Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/a84960fb6fcb6527c0b651140be39cd7b8cd8cbb.roa
File:                     a84960fb6fcb6527c0b651140be39cd7b8cd8cbb.roa (raw, json)
Hash identifier:          KJ9pwu0LVYJKoxDVbwe9d9Dizq+9ObEua+fekGyVRwg=
Subject key identifier:   32:A7:E2:05:A6:4F:80:76:D8:1D:71:D5:ED:C1:06:0D:F2:F5:FA:D3
Certificate issuer:       /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial:       0D6DBD
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/a84960fb6fcb6527c0b651140be39cd7b8cd8cbb.roa
Signing time:             Wed 24 Mar 2021 14:45:28 +0000
ROA not before:           Wed 24 Mar 2021 14:45:28 +0000
ROA not after:            Tue 24 Mar 2026 14:45:28 +0000
asID:                     19905
IP address blocks:        148.102.0.0/17 maxlen: 24
                          190.187.0.0/17 maxlen: 24
                          190.187.128.0/17 maxlen: 24
                          190.8.128.0/19 maxlen: 24
                          200.31.112.0/20 maxlen: 24
                          200.31.96.0/20 maxlen: 24
                          2001:1380::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880061 (0xd6dbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
        Validity
            Not Before: Mar 24 14:45:28 2021 GMT
            Not After : Mar 24 14:45:28 2026 GMT
        Subject: CN=a84960fb6fcb6527c0b651140be39cd7b8cd8cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:b7:cd:95:19:6b:5c:32:d8:38:f2:7e:09:
                    5d:47:38:e6:5c:53:76:44:d5:84:25:39:58:c4:e5:
                    11:01:45:65:83:5e:28:06:95:91:6d:5f:ac:d7:f2:
                    b4:4f:5f:1a:ce:6a:21:e5:8e:72:a5:04:d2:69:2c:
                    66:2e:59:82:52:a6:f1:0b:b2:da:d0:2c:1e:7f:4f:
                    55:6e:1e:b0:eb:f5:71:f3:0a:32:8d:4e:48:09:ed:
                    b8:fa:c7:45:0a:a3:be:38:1f:1e:92:c0:e9:26:00:
                    9d:c7:39:55:09:04:8a:44:4d:ac:cc:7a:0c:06:61:
                    d9:f2:ad:d4:3b:02:0c:96:e6:6f:93:34:77:a1:a8:
                    a0:49:25:21:a4:e3:79:15:bc:dd:1d:e2:30:2d:00:
                    5d:d2:c0:55:35:f7:d1:7f:3f:53:cf:15:4f:cc:55:
                    7e:42:8d:88:30:53:92:aa:67:15:d6:7d:6e:f9:48:
                    a0:42:77:b9:42:0e:90:38:22:d4:c0:71:b6:cd:54:
                    8d:9b:59:55:f0:8e:01:45:4d:75:3d:c6:00:5d:1b:
                    48:73:16:52:bb:2a:a2:7d:c4:43:41:88:1a:e2:5c:
                    e5:f2:50:07:ac:87:c8:01:30:45:82:ee:3c:9b:8a:
                    78:e6:58:1b:57:5e:11:b3:40:90:e2:1a:f5:ba:82:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A7:E2:05:A6:4F:80:76:D8:1D:71:D5:ED:C1:06:0D:F2:F5:FA:D3
            X509v3 Authority Key Identifier:
                keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/a84960fb6fcb6527c0b651140be39cd7b8cd8cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.0.0/17
                  190.8.128.0/19
                  190.187.0.0/16
                  200.31.96.0/19
                IPv6:
                  2001:1380::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:8d:e7:d0:11:15:4c:71:c6:6e:35:ea:04:0c:4d:f9:3f:50:
         b0:72:f5:ff:83:a9:44:00:e8:e7:55:31:fd:5b:a5:97:5f:0c:
         db:b7:b0:d1:2e:ba:b7:97:b4:d3:9a:f1:5e:47:36:44:53:91:
         60:53:9f:fb:15:43:08:cf:36:63:dd:ec:55:8f:26:d4:29:57:
         38:d9:1c:ac:c3:40:6b:57:6e:02:75:00:6f:5f:a0:9e:28:a0:
         7a:e6:2f:13:7e:e5:0b:c6:8d:22:c5:d5:af:e6:f7:4c:4d:7b:
         ae:dc:03:10:6e:4e:a5:6f:ac:29:4e:68:08:c7:ed:fb:36:35:
         23:11:3d:b9:c5:c0:ac:0e:8f:9b:f1:ed:64:fd:b1:03:6b:42:
         be:93:83:d0:53:8d:ed:7f:da:8f:84:70:52:8c:ea:33:ec:84:
         f7:6e:66:ba:b4:4a:24:1f:0f:5c:16:03:5a:21:6f:cc:0e:61:
         e7:d9:5c:6b:9b:d3:b1:25:77:45:c9:5b:1c:12:c7:5e:50:6a:
         f7:84:cb:e7:c6:57:ea:b2:72:55:7f:aa:f6:49:6e:55:db:72:
         83:c4:48:59:ee:66:fa:71:b9:76:28:99:c4:ff:89:10:96:6d:
         61:22:48:e3:77:d8:5d:fe:52:2b:6c:94:43:3b:06:ba:73:18:
         35:d6:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----