Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/e3cd6016552c9e3134f43a182e2a5fe90390ed2f.roa
File:                     e3cd6016552c9e3134f43a182e2a5fe90390ed2f.roa (raw, json)
Hash identifier:          GYPHfuuu3vmEJUnDVhdgdRPqRExaWmCxAR0KToClG+0=
Subject key identifier:   DF:5C:66:58:7F:80:AE:D4:30:82:F0:53:17:9B:ED:BB:5A:B9:00:FD
Certificate issuer:       /CN=4cba7f8bd719e527c075d1975618d1234b50de72
Certificate serial:       0DA4D2
Authority key identifier: CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/e3cd6016552c9e3134f43a182e2a5fe90390ed2f.roa
Signing time:             Wed 24 Mar 2021 14:31:38 +0000
ROA not before:           Wed 24 Mar 2021 14:31:38 +0000
ROA not after:            Tue 24 Mar 2026 14:31:38 +0000
asID:                     27826
IP address blocks:        200.16.120.0/21 maxlen: 21
                          2803:aa40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894162 (0xda4d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cba7f8bd719e527c075d1975618d1234b50de72
        Validity
            Not Before: Mar 24 14:31:38 2021 GMT
            Not After : Mar 24 14:31:38 2026 GMT
        Subject: CN=e3cd6016552c9e3134f43a182e2a5fe90390ed2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:51:2e:b7:2d:75:8a:67:71:b9:cc:f3:cd:fe:
                    f0:14:7d:0e:f9:06:2d:69:f0:a5:3b:e8:3d:ba:3c:
                    ef:4f:3a:15:44:6d:85:d2:08:57:47:1f:17:a2:71:
                    77:c4:42:79:59:4b:1b:af:07:9f:85:8a:52:78:a4:
                    cd:66:1a:e8:14:0d:79:57:c3:0d:bd:29:d7:db:3c:
                    a2:6c:d2:f0:fd:c9:b3:59:67:22:85:20:44:e6:74:
                    a7:97:2a:73:da:cd:22:ad:97:27:f2:e4:fc:00:cc:
                    f3:89:d8:1f:43:87:85:20:c6:0a:79:d0:4d:98:6c:
                    33:6d:e2:fd:49:da:f7:55:2b:43:17:96:96:cc:5b:
                    87:75:d9:d8:31:02:1a:66:bf:01:17:04:50:0b:4f:
                    8a:de:90:0f:6c:59:15:33:68:06:52:94:9c:74:71:
                    ac:48:ca:08:31:32:d1:3d:99:a9:ec:a9:d3:b3:ff:
                    9c:e9:aa:e6:19:61:f1:33:9a:3e:6d:56:e9:b5:2d:
                    77:f8:6d:f6:fc:1b:63:92:f6:ac:a3:b4:dd:f5:9e:
                    b2:55:83:b1:58:d7:2b:f3:8c:aa:04:a4:a0:8f:ad:
                    30:e2:85:70:e2:eb:d4:e3:2e:fd:c9:44:fc:af:90:
                    60:11:52:8a:8b:d3:06:26:36:14:9d:e8:84:72:44:
                    dd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5C:66:58:7F:80:AE:D4:30:82:F0:53:17:9B:ED:BB:5A:B9:00:FD
            X509v3 Authority Key Identifier:
                keyid:CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/e3cd6016552c9e3134f43a182e2a5fe90390ed2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/4cba7f8bd719e527c075d1975618d1234b50de72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.120.0/21
                IPv6:
                  2803:aa40::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:81:ae:00:38:c2:9f:87:ac:fe:70:88:ae:0f:9a:02:42:a9:
         45:0e:b3:53:81:9e:eb:54:92:49:3f:84:d2:3d:c3:bb:aa:39:
         a5:9a:9a:fb:6a:57:b0:a3:55:db:76:87:e5:10:82:f7:e1:86:
         ea:df:af:8b:e0:a7:27:c4:5e:c5:62:f0:88:ad:69:7e:c8:ea:
         ea:c7:0a:79:bd:f2:cc:aa:16:83:65:18:c6:1b:a3:e2:10:44:
         6c:f3:6f:a9:7e:39:d6:e3:53:c8:f5:a0:b5:ca:19:f6:d3:8e:
         ea:06:de:16:c1:cd:be:a2:af:a4:45:5a:6d:97:6a:37:d6:b5:
         6a:91:1f:7f:ff:bb:06:75:1c:1c:34:87:9a:c1:c4:d8:ee:6b:
         8e:01:e2:f3:04:b4:d2:08:ce:dc:00:05:9c:16:ab:ba:98:3f:
         40:e2:55:57:5c:44:eb:22:c8:c8:d3:88:49:d6:5a:17:93:08:
         2a:fb:b5:5a:ca:9d:04:f8:91:60:c4:69:c0:70:cf:dc:4a:ff:
         65:66:53:4a:d0:3e:da:14:ba:95:5c:a3:72:f0:f9:88:63:cd:
         37:51:7e:3c:7b:7b:31:7b:b5:d2:ea:43:cd:1d:cd:90:95:48:
         54:c9:15:db:23:36:7e:a2:fe:8e:b2:98:f8:d1:47:a0:91:b1:
         0b:3d:be:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----