Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/8644163948b7a1bcf96fef839e0b269ecc121385.roa
File:                     8644163948b7a1bcf96fef839e0b269ecc121385.roa (raw, json)
Hash identifier:          veNQg/Z+FWmDHSENbvuaCWycx3nZdnLM7Awdo9l89kw=
Subject key identifier:   CB:F9:D3:FA:22:4F:F9:82:B7:E2:3D:35:A5:58:B1:08:66:F7:43:46
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DD83C
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/8644163948b7a1bcf96fef839e0b269ecc121385.roa
Signing time:             Wed 24 Mar 2021 14:34:59 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     27921
IP address blocks:        152.204.0.0/15 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907324 (0xdd83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=8644163948b7a1bcf96fef839e0b269ecc121385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:de:a5:e5:da:90:06:b0:eb:cb:4a:59:4d:
                    0d:0f:df:25:c3:6b:9b:d0:96:33:cc:b7:28:8f:5a:
                    14:d4:80:e5:03:4c:e3:af:ba:c4:f9:cd:24:8c:a1:
                    3c:ff:7f:55:d5:59:d3:45:3a:77:cb:39:86:78:c8:
                    1f:9f:65:34:db:f1:0d:95:0e:31:11:11:8c:91:3a:
                    a5:4a:b3:c2:62:c6:b6:6a:87:cc:f0:18:17:40:2e:
                    0c:6c:87:c8:46:cd:f0:c3:a4:d9:63:3f:c4:9e:b7:
                    7a:5d:48:63:95:74:60:91:4f:8b:34:be:52:3b:f8:
                    78:00:23:fc:ba:d8:10:e8:eb:9b:1f:83:ae:d3:a1:
                    9d:7c:74:20:73:41:0f:ec:5c:07:ac:90:a8:ef:c4:
                    7a:17:c8:9c:70:87:a2:2a:cf:a5:e0:31:fd:91:fc:
                    7f:25:58:d3:5c:b4:d4:e7:a1:87:6e:90:b1:66:e5:
                    df:d9:ed:3f:67:be:2b:9c:e9:64:00:aa:c2:50:9a:
                    75:2c:53:2b:fc:56:30:d4:d1:0a:a9:04:06:40:4c:
                    d0:dc:ea:3b:0e:28:b4:d8:e4:a3:3d:fa:e4:56:6f:
                    dd:fd:b0:4b:64:a3:69:52:c0:9c:dc:b0:d9:74:3a:
                    e2:07:db:61:f2:ce:3e:c6:13:b7:8c:38:eb:cb:e8:
                    db:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F9:D3:FA:22:4F:F9:82:B7:E2:3D:35:A5:58:B1:08:66:F7:43:46
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/8644163948b7a1bcf96fef839e0b269ecc121385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.204.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0c:b2:72:0e:e5:8a:bf:29:6e:d9:dd:58:13:c8:7c:cb:8a:d7:
         d6:5c:2f:7d:4b:61:bb:73:a0:d9:7b:bf:39:99:7c:47:0f:09:
         5c:50:ae:78:25:28:c1:80:4a:58:a3:df:35:32:15:ea:37:0b:
         09:87:21:7d:20:6f:9c:02:d1:67:d3:20:9a:87:7d:f0:7e:da:
         f2:99:a3:1e:f9:5b:7c:a4:6e:93:5c:5e:ee:6e:e0:5f:2f:be:
         fc:80:6e:73:9d:52:21:a4:25:1c:4b:bb:93:40:b0:5f:60:5b:
         78:35:48:f3:4a:25:eb:03:27:ae:e6:a6:43:a0:e2:ca:c3:6d:
         89:b4:26:4f:91:37:d6:22:39:75:ec:f0:61:84:d5:6c:d9:90:
         0f:96:02:01:cc:3b:c2:eb:c1:f5:0a:bc:2d:8e:83:33:ac:0a:
         f7:53:82:69:32:87:64:fe:b1:f7:1d:c9:91:51:15:6b:c1:06:
         03:0e:41:64:99:92:a7:67:b7:fb:e7:69:61:22:c9:a3:e7:a3:
         6e:7b:b0:59:95:89:b7:a6:c0:a4:8c:a9:fc:e5:5b:92:62:77:
         21:80:0d:b1:9c:b6:d7:e4:f8:b5:c3:61:f3:cc:23:1b:3c:19:
         04:97:c7:73:6d:df:52:9a:13:3e:7e:94:5c:70:63:83:31:83:
         bc:c9:9c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----