Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3b309e6-967f-4d36-9587-ea96fd7b105e/2039e7fe313c9bbb76e0bf6a669c7e274f396430.roa
File:                     2039e7fe313c9bbb76e0bf6a669c7e274f396430.roa (raw, json)
Hash identifier:          RNxUKLZSHIDn7TePLwmzAr3PbOt6utU80FPrbRhcTsg=
Subject key identifier:   07:0E:38:85:0E:58:DD:5D:B1:C6:0D:6A:23:34:67:9E:02:A4:CD:27
Certificate issuer:       /CN=a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9
Certificate serial:       1A3C
Authority key identifier: 7F:C7:51:44:1B:C1:0A:A1:A4:72:8E:80:D1:07:45:34:FE:A6:D2:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3b309e6-967f-4d36-9587-ea96fd7b105e/2039e7fe313c9bbb76e0bf6a669c7e274f396430.roa
Signing time:             Thu 24 Jun 2021 13:51:25 +0000
ROA not before:           Thu 24 Jun 2021 13:51:25 +0000
ROA not after:            Wed 24 Jun 2026 13:51:25 +0000
asID:                     270098
IP address blocks:        190.171.88.0/24 maxlen: 24
                          190.171.89.0/24 maxlen: 24
                          190.171.90.0/24 maxlen: 24
                          190.171.91.0/24 maxlen: 24
                          190.171.88.0/22 maxlen: 24
                          2803:c7e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6716 (0x1a3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9
        Validity
            Not Before: Jun 24 13:51:25 2021 GMT
            Not After : Jun 24 13:51:25 2026 GMT
        Subject: CN=2039e7fe313c9bbb76e0bf6a669c7e274f396430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:ef:16:05:40:3d:87:f6:e1:74:03:86:ee:
                    a5:e9:8d:96:40:01:10:3d:85:35:9c:19:2d:8f:a6:
                    0c:e4:42:fd:06:2c:01:ba:b5:07:75:c0:48:d7:38:
                    13:6c:18:d4:d0:42:42:81:3e:c7:c1:43:10:03:1f:
                    dc:1d:e1:23:dd:d4:4f:a3:40:b2:88:2a:77:8d:f8:
                    26:60:c4:ed:f6:96:64:6a:9b:54:43:80:59:0c:db:
                    46:fc:d8:63:78:ab:b5:bf:54:eb:8b:ec:79:30:1a:
                    bf:2c:be:5a:a8:6d:54:03:13:61:0e:f0:d2:49:27:
                    be:a4:db:76:f3:be:e1:1e:a6:1e:80:cd:7b:77:e6:
                    23:31:1b:6c:43:3b:c0:df:48:4d:8c:a1:69:c8:be:
                    7a:f2:1e:3d:aa:c7:f1:3c:71:e3:ca:f7:b9:50:fb:
                    04:8a:5b:12:5c:7f:31:1b:d9:b4:a9:7b:d1:00:3a:
                    1e:7f:08:3b:14:60:b2:35:63:93:51:7d:e3:30:e7:
                    26:cb:ea:f4:bf:7f:47:c2:6d:56:43:07:91:48:44:
                    9d:e2:b4:1d:04:c0:af:04:b5:17:3d:36:8b:40:d8:
                    14:2d:89:80:f1:31:1f:6c:29:68:ab:a3:b4:81:7b:
                    cc:11:01:db:ef:5f:1d:4c:4a:82:b7:f8:f2:82:4e:
                    4f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0E:38:85:0E:58:DD:5D:B1:C6:0D:6A:23:34:67:9E:02:A4:CD:27
            X509v3 Authority Key Identifier:
                keyid:7F:C7:51:44:1B:C1:0A:A1:A4:72:8E:80:D1:07:45:34:FE:A6:D2:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3b309e6-967f-4d36-9587-ea96fd7b105e/2039e7fe313c9bbb76e0bf6a669c7e274f396430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3b309e6-967f-4d36-9587-ea96fd7b105e/a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.88.0/22
                IPv6:
                  2803:c7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:66:1e:56:2a:cf:2e:8d:85:fb:a4:75:b6:ca:71:74:b1:eb:
         3d:43:2d:bc:7c:23:97:67:32:3f:58:2c:da:b9:45:61:45:e1:
         7b:bd:51:f7:12:76:f5:4a:18:10:08:10:a9:ce:f6:81:24:b5:
         58:fd:04:e4:5d:e7:26:1e:35:30:1f:7b:e5:12:0a:c4:5e:78:
         d4:ae:fc:43:4e:a9:32:27:69:54:2d:73:73:c8:72:a1:58:6b:
         7a:14:57:f7:ad:54:a5:ab:bd:fa:1e:44:ce:d1:36:fb:8a:bb:
         5e:7c:86:ba:8d:e9:ae:ba:26:ab:e7:6e:0f:24:9f:a6:17:5f:
         ec:96:8e:c3:71:7f:f5:d8:c9:f3:9d:0a:6d:fc:2a:87:2e:bb:
         d3:d7:26:6d:29:d8:c9:93:68:da:fc:6e:a6:3b:15:dd:9f:ad:
         2c:f0:0e:d2:d6:4a:85:b8:5c:d9:b5:05:f5:68:db:68:8e:37:
         ca:37:6a:29:92:3c:41:82:96:11:36:7c:82:f7:07:36:cd:17:
         4b:af:9a:e2:a7:11:2c:b7:9b:dc:ca:a5:e5:1b:7e:d9:ff:c2:
         cd:17:9e:c1:2d:ec:be:36:fa:2d:52:b4:ce:6b:8b:dd:e0:f4:
         40:a7:bc:e9:6b:e7:25:c8:2f:b0:b4:0d:8f:74:43:08:78:fb:
         99:d1:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----