Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/8b08e2329873d9a367cf07298e894fb33b125ebb.roa
File:                     8b08e2329873d9a367cf07298e894fb33b125ebb.roa (raw, json)
Hash identifier:          SmTO7QOPcsuNfjPHSnXlF3pG3/VIvnUgODF6/6zfIG4=
Subject key identifier:   0B:12:C5:D6:A3:B6:64:99:9A:CB:77:9E:35:B0:A2:02:8C:10:71:93
Certificate issuer:       /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Certificate serial:       0D6F39
Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/8b08e2329873d9a367cf07298e894fb33b125ebb.roa
Signing time:             Wed 24 Mar 2021 14:29:04 +0000
ROA not before:           Wed 24 Mar 2021 14:29:03 +0000
ROA not after:            Tue 24 Mar 2026 14:29:03 +0000
asID:                     28114
IP address blocks:        186.183.0.0/17 maxlen: 17
                          2803:2600:19::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880441 (0xd6f39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
        Validity
            Not Before: Mar 24 14:29:03 2021 GMT
            Not After : Mar 24 14:29:03 2026 GMT
        Subject: CN=8b08e2329873d9a367cf07298e894fb33b125ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:44:45:2a:11:cd:f4:d0:20:18:1c:a6:9f:76:
                    ba:b6:61:95:0a:ba:fc:b8:ed:68:63:ec:7e:4d:71:
                    9e:44:7e:28:6d:85:be:c8:62:cb:e5:67:38:b2:a7:
                    6e:be:84:7d:12:4d:d6:8f:22:9d:8f:0b:fe:46:2c:
                    e0:8d:8d:9e:cd:6a:aa:27:af:22:23:76:f2:46:61:
                    df:75:ab:99:09:39:57:fb:39:93:8a:42:6f:2b:24:
                    01:35:2f:eb:bf:d4:b6:8b:35:f3:c5:1a:ab:b8:6c:
                    63:65:90:62:7c:9a:e1:0e:70:a4:a2:57:19:c7:a3:
                    c2:97:a9:6a:34:27:36:8a:97:8e:c7:b9:17:87:fa:
                    87:2c:a8:a9:ce:8c:a1:36:05:ea:b2:af:06:0b:78:
                    a7:12:aa:70:96:86:00:db:46:06:b7:0f:17:2f:70:
                    84:c0:40:06:b4:b0:07:f4:43:a1:6b:7c:a6:ec:b9:
                    f0:3b:02:2f:d2:2d:0e:3f:de:35:be:70:e4:1c:f1:
                    bf:b1:fe:59:f6:18:c9:f8:ea:e7:3e:29:37:4d:0f:
                    9e:e1:17:24:e4:30:2f:56:62:03:3b:88:51:cb:c4:
                    b1:75:b8:19:b9:41:af:0a:c1:88:c8:60:b4:f7:e8:
                    73:8a:f4:10:8d:51:9a:04:ae:5d:f1:ca:73:b5:58:
                    e3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:12:C5:D6:A3:B6:64:99:9A:CB:77:9E:35:B0:A2:02:8C:10:71:93
            X509v3 Authority Key Identifier:
                keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/8b08e2329873d9a367cf07298e894fb33b125ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.0.0/17
                IPv6:
                  2803:2600:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:ad:29:41:9e:9c:f6:b6:8d:11:74:2f:75:26:3a:4a:19:b9:
         da:49:b2:ee:f8:e7:6b:a4:0f:36:70:1d:76:bb:86:6d:61:1f:
         ea:28:cc:76:4d:83:e4:5b:ac:8e:dd:24:6e:99:fe:c9:99:a1:
         a9:80:2c:6f:10:59:d2:35:ac:3a:e8:ba:84:0a:ef:f3:d0:7e:
         4b:a9:30:6b:4b:83:2c:c7:59:b5:62:c0:c4:3f:f4:56:8e:b6:
         34:49:c8:f8:a7:db:10:c4:95:e9:bc:66:85:c6:2e:04:27:06:
         68:fa:ea:01:f6:2a:cd:ad:ff:86:06:00:4d:7d:b2:85:54:f3:
         0a:f7:5f:bc:ee:92:03:c7:99:63:ce:df:75:43:43:57:ad:0f:
         91:4b:68:70:6d:73:a7:e3:6c:ee:a7:22:96:ae:42:3e:1c:6b:
         c4:2f:b6:79:01:d3:03:e9:f9:ce:23:54:a7:ab:d4:11:a4:2e:
         f2:0b:d2:76:c1:cb:51:6d:33:40:85:6b:8b:d9:c8:81:d2:97:
         3b:77:97:f6:8c:8b:e3:d3:36:ac:d1:0d:36:0e:28:5b:6d:8a:
         fe:27:f1:3f:10:06:0c:b2:55:a3:37:88:7f:ab:f0:2b:1e:a2:
         8b:ac:6d:c7:58:93:68:e1:b7:aa:13:0d:a1:08:9f:46:a3:0e:
         4f:8e:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----