Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/57db05487cf301e5d7dde078f697aed9854c329d.roa
File:                     57db05487cf301e5d7dde078f697aed9854c329d.roa (raw, json)
Hash identifier:          lQ1vVzYP4pa4ssRWguZKoONoeYt+TZbIJ/xeNS9zj4I=
Subject key identifier:   E6:14:20:AC:63:36:26:19:13:E0:DF:F3:46:10:A4:FB:DC:31:E2:91
Certificate issuer:       /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Certificate serial:       0D6BC9
Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/57db05487cf301e5d7dde078f697aed9854c329d.roa
Signing time:             Wed 24 Mar 2021 14:29:04 +0000
ROA not before:           Wed 24 Mar 2021 14:29:03 +0000
ROA not after:            Tue 24 Mar 2026 14:29:03 +0000
asID:                     28114
IP address blocks:        168.195.108.0/23 maxlen: 24
                          2803:2600:202::/48 maxlen: 64
                          2803:2600:203::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879561 (0xd6bc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
        Validity
            Not Before: Mar 24 14:29:03 2021 GMT
            Not After : Mar 24 14:29:03 2026 GMT
        Subject: CN=57db05487cf301e5d7dde078f697aed9854c329d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:86:0c:47:f5:2d:5b:b9:89:9f:da:d3:92:
                    d3:8c:8d:4c:a9:16:6a:0e:36:99:b2:c9:60:b1:f0:
                    44:e7:e8:ff:86:21:39:6a:e3:a3:dc:5e:9d:ee:6a:
                    6a:60:42:a8:fa:8d:a5:bd:93:03:83:49:7d:28:b6:
                    53:7d:fd:a2:33:78:24:aa:21:d4:c6:25:40:86:81:
                    38:ad:f5:7b:86:9d:9c:c5:32:b9:96:66:d6:d8:95:
                    92:42:01:6a:f4:ed:f7:f6:b0:34:ce:b7:35:2b:91:
                    8c:4a:46:f4:54:b8:60:57:b6:d1:cd:81:7f:ae:ec:
                    fb:6a:0f:d5:1a:ba:47:33:58:87:2f:df:da:9b:cd:
                    19:55:92:ae:ab:55:b7:53:b3:58:fe:02:f8:a9:08:
                    cd:97:fd:d2:01:a7:2d:b5:f6:d4:66:2a:78:dd:eb:
                    46:ab:39:64:5d:b9:73:56:33:0a:2c:f8:1e:86:0c:
                    3a:72:56:d9:33:e0:4d:97:8a:0d:cb:64:fa:b0:1b:
                    37:5a:f3:ff:4a:f9:d3:46:ca:ba:94:b3:e1:01:7a:
                    8e:a0:57:bd:6b:95:41:8a:95:2c:03:bf:d3:b6:a1:
                    53:05:cd:6b:60:a2:ca:4f:f1:3b:c8:cc:db:12:27:
                    90:34:ab:30:c1:de:28:23:be:b0:40:e4:b6:16:61:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:14:20:AC:63:36:26:19:13:E0:DF:F3:46:10:A4:FB:DC:31:E2:91
            X509v3 Authority Key Identifier:
                keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/57db05487cf301e5d7dde078f697aed9854c329d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.108.0/23
                IPv6:
                  2803:2600:202::/47

    Signature Algorithm: sha256WithRSAEncryption
         63:2d:dc:8d:23:09:5c:9b:06:93:03:81:8f:47:69:5b:75:af:
         4f:d3:e8:24:71:8f:d4:3a:e2:d4:5b:12:a7:09:fc:31:a9:90:
         65:cb:70:97:53:94:11:06:e9:c4:10:31:8f:07:9f:4c:28:d4:
         5c:e4:24:3e:e9:73:73:a3:dc:ca:d0:41:40:af:d0:7f:6f:7f:
         51:e4:55:fc:e5:25:2d:59:36:ce:5f:a4:07:23:17:5f:ce:62:
         f3:5e:3d:e4:99:d5:87:2c:fc:f7:0a:48:86:75:75:58:6d:bf:
         28:df:79:ce:8d:58:73:96:e2:c0:56:c2:3e:97:44:ea:9e:4e:
         6e:e1:03:a5:66:69:81:95:e3:d4:47:b1:8e:e9:96:3d:b9:04:
         ed:f8:e6:8a:ed:81:bf:fb:d7:40:c2:19:91:92:b5:c5:79:0a:
         7d:bd:77:80:49:bd:fd:73:50:09:fe:f0:d5:0b:f7:03:a5:40:
         8b:66:f2:fb:fd:11:36:a9:3e:c8:2d:20:7d:5b:c4:a8:b0:84:
         73:c9:6a:c0:4c:c6:99:3e:6e:e0:66:76:d6:b1:71:75:ba:1b:
         d1:14:c4:0f:73:39:98:ab:d6:81:c2:d8:c1:ab:52:a2:89:0e:
         66:78:00:04:14:62:90:f4:62:89:0c:c3:03:22:04:8c:38:3a:
         2d:71:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----