Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/8267b115e8ab6f7f30dc58891779740ef5b0e3a3.roa
File:                     8267b115e8ab6f7f30dc58891779740ef5b0e3a3.roa (raw, json)
Hash identifier:          l6UUnuNlidj6tVWV/r0Krti96hK2TkOkR/eH/ZIqeUI=
Subject key identifier:   F7:4B:25:88:50:AF:A7:16:E6:17:A0:02:F7:5E:35:CE:D5:31:9A:1C
Certificate issuer:       /CN=8ec75d0ca59e365a5c0a68c7f4ea3709b805a441
Certificate serial:       09DDEE
Authority key identifier: 12:96:28:D8:49:3C:C6:4B:7E:44:C0:23:24:58:62:CA:E6:F8:97:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/8267b115e8ab6f7f30dc58891779740ef5b0e3a3.roa
Signing time:             Wed 24 Mar 2021 14:29:55 +0000
ROA not before:           Wed 24 Mar 2021 14:29:55 +0000
ROA not after:            Tue 24 Mar 2026 14:29:55 +0000
asID:                     264795
IP address blocks:        170.238.40.0/22 maxlen: 22
                          2803:a4c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646638 (0x9ddee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec75d0ca59e365a5c0a68c7f4ea3709b805a441
        Validity
            Not Before: Mar 24 14:29:55 2021 GMT
            Not After : Mar 24 14:29:55 2026 GMT
        Subject: CN=8267b115e8ab6f7f30dc58891779740ef5b0e3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:d1:3d:67:01:72:15:8f:6f:7c:65:05:9e:
                    9b:bf:59:f3:8d:b0:67:8b:2c:d6:7c:a3:37:79:73:
                    3d:c9:69:b4:85:93:11:a5:7c:a8:13:ff:96:d8:bd:
                    61:8c:64:fc:29:ba:9c:d3:a8:fe:d6:84:75:99:70:
                    bd:5f:0f:11:51:06:cc:d6:5f:f6:1d:88:2c:50:aa:
                    17:36:95:84:75:72:b6:ab:8a:6b:5a:5c:b4:d2:ea:
                    48:92:e2:25:47:35:16:23:e5:89:ce:c4:40:c0:14:
                    cb:83:6c:86:6b:b6:ba:e7:f8:80:5b:57:41:bf:79:
                    5e:b7:84:44:10:fa:77:db:a5:6c:1e:b2:95:eb:01:
                    1c:98:36:54:51:f6:ad:d7:d9:09:5d:1f:51:30:20:
                    32:6c:3d:2e:88:14:7c:33:e4:5e:24:50:f9:b5:a7:
                    23:52:fa:17:61:1e:45:16:5a:6a:92:2f:36:e0:3a:
                    87:67:81:98:44:7f:c7:af:58:01:02:97:ee:f0:06:
                    0e:58:57:fe:d7:8c:79:86:b6:84:80:0b:bb:85:19:
                    e8:1f:6c:bb:39:86:d6:e1:99:08:c4:f4:97:68:38:
                    57:6f:0c:72:f4:d8:e4:86:e5:13:9f:04:64:f6:85:
                    89:bb:a5:cf:33:39:d1:cf:9b:82:ac:74:0a:c8:b8:
                    17:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4B:25:88:50:AF:A7:16:E6:17:A0:02:F7:5E:35:CE:D5:31:9A:1C
            X509v3 Authority Key Identifier:
                keyid:12:96:28:D8:49:3C:C6:4B:7E:44:C0:23:24:58:62:CA:E6:F8:97:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/8267b115e8ab6f7f30dc58891779740ef5b0e3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.40.0/22
                IPv6:
                  2803:a4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:80:7d:7f:7a:0c:49:07:0c:5b:6c:e1:6b:e7:a3:8e:c5:ee:
         cc:56:f9:3d:ce:30:e3:76:bd:c5:33:f6:d1:1c:11:1a:ec:30:
         dc:70:68:c9:3a:cf:5f:22:06:e5:bb:c9:c5:b4:52:2b:5b:f6:
         dd:f6:be:b8:51:78:55:9c:1e:7a:c0:15:5c:4e:61:19:2c:3b:
         23:8b:23:bd:15:8d:78:85:50:ce:ca:b9:30:72:f3:cc:f9:be:
         65:b1:99:75:1a:ed:fd:10:c2:14:7d:5d:d9:9e:24:7f:53:1b:
         1b:39:76:b6:63:e2:39:17:4a:6b:c8:f0:7f:99:61:91:3f:cb:
         22:c7:66:b3:03:40:0b:c7:2a:00:f7:a7:00:45:0a:a4:0b:68:
         ca:90:08:37:d0:1f:aa:ec:05:2e:34:ec:04:55:30:1e:cb:3d:
         4b:20:1a:dd:f4:dc:d4:bc:cc:c9:6c:14:85:43:d5:bc:0f:1b:
         3c:80:e6:25:49:e4:26:b4:b3:0b:04:0e:87:2c:0f:f4:79:f9:
         a5:ae:e3:4e:28:38:59:f2:26:a9:88:03:a2:29:ab:47:99:4b:
         f6:08:56:95:08:5f:ce:d5:89:34:4e:9f:19:bc:08:5f:14:d5:
         8b:e1:43:db:26:07:40:59:56:1d:54:5b:a9:a0:9c:e9:ea:52:
         25:f0:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----