Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/f5f006593c2c7c75272eab60aaee3efeb420eb5a.roa
File:                     f5f006593c2c7c75272eab60aaee3efeb420eb5a.roa (raw, json)
Hash identifier:          c0OI/FKWV7/Jej/Vttz8Qd7TwAQziZIT/Q8GZjBQ7m0=
Subject key identifier:   B8:9D:55:D3:CC:5F:23:78:7D:3A:8F:54:BA:1B:54:14:1B:2D:29:76
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       0D3890
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/f5f006593c2c7c75272eab60aaee3efeb420eb5a.roa
Signing time:             Wed 24 Mar 2021 14:37:21 +0000
ROA not before:           Wed 24 Mar 2021 14:37:20 +0000
ROA not after:            Tue 24 Mar 2026 14:37:20 +0000
asID:                     262145
IP address blocks:        190.211.96.0/19 maxlen: 24
                          2803:5840::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866448 (0xd3890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Mar 24 14:37:20 2021 GMT
            Not After : Mar 24 14:37:20 2026 GMT
        Subject: CN=f5f006593c2c7c75272eab60aaee3efeb420eb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:cd:aa:42:ce:d8:58:a2:8c:00:1b:4a:3c:
                    89:67:17:f6:eb:6e:90:3a:50:d0:44:cf:82:dc:ef:
                    00:d7:11:f6:82:a3:98:90:46:c3:64:07:a6:77:2f:
                    d2:41:c0:2d:5a:db:90:01:3e:42:70:89:01:ad:17:
                    b4:49:f6:ce:72:c2:a3:85:2b:13:00:b8:7d:76:06:
                    ab:8a:90:b9:fa:91:fd:8f:91:a6:23:65:9b:9d:30:
                    ab:4c:4b:4d:50:76:00:ef:46:fc:a0:a4:e3:6c:c2:
                    4a:31:b8:b7:6e:03:fa:25:07:ad:21:7c:d2:e5:34:
                    6f:9d:a5:a2:c6:d2:81:a1:3f:9a:d2:a1:29:de:5b:
                    eb:ed:cf:9c:8f:64:6a:e8:24:4d:71:53:63:2c:e0:
                    83:04:3f:14:8b:91:33:42:67:d1:d8:54:58:39:70:
                    d0:ca:5f:b9:60:a4:67:91:2a:1a:2e:69:e9:f9:df:
                    b5:d4:a1:d1:46:d9:0c:3e:7d:32:4a:3c:92:92:4f:
                    12:b9:e4:d3:f9:3e:95:da:a9:9b:24:1b:37:67:25:
                    de:cd:f5:66:7a:d9:df:45:fe:43:2f:68:05:8a:71:
                    c6:8d:e0:3a:57:0e:1a:8c:df:42:56:33:bc:c1:b8:
                    cf:78:b4:c2:fa:70:59:c2:98:d5:a0:ae:87:f5:ea:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9D:55:D3:CC:5F:23:78:7D:3A:8F:54:BA:1B:54:14:1B:2D:29:76
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/f5f006593c2c7c75272eab60aaee3efeb420eb5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.96.0/19
                IPv6:
                  2803:5840::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:ed:66:ff:e8:31:3b:94:0f:d2:fa:76:e4:ff:f1:b7:c3:
         0e:a4:ee:b0:4d:fa:70:20:1e:06:48:7f:61:aa:98:91:60:a8:
         1e:c2:46:0b:32:81:10:32:bc:0c:d1:97:a0:bd:7b:e6:16:98:
         4e:e0:2b:c9:ac:02:7d:6b:cc:f1:48:c5:77:95:11:46:0c:8b:
         c0:4a:bb:a2:c6:ac:20:d8:a6:fd:ce:1c:d7:66:a6:a3:d5:6a:
         b6:95:e1:c4:d9:11:29:ef:40:81:b0:19:58:e4:c2:65:c6:ff:
         86:f5:5c:4f:b2:01:54:6d:58:25:13:8f:ff:76:45:cc:53:09:
         da:35:a1:bb:2e:cf:b3:a4:69:6f:42:00:af:ce:80:06:0c:c1:
         67:15:2e:3d:f2:d1:15:cf:18:0b:12:c6:ef:2b:e2:6f:46:b1:
         99:25:a3:10:cc:b1:fc:df:32:ae:8f:a4:c1:ac:5e:26:02:d2:
         2c:a7:a2:c9:0c:7b:f6:73:93:75:ae:a9:b0:92:53:d1:12:4e:
         8f:db:df:ea:49:28:4d:db:a6:3a:08:e5:9f:44:e2:28:ae:0b:
         85:87:67:fd:da:b8:39:e4:df:fa:72:3e:e1:3b:57:d8:fd:15:
         ad:06:ec:4b:d1:f3:b9:67:30:cb:44:3c:18:11:7a:b1:6d:ba:
         f2:fd:86:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----