:85:7b:00:cc:
                    67:57:6c:fc:d7:ec:f0:69:89:98:7d:d4:87:c6:6f:
                    fa:93:97:f2:43:95:13:a0:cf:7b:55:23:06:dc:74:
                    cf:d5:c7:11:a2:67:70:9f:62:ef:cb:a0:6d:05:e0:
                    ca:8e:d5:b1:99:fe:d0:e2:d6:63:c3:ae:fd:13:24:
                    02:3d:7d:1e:95:cc:fa:72:da:fe:43:b2:cb:91:ee:
                    a4:36:aa:f8:a6:6d:c7:61:cd:9b:a4:7f:bb:94:b1:
                    7b:d3:0f:20:81:33:bd:2a:48:0c:ca:1f:f9:e2:a6:
                    11:08:44:05:37:22:21:7d:24:b3:bf:f2:2e:27:f4:
                    37:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CD:E0:0E:1E:2C:33:D7:69:8C:B1:D7:4E:6F:F0:05:19:B2:1D:81
            X509v3 Authority Key Identifier:
                keyid:57:8C:9C:D5:55:B0:47:63:08:D2:FB:73:A3:BB:AF:E0:4D:F5:C8:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8edbd424bc6f52628bd857c3013fb4651fe6e40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bfde46-965e-4f2f-a700-5dfff7003c4f/d713564bada01f2839145a3e60ef574ebaa9fbab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bfde46-965e-4f2f-a700-5dfff7003c4f/e8edbd424bc6f52628bd857c3013fb4651fe6e40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.208.0/20
                  200.125.160.0/21
                IPv6:
                  2800:180::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:32:6f:ad:5b:25:86:25:23:87:c6:85:da:fc:a8:33:55:c3:
         36:8c:3e:a9:64:d1:d7:bd:14:af:c1:10:d2:aa:62:23:0a:f2:
         61:04:4e:fc:29:9a:f9:24:fc:5a:74:e7:c3:4c:f7:39:84:64:
         bc:9e:37:b1:c0:61:8b:54:42:0c:55:3e:a8:f0:1e:08:52:01:
         15:83:7c:24:dd:15:71:64:fd:db:1e:41:d6:72:8c:d2:30:cb:
         e3:26:fa:87:53:c6:ae:af:89:d5:8d:ef:56:eb:c7:fc:d6:14:
         6c:db:86:2e:42:a1:58:5f:53:04:bf:69:1d:54:e3:07:3b:15:
         30:c6:f6:dd:22:88:10:43:17:50:29:e4:8e:f5:1b:6d:77:3a:
         d9:62:cf:b0:fc:7d:eb:c6:93:c3:b3:89:20:14:80:79:f2:0a:
         ac:67:68:a9:00:a7:56:cd:5d:e7:08:aa:4a:37:64:c7:95:45:
         15:75:ec:2f:af:07:46:e0:e0:2e:37:63:21:24:c2:08:27:e3:
         5b:10:d3:12:23:e3:39:b6:f3:ce:0f:24:10:3e:84:f6:af:58:
         4f:9c:4e:de:90:ad:a0:aa:82:06:09:61:7f:0b:cc:7a:e1:e4:
         0c:e1:c0:41:54:08:6d:e0:fb:b7:7a:0d:f1:85:9f:65:9a:f8:
         0e:5e:f0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----