Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/3b012688c5ffc4b2d6fc127215d3c067636d7554.roa
File:                     3b012688c5ffc4b2d6fc127215d3c067636d7554.roa (raw, json)
Hash identifier:          hiV1Fuw6aLyYpAdFtyMMBVNZt6PRgV+BDR5pQPymdc4=
Subject key identifier:   C5:6D:1C:FF:60:AE:17:69:59:2E:B9:D3:D4:3A:36:58:85:9D:3B:A0
Certificate issuer:       /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial:       1924BF
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/3b012688c5ffc4b2d6fc127215d3c067636d7554.roa
Signing time:             Mon 11 Jul 2022 17:49:10 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52275
IP address blocks:        179.0.14.0/24 maxlen: 24
                          200.13.42.0/23 maxlen: 23
                          200.13.42.0/24 maxlen: 24
                          200.13.43.0/24 maxlen: 24
                          200.33.82.0/24 maxlen: 24
                          2801:0:440::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1647807 (0x1924bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=3b012688c5ffc4b2d6fc127215d3c067636d7554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:ad:0a:5d:db:64:51:84:66:8f:89:56:c8:
                    a0:0d:e5:d7:6f:71:1c:26:6b:77:d1:fd:2b:ee:fc:
                    99:e6:50:23:82:89:0c:28:e3:ad:7a:c1:10:57:4f:
                    b9:03:49:27:2f:99:42:c4:0a:34:3c:05:d6:d0:e2:
                    fc:85:cc:a7:ad:4a:ae:fd:01:37:33:24:28:a3:ae:
                    8a:3c:b8:8f:8f:d8:0b:73:2d:c9:3e:a1:5e:42:35:
                    e0:7a:f8:0b:b5:59:f4:3c:9d:9e:d0:5f:ca:e8:a3:
                    66:bc:e2:e4:6e:6e:e0:06:e9:32:8c:1d:a8:0a:af:
                    de:ec:0b:05:56:69:0c:44:55:99:d8:86:5c:bf:be:
                    8d:3a:24:22:e7:92:37:dc:93:a7:f0:92:67:ae:33:
                    c5:8f:8c:19:56:82:2f:00:76:9d:60:92:9f:63:52:
                    b8:7f:e9:3a:34:2d:97:5b:c6:0c:79:35:ca:68:2c:
                    89:aa:e6:55:f6:5f:4e:d8:81:74:53:23:9e:e9:a7:
                    41:55:c8:93:fc:ad:b8:8e:d1:91:12:6f:59:75:2e:
                    d7:dc:98:ea:7c:90:59:d5:4b:c1:b8:b7:55:da:b4:
                    16:c8:93:63:b2:d3:7b:3b:cb:be:21:59:4d:d9:af:
                    d3:8c:12:55:e5:87:4d:06:0b:fe:86:a9:a7:42:95:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6D:1C:FF:60:AE:17:69:59:2E:B9:D3:D4:3A:36:58:85:9D:3B:A0
            X509v3 Authority Key Identifier:
                keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/3b012688c5ffc4b2d6fc127215d3c067636d7554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24
                  200.13.42.0/23
                  200.33.82.0/24
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:21:2c:11:c8:70:19:93:0f:8a:0d:d1:22:01:a4:9c:3a:
         25:a9:97:38:2b:59:06:3a:8d:31:03:3d:a4:98:a0:db:37:d5:
         a1:a1:2b:e7:e7:06:fa:c1:a9:0b:1d:a6:ce:9d:bc:15:f3:77:
         f2:4d:1c:a8:40:6f:1d:64:be:d9:31:84:c0:7d:42:92:9c:3a:
         a5:50:45:cb:f2:44:4b:95:71:28:53:9d:b9:25:91:b3:2e:70:
         b2:c5:fe:ff:f3:8e:36:10:fb:80:49:13:27:f4:e4:47:34:c3:
         48:d3:e4:28:44:f1:5b:c8:b8:75:07:3c:ae:7e:f0:6d:06:25:
         a5:42:72:a7:ff:17:fb:4e:cd:c6:2d:59:05:c6:94:40:8d:c4:
         e5:21:aa:a9:c4:ed:ae:d8:a5:85:2e:5a:da:81:d8:3c:49:d2:
         1b:68:21:8c:e3:76:bd:3c:d8:4c:ec:1c:90:53:64:a1:5d:84:
         bb:13:d2:eb:3e:2d:78:f1:7a:00:6e:f0:c4:81:fe:23:b8:77:
         94:91:0e:cb:a2:45:0b:0f:8f:28:45:81:70:63:1f:33:67:be:
         2c:89:8d:ba:8c:5d:4b:68:22:5e:9d:c1:91:7c:5b:c0:2f:c0:
         23:48:d5:17:da:32:eb:50:92:14:40:1b:67:a5:a6:61:62:a1:
         7e:a9:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----