Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce3e918b-55e7-477c-95fd-b3920f231e2f/648b1abb7bfd7313a24f09e8135721bf2979b606.roa
File:                     648b1abb7bfd7313a24f09e8135721bf2979b606.roa (raw, json)
Hash identifier:          yEwynPNCDMOC3NEX2RoixaHxMntOOMS+bknRgivv0Ls=
Subject key identifier:   D2:DF:35:E5:38:84:B0:3B:D0:79:A6:08:86:9E:84:5B:25:09:6F:94
Certificate issuer:       /CN=4f67c92421f26cdc0c2acdd73ccec146d8ab511c
Certificate serial:       0C93C7
Authority key identifier: 00:B0:67:6D:F0:2A:44:31:F3:68:0E:02:60:D9:2C:26:43:68:18:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f67c92421f26cdc0c2acdd73ccec146d8ab511c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce3e918b-55e7-477c-95fd-b3920f231e2f/648b1abb7bfd7313a24f09e8135721bf2979b606.roa
Signing time:             Wed 24 Mar 2021 14:45:20 +0000
ROA not before:           Wed 24 Mar 2021 14:45:20 +0000
ROA not after:            Tue 24 Mar 2026 14:45:20 +0000
asID:                     266811
IP address blocks:        160.20.246.0/24 maxlen: 24
                          2803:58a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824263 (0xc93c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f67c92421f26cdc0c2acdd73ccec146d8ab511c
        Validity
            Not Before: Mar 24 14:45:20 2021 GMT
            Not After : Mar 24 14:45:20 2026 GMT
        Subject: CN=648b1abb7bfd7313a24f09e8135721bf2979b606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ca:5d:89:a2:19:6b:53:19:2b:01:a1:eb:51:
                    d9:53:69:a3:fd:0f:23:20:ce:cd:5a:93:49:46:97:
                    3e:c5:38:5e:af:ab:d4:86:58:56:f0:67:51:aa:1b:
                    b6:56:a9:71:b3:74:dd:04:ce:cc:70:f8:15:16:02:
                    01:cd:c4:48:65:4d:2a:87:ad:0b:43:78:9a:ac:9f:
                    5c:0d:c2:b6:81:a0:6f:e4:85:00:d9:7a:93:c4:e9:
                    11:4c:e3:f6:b4:90:f1:ce:c6:ea:7e:b0:6d:18:2b:
                    47:f7:e3:68:c8:8b:cf:0c:c8:2f:f2:9a:b0:2a:82:
                    f0:19:5b:68:97:eb:1b:ef:1c:75:e5:be:55:15:8e:
                    a9:4e:b8:9d:93:bd:6d:60:b7:82:47:0c:4c:b1:e1:
                    d7:cf:6b:ae:07:05:85:4f:9f:e8:32:88:96:ee:3b:
                    f4:bb:c3:a1:07:3a:25:9f:fd:94:e4:9f:e8:2a:17:
                    e4:47:25:fe:af:4a:91:7e:4e:4c:f2:97:6d:4c:38:
                    7f:b7:03:61:31:20:70:f6:56:c9:89:c6:55:dd:90:
                    04:bb:7c:5c:2f:d9:36:c7:b4:fa:62:6d:e0:42:d6:
                    ce:95:42:1f:48:fd:39:e8:4a:67:29:db:da:97:12:
                    84:ee:ea:78:d7:75:aa:49:08:e4:80:ab:5c:8e:38:
                    c1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DF:35:E5:38:84:B0:3B:D0:79:A6:08:86:9E:84:5B:25:09:6F:94
            X509v3 Authority Key Identifier:
                keyid:00:B0:67:6D:F0:2A:44:31:F3:68:0E:02:60:D9:2C:26:43:68:18:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f67c92421f26cdc0c2acdd73ccec146d8ab511c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce3e918b-55e7-477c-95fd-b3920f231e2f/648b1abb7bfd7313a24f09e8135721bf2979b606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce3e918b-55e7-477c-95fd-b3920f231e2f/4f67c92421f26cdc0c2acdd73ccec146d8ab511c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.246.0/24
                IPv6:
                  2803:58a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:7f:99:54:2f:6f:5d:a8:19:2e:20:77:25:d7:2f:0e:39:3c:
         a6:45:6e:3d:8a:bd:07:49:4e:32:f9:6d:02:f0:70:e9:c1:53:
         fd:a3:6c:f0:85:65:45:a6:34:c7:de:aa:4a:37:56:ce:3e:57:
         b6:6d:29:17:64:55:0e:e1:f7:67:5f:06:c7:c8:b6:a5:fb:f2:
         85:a9:cf:44:6f:20:bc:d2:68:49:f0:6c:57:cf:1a:25:90:c9:
         e7:01:e4:02:74:ef:e7:05:c5:d4:1e:88:5f:e4:e2:4c:0f:fa:
         33:58:55:7f:50:21:04:47:92:45:36:42:d1:42:aa:84:80:ec:
         fa:42:16:ae:f4:e7:32:06:0e:e1:b5:1a:95:90:c3:00:b1:f0:
         78:44:60:cf:1e:64:a9:ee:9c:59:ec:71:5a:4e:ed:4b:6a:35:
         69:a2:9d:42:46:a7:f2:82:a2:95:1d:5e:bc:98:b5:3d:08:22:
         f4:4e:df:c2:05:cb:b9:cd:c3:a8:60:13:8a:ff:50:3b:7d:7d:
         53:22:ce:d6:2b:0b:4d:01:4d:52:84:0d:6a:a7:1c:3c:77:30:
         d9:ba:95:5f:54:6a:78:6b:36:b4:65:91:16:f6:a8:35:6f:ca:
         42:cc:90:b2:2d:57:ba:71:57:c8:d1:20:b7:17:06:fc:0f:3f:
         da:ea:66:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----