Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/9a6fa54e7c89237ee55814194af6421743d51864.roa
File:                     9a6fa54e7c89237ee55814194af6421743d51864.roa (raw, json)
Hash identifier:          K/6TsTafkHAKVeL/AYUOWxU95ES8AO33T2UthezJVBM=
Subject key identifier:   0E:CD:33:B4:DD:3C:A3:F6:B1:7B:3B:1C:4C:A3:B2:C3:2F:91:28:42
Certificate issuer:       /CN=e69db0dddc072dab05b76f666b2b150d51ad28d1
Certificate serial:       0D3455
Authority key identifier: B3:E7:FA:2E:50:D1:99:E0:6D:83:A0:5F:4E:58:DE:04:B3:40:88:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e69db0dddc072dab05b76f666b2b150d51ad28d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/9a6fa54e7c89237ee55814194af6421743d51864.roa
Signing time:             Wed 24 Mar 2021 14:46:36 +0000
ROA not before:           Wed 24 Mar 2021 14:46:36 +0000
ROA not after:            Tue 24 Mar 2026 14:46:36 +0000
asID:                     264635
IP address blocks:        132.255.208.0/22 maxlen: 22
                          167.249.20.0/22 maxlen: 22
                          2803:6780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865365 (0xd3455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69db0dddc072dab05b76f666b2b150d51ad28d1
        Validity
            Not Before: Mar 24 14:46:36 2021 GMT
            Not After : Mar 24 14:46:36 2026 GMT
        Subject: CN=9a6fa54e7c89237ee55814194af6421743d51864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:60:d9:78:f8:7f:43:4b:42:b4:22:ee:21:
                    12:35:45:1a:ec:06:7d:0c:0d:91:8c:b6:15:a5:fe:
                    2f:10:a1:68:d8:bb:fe:af:9d:ca:94:96:a4:ae:72:
                    d8:d5:9a:c4:a4:10:2e:40:3a:d5:cd:7d:35:f4:7f:
                    a1:eb:76:19:42:00:a3:68:c3:43:5c:9c:21:a1:51:
                    14:89:79:02:3c:99:6f:85:58:f1:68:1d:c7:29:56:
                    04:b2:52:1a:7b:99:e8:fc:d8:35:ae:43:c1:90:b4:
                    5f:e8:51:21:18:09:c0:e7:a3:8f:44:55:55:dc:d5:
                    f2:89:73:c7:87:8b:a0:33:3e:f4:80:dc:e7:29:06:
                    c3:53:a8:8a:3a:6b:8f:b0:c8:68:2f:12:4e:e7:9c:
                    d4:e4:f1:f4:73:93:c6:c0:fc:ac:35:c3:c1:54:61:
                    83:d9:d4:3e:b7:82:97:6a:9d:a5:fc:00:9c:30:55:
                    76:08:96:59:4e:fb:f0:49:30:48:9e:01:54:af:00:
                    f5:d7:42:2d:88:a3:44:ff:2b:c4:bf:bc:65:40:23:
                    ce:9b:e5:ce:c0:db:06:d5:55:eb:ff:f2:dd:d8:08:
                    f3:ea:7a:87:ac:f2:10:5e:4d:58:4b:12:c2:65:30:
                    f3:22:38:16:b1:ec:e6:f5:c9:06:08:85:e8:b6:a7:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CD:33:B4:DD:3C:A3:F6:B1:7B:3B:1C:4C:A3:B2:C3:2F:91:28:42
            X509v3 Authority Key Identifier:
                keyid:B3:E7:FA:2E:50:D1:99:E0:6D:83:A0:5F:4E:58:DE:04:B3:40:88:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e69db0dddc072dab05b76f666b2b150d51ad28d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/9a6fa54e7c89237ee55814194af6421743d51864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/e69db0dddc072dab05b76f666b2b150d51ad28d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.208.0/22
                  167.249.20.0/22
                IPv6:
                  2803:6780::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:02:72:e2:69:3c:a7:a4:f2:65:e0:a4:f7:1f:36:f7:0e:be:
         a9:19:25:f4:f2:f0:d2:ea:91:3e:44:d8:f7:52:4c:74:51:b3:
         55:74:3c:6b:22:9a:ab:72:79:f5:a4:a6:ef:ab:44:bf:ba:2d:
         b7:76:ac:9f:6c:62:03:d0:25:45:9e:cf:6a:e2:3b:af:a3:75:
         1f:30:a8:c2:0d:58:94:bc:61:bc:db:45:8f:b2:26:59:24:7b:
         ad:62:79:6d:10:34:76:6b:39:87:f9:1e:a8:2c:5c:aa:c9:d2:
         c4:bb:34:17:a6:62:4d:cf:8e:29:d3:7a:ac:a2:e3:8f:b3:d1:
         37:a8:59:b1:31:e9:74:6b:b9:41:ae:cd:fe:6f:4b:7a:d3:47:
         83:f0:c1:d0:b6:d8:88:8a:14:38:30:dc:60:5f:fb:62:a8:42:
         86:82:b3:7b:e6:e6:d6:32:b4:1c:89:77:50:d9:57:3b:7a:c1:
         2c:f2:54:aa:b6:bf:dc:72:a6:b7:cb:30:09:da:c1:e7:2e:fa:
         ba:9d:ab:06:58:c9:f3:6b:c5:be:ba:65:f4:d8:6c:94:9e:c9:
         dd:83:42:9c:63:04:b9:13:e2:fa:77:19:62:fe:9b:5b:5b:3e:
         8e:4b:7c:17:a8:27:b0:59:46:21:73:37:9e:f0:30:3d:95:40:
         19:51:35:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----