Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c71b5c8a-e844-4d02-ad50-e5964fcf7cfc/76f5463ae742a2b7ab045364c4dbaccbf20f765d.roa
File:                     76f5463ae742a2b7ab045364c4dbaccbf20f765d.roa (raw, json)
Hash identifier:          73cjPalVXI2G4jJjuRx2WCylGfR63jgqHkTqBY/BUno=
Subject key identifier:   1E:25:8C:DA:2F:CF:33:30:53:02:D9:80:62:C7:E1:B1:C0:68:C6:D0
Certificate issuer:       /CN=196eb8a832f848562e11842dee4c377735a0eb9f
Certificate serial:       0C23BF
Authority key identifier: 0F:99:B5:F0:25:8D:56:EE:8A:F5:DF:2A:64:35:69:CA:7B:9A:FD:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/196eb8a832f848562e11842dee4c377735a0eb9f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c71b5c8a-e844-4d02-ad50-e5964fcf7cfc/76f5463ae742a2b7ab045364c4dbaccbf20f765d.roa
Signing time:             Wed 24 Mar 2021 14:43:25 +0000
ROA not before:           Wed 24 Mar 2021 14:43:25 +0000
ROA not after:            Tue 24 Mar 2026 14:43:25 +0000
asID:                     263127
IP address blocks:        207.248.108.0/22 maxlen: 24
                          207.248.112.0/23 maxlen: 24
                          2806:350::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795583 (0xc23bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196eb8a832f848562e11842dee4c377735a0eb9f
        Validity
            Not Before: Mar 24 14:43:25 2021 GMT
            Not After : Mar 24 14:43:25 2026 GMT
        Subject: CN=76f5463ae742a2b7ab045364c4dbaccbf20f765d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a2:be:47:32:1d:5d:6f:aa:07:f2:9d:ab:a9:
                    e2:d6:a9:df:7a:32:02:9f:e2:f9:9b:ca:03:83:fa:
                    33:93:72:56:9e:10:0c:5f:ff:7f:bf:26:51:ca:48:
                    3f:cf:6d:9e:4d:4c:d9:57:2a:82:dc:2c:cd:ca:f7:
                    ae:4d:c4:e5:53:29:97:2c:79:d2:2a:6d:aa:0a:6a:
                    37:ca:c6:33:e1:66:85:77:f4:84:41:28:b6:21:ad:
                    e6:6d:02:c5:41:52:67:17:c2:14:26:c6:46:2d:26:
                    62:3c:14:ba:0a:94:84:46:88:22:33:1e:c5:66:b9:
                    60:f0:e6:32:b4:13:e2:bb:c9:cd:3c:17:4f:96:d0:
                    b4:5f:1c:0a:32:93:5a:9e:e9:e3:c6:0e:60:88:6b:
                    ed:cc:c1:6d:37:4b:54:b0:1d:94:a3:6c:22:9c:fc:
                    07:35:eb:81:a1:e5:e4:08:89:a5:a9:4f:a5:11:33:
                    40:07:fd:76:ec:7a:9c:cc:77:5e:8c:e0:43:d8:d3:
                    c2:a1:cc:f6:8e:a6:06:a3:30:ca:46:8e:55:61:0b:
                    2d:2a:0b:02:4b:35:42:fd:30:d4:e8:fa:60:84:14:
                    d7:89:86:72:3e:97:f1:0e:f7:b4:bc:28:be:eb:67:
                    33:17:1c:6f:00:1f:8c:64:45:c1:aa:0a:fd:4c:1d:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:25:8C:DA:2F:CF:33:30:53:02:D9:80:62:C7:E1:B1:C0:68:C6:D0
            X509v3 Authority Key Identifier:
                keyid:0F:99:B5:F0:25:8D:56:EE:8A:F5:DF:2A:64:35:69:CA:7B:9A:FD:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/196eb8a832f848562e11842dee4c377735a0eb9f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c71b5c8a-e844-4d02-ad50-e5964fcf7cfc/76f5463ae742a2b7ab045364c4dbaccbf20f765d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c71b5c8a-e844-4d02-ad50-e5964fcf7cfc/196eb8a832f848562e11842dee4c377735a0eb9f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.108.0-207.248.113.255
                IPv6:
                  2806:350::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:21:96:80:f6:f7:25:73:16:83:b6:de:eb:3f:3f:a3:9c:5f:
         3f:2e:82:0c:62:ec:90:1a:9a:73:48:f7:61:78:e2:1d:3d:1a:
         26:a1:c2:cb:90:99:c3:53:19:91:04:57:5d:66:36:bc:57:9e:
         ee:01:d1:b1:65:46:c2:9e:78:67:85:5a:54:23:4c:6c:a6:eb:
         36:cc:43:11:5e:1e:82:25:85:f1:30:74:56:dc:57:8c:39:2c:
         67:c7:03:83:4a:80:21:c0:34:55:44:0a:7d:fd:7b:a3:65:88:
         85:c0:3b:70:db:a8:fa:c1:7d:e7:ce:cf:25:1d:87:e8:e1:4c:
         e5:c3:e1:60:b8:8b:09:0c:10:c0:49:e5:6e:d0:66:d4:63:3b:
         e2:b9:ae:70:87:d0:35:d7:0a:e6:2c:2f:25:82:51:dd:3b:a7:
         4c:30:a8:02:d3:62:7a:29:9b:65:17:ac:67:7e:1c:aa:98:21:
         36:c0:b0:bf:cd:60:11:0e:a0:0b:8b:4c:eb:a9:90:12:eb:7f:
         d5:4a:b4:22:1b:9a:f4:f3:cc:42:9d:14:c8:a0:bf:06:54:62:
         5c:d0:b0:9f:f6:0a:d7:a2:d5:26:5d:0e:e8:a2:d8:22:84:62:
         c3:cd:24:8f:0c:d6:1d:a5:02:fa:41:17:41:0c:c2:04:72:c6:
         b1:d7:1e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----