Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/6ae67ce9d2580d5c40b03758bd072c2d9f6b354e.roa
File:                     6ae67ce9d2580d5c40b03758bd072c2d9f6b354e.roa (raw, json)
Hash identifier:          i+0gru7njeSK6P4DiZkoTkewBp6fN0tzOe44kWRu9CY=
Subject key identifier:   2A:D8:FD:F2:38:AB:BF:9A:96:B8:86:E3:CA:23:B7:54:37:31:AD:58
Certificate issuer:       /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial:       194405
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/6ae67ce9d2580d5c40b03758bd072c2d9f6b354e.roa
Signing time:             Wed 13 Jul 2022 12:16:58 +0000
ROA not before:           Wed 13 Jul 2022 03:00:00 +0000
ROA not after:            Sat 13 Jul 2024 03:00:00 +0000
asID:                     10481
IP address blocks:        179.0.14.0/24 maxlen: 24
                          200.13.42.0/23 maxlen: 24
                          200.33.82.0/24 maxlen: 24
                          2801:0:440::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1655813 (0x194405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
        Validity
            Not Before: Jul 13 03:00:00 2022 GMT
            Not After : Jul 13 03:00:00 2024 GMT
        Subject: CN=6ae67ce9d2580d5c40b03758bd072c2d9f6b354e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:5e:6b:a5:01:53:43:95:e1:d6:a7:d8:f6:
                    d7:e3:2d:69:38:38:cf:1a:f6:e4:5d:e7:eb:63:bb:
                    81:29:5e:11:20:0c:b4:72:f0:e5:37:aa:2b:55:80:
                    9d:ed:6d:3b:5d:2f:ab:6f:5a:63:13:92:43:f9:5f:
                    a8:47:91:b8:8a:05:fa:4a:7b:ff:25:d5:a6:d2:92:
                    81:22:7c:5c:71:e1:51:99:a5:be:c6:01:ed:9a:0a:
                    35:77:3b:99:57:86:35:4b:6f:f7:a5:8a:31:60:ce:
                    26:d4:a3:5f:35:b5:91:fe:15:30:44:00:96:7e:2e:
                    e7:71:cd:88:5a:19:c1:3b:1d:69:23:9b:8e:fc:80:
                    a0:1c:4e:f0:80:46:57:6f:8d:c7:3f:65:51:ff:e0:
                    85:22:06:3d:9b:e0:c4:91:40:d1:20:b6:b5:83:63:
                    df:0d:65:b8:13:dd:99:60:72:60:0b:a8:fd:01:fd:
                    65:1e:f2:a9:b4:1d:5d:02:86:13:1b:40:04:7e:32:
                    62:10:56:73:a7:ad:a0:e7:7e:74:11:aa:bf:f5:34:
                    bf:8d:70:29:49:d9:7a:5b:c3:b8:e3:d4:6c:0f:28:
                    3c:07:93:e0:93:dd:40:a4:e2:15:57:af:07:8e:1d:
                    b2:d1:61:b6:f2:b0:06:69:8e:07:69:39:2c:da:a5:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D8:FD:F2:38:AB:BF:9A:96:B8:86:E3:CA:23:B7:54:37:31:AD:58
            X509v3 Authority Key Identifier:
                keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/6ae67ce9d2580d5c40b03758bd072c2d9f6b354e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24
                  200.13.42.0/23
                  200.33.82.0/24
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:b7:99:69:7d:df:4d:48:db:d9:f9:00:9a:82:9b:7d:b3:9c:
         f6:15:fd:87:d3:b2:d4:0d:8e:b1:14:4e:34:df:18:3c:c8:f7:
         47:2f:92:9a:de:7f:2d:c9:64:c0:a8:ae:6b:f0:93:ef:89:a9:
         08:87:df:8b:38:2f:ef:9c:4c:7b:b4:6c:64:f3:c7:0e:3e:60:
         e1:c3:94:77:6c:0c:8c:a9:b7:7e:29:b2:ee:33:6b:81:ac:93:
         95:00:7f:bc:83:b6:f1:e7:86:3f:c4:f8:a3:c2:ae:ee:a4:00:
         e3:5b:ba:cd:07:8d:9b:43:1a:80:34:4c:3f:00:fd:25:0f:32:
         b2:84:6e:0f:da:c7:9c:37:f9:88:df:56:ef:bb:67:c6:f8:91:
         75:50:70:47:11:83:ef:42:c4:6d:26:9e:c7:01:6c:28:66:de:
         aa:d0:8e:c1:c9:71:08:bb:13:4e:8f:19:be:f7:aa:ad:49:bc:
         d7:48:30:85:50:3a:e0:62:0f:31:db:3f:99:32:ce:c8:0b:fd:
         d3:18:02:38:1d:de:30:04:4f:2c:08:a7:ca:0f:fb:cd:ce:5e:
         1b:71:5d:44:53:dd:ea:4a:12:fb:d4:78:59:72:7d:f4:ad:15:
         57:48:fe:d0:f3:30:1d:b2:12:f9:b6:25:2a:ed:3e:35:ff:cd:
         c4:f6:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----