Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/162294b91c832757a196d17497d7eeca8fb07ed9.roa
File:                     162294b91c832757a196d17497d7eeca8fb07ed9.roa (raw, json)
Hash identifier:          O171TrfUeVJ9fmUSgFe8fQPrpBHcukS1vxuyShZ1H+s=
Subject key identifier:   85:0D:1A:64:75:4F:14:F9:A2:40:58:69:D1:45:68:EF:56:C2:40:BD
Certificate issuer:       /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Certificate serial:       0D561E
Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/162294b91c832757a196d17497d7eeca8fb07ed9.roa
Signing time:             Wed 24 Mar 2021 14:29:03 +0000
ROA not before:           Wed 24 Mar 2021 14:29:03 +0000
ROA not after:            Tue 24 Mar 2026 14:29:03 +0000
asID:                     28114
IP address blocks:        186.183.0.0/17 maxlen: 17
                          2803:2600:19::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874014 (0xd561e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
        Validity
            Not Before: Mar 24 14:29:03 2021 GMT
            Not After : Mar 24 14:29:03 2026 GMT
        Subject: CN=162294b91c832757a196d17497d7eeca8fb07ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:ae:7d:9f:10:fc:7d:10:e5:8e:bb:c9:a2:
                    55:97:c3:6c:a9:f4:88:ee:2a:5a:dd:58:e6:b9:8c:
                    cc:09:e8:c0:6f:ad:32:1f:d4:53:89:55:f4:fd:35:
                    9c:50:f6:d4:f2:da:6b:dc:d7:ff:41:93:6f:24:48:
                    ae:01:36:d9:9f:11:46:62:1d:c4:41:af:62:65:04:
                    b4:2c:f5:1b:35:14:76:51:f1:1d:98:ae:67:1d:62:
                    6a:61:fd:2b:32:e2:2d:09:ff:ee:44:57:6b:0a:e8:
                    09:26:45:7b:67:c0:08:cb:f3:fd:87:55:ca:03:4b:
                    f4:4e:ce:eb:e4:3c:0c:b8:5b:db:86:ea:1f:0f:63:
                    ba:b1:f8:16:44:09:be:fb:cb:18:11:28:42:53:5b:
                    72:cd:2a:ce:1b:bb:cb:e7:39:72:61:cf:7f:b4:2c:
                    74:19:6e:db:1d:72:c7:72:13:f5:f3:a9:3e:c2:79:
                    dd:00:c0:4e:fe:90:01:c6:ed:31:5c:e2:ab:3e:15:
                    8b:34:29:a0:98:f0:66:a8:6c:d5:9e:89:95:ad:a1:
                    be:95:1c:f8:c2:0f:cb:0e:f0:96:3a:3e:11:0d:55:
                    e5:9e:a3:61:bc:62:f6:ce:27:2b:7c:95:1a:bf:d3:
                    1b:1a:ed:28:9e:fc:5b:72:93:81:47:6c:31:27:60:
                    a7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0D:1A:64:75:4F:14:F9:A2:40:58:69:D1:45:68:EF:56:C2:40:BD
            X509v3 Authority Key Identifier:
                keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/162294b91c832757a196d17497d7eeca8fb07ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.0.0/17
                IPv6:
                  2803:2600:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:6c:22:71:3c:46:ed:b1:f2:eb:51:1a:86:ab:b9:b8:79:93:
         21:23:91:c6:d9:ef:05:6d:c3:02:f9:21:71:dd:e2:b7:82:54:
         ff:45:bb:ad:04:cb:7f:c0:6c:05:2f:7d:68:86:0e:0c:20:16:
         fe:06:68:a9:2f:66:71:30:07:4f:6f:93:b0:57:ff:b8:3d:0d:
         68:f8:08:66:4a:b2:e5:39:da:45:70:c5:62:78:7f:23:b4:ac:
         bd:04:3b:96:90:fc:36:24:54:48:9d:bb:51:09:80:67:88:c0:
         da:cf:4f:c3:61:d1:b1:49:d1:2e:84:73:d4:03:a1:72:88:28:
         9e:87:c1:d8:fa:21:a8:29:a3:09:7b:12:8b:68:d0:0b:01:c8:
         d9:88:f2:9a:10:ae:05:76:c1:78:da:d2:e4:62:dc:ec:d3:ba:
         55:b3:be:4c:a0:84:5d:90:25:57:9c:cf:fc:19:f0:ad:b1:45:
         d5:31:dc:63:79:fd:e2:24:66:e7:42:12:51:21:da:96:97:64:
         16:2e:4a:68:86:ac:20:97:cc:0f:df:c2:04:87:27:cb:6b:04:
         9c:d2:94:82:49:da:f1:1e:a9:a0:82:06:ae:e4:a9:b6:12:e1:
         55:de:10:90:ab:3d:b6:ba:55:67:87:3b:fc:3d:bb:7a:0a:ab:
         d7:d6:81:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----