Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/55f217cc6423971e5ccb45235dd8dbadbd225b8a.roa
File:                     55f217cc6423971e5ccb45235dd8dbadbd225b8a.roa (raw, json)
Hash identifier:          jXPgaJr2bhyHsFfHXZ6ZhGbqdl9wSEDB+G7d8bYIbyE=
Subject key identifier:   50:59:B6:4D:31:8F:A0:C6:0A:D0:31:89:AD:A2:4E:00:EB:AB:97:AE
Certificate issuer:       /CN=d096404f63772aa8165da1f7e01c34c4e378a916
Certificate serial:       0D454E
Authority key identifier: AE:84:A6:DF:5E:30:C0:53:10:DA:CC:67:B6:EF:FE:41:4E:74:D2:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d096404f63772aa8165da1f7e01c34c4e378a916.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/55f217cc6423971e5ccb45235dd8dbadbd225b8a.roa
Signing time:             Wed 24 Mar 2021 14:38:04 +0000
ROA not before:           Wed 24 Mar 2021 14:38:03 +0000
ROA not after:            Tue 24 Mar 2026 14:38:03 +0000
asID:                     27725
IP address blocks:        181.225.224.0/19 maxlen: 19
                          190.6.64.0/20 maxlen: 20
                          190.6.80.0/20 maxlen: 20
                          190.15.144.0/20 maxlen: 20
                          190.92.112.0/20 maxlen: 20
                          200.13.144.0/21 maxlen: 21
                          200.55.128.0/21 maxlen: 21
                          200.55.136.0/21 maxlen: 21
                          200.55.144.0/21 maxlen: 21
                          200.55.152.0/21 maxlen: 21
                          200.55.160.0/20 maxlen: 20
                          200.55.176.0/20 maxlen: 20
                          2001:1358::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869710 (0xd454e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d096404f63772aa8165da1f7e01c34c4e378a916
        Validity
            Not Before: Mar 24 14:38:03 2021 GMT
            Not After : Mar 24 14:38:03 2026 GMT
        Subject: CN=55f217cc6423971e5ccb45235dd8dbadbd225b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:cb:53:56:60:5c:1c:28:d8:18:25:08:d2:
                    88:e4:d3:2d:82:10:24:d5:33:3a:d9:c8:96:36:a3:
                    cb:b8:cf:9e:cb:ad:72:ff:16:f8:10:93:40:6e:c0:
                    74:bc:df:3a:1d:fa:15:d1:20:50:5b:8b:8e:8f:86:
                    fb:51:b4:6e:ea:1e:d4:13:4c:73:1a:c7:ff:d7:07:
                    62:af:08:e2:8a:f9:dd:4b:83:cc:eb:04:7e:80:dc:
                    fc:95:be:87:9d:fa:17:b6:b4:33:ac:eb:ad:e3:e9:
                    81:72:f6:01:fb:e8:a2:ca:dc:24:b8:64:41:81:fe:
                    1a:37:53:c3:8d:e2:51:90:d0:9c:57:47:95:62:9e:
                    e7:bd:c4:b1:ce:37:1f:14:2c:d0:67:2d:9b:79:d3:
                    bc:c2:1b:a2:04:c9:2e:1e:e5:45:e2:aa:7e:45:7c:
                    cc:ed:fb:3a:a9:5b:14:7e:41:ec:35:e0:61:60:a3:
                    63:f1:47:19:d8:7a:1c:04:c6:3e:20:5a:27:41:60:
                    55:66:9c:0c:5f:86:f9:3d:b0:d0:85:d5:66:31:d0:
                    8a:34:a3:94:b7:0c:d8:14:d1:ff:14:c0:b1:7a:75:
                    e3:d0:60:17:73:0f:88:a8:7f:e5:51:5d:1e:11:a8:
                    fc:58:90:2d:3d:87:52:d7:1d:95:18:10:16:b6:26:
                    51:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:59:B6:4D:31:8F:A0:C6:0A:D0:31:89:AD:A2:4E:00:EB:AB:97:AE
            X509v3 Authority Key Identifier:
                keyid:AE:84:A6:DF:5E:30:C0:53:10:DA:CC:67:B6:EF:FE:41:4E:74:D2:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d096404f63772aa8165da1f7e01c34c4e378a916.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/55f217cc6423971e5ccb45235dd8dbadbd225b8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/d096404f63772aa8165da1f7e01c34c4e378a916.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.224.0/19
                  190.6.64.0/19
                  190.15.144.0/20
                  190.92.112.0/20
                  200.13.144.0/21
                  200.55.128.0/18
                IPv6:
                  2001:1358::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:ac:db:8c:30:ab:38:75:52:7c:de:6b:81:34:e4:bd:f3:d7:
         f0:a4:d0:32:71:78:fa:77:24:d6:45:00:8f:a6:eb:a7:e7:45:
         94:60:07:82:f5:e2:5f:e3:80:84:4b:b8:23:bc:f0:b5:d5:d9:
         ed:85:15:09:39:ad:98:ed:c9:64:ff:8d:d2:f8:3d:27:c2:42:
         76:11:28:98:04:1e:49:91:cf:e2:f9:5a:5a:5f:47:47:cd:62:
         b2:85:18:ef:80:37:e4:7a:f3:72:af:2a:10:52:1e:2a:02:9a:
         a8:71:b5:43:01:b0:ac:63:df:97:ca:27:8c:9d:13:85:e7:60:
         36:4b:34:06:e2:ab:41:9f:d0:36:d4:f7:05:88:63:56:e4:18:
         ec:1d:d9:48:b0:a2:6d:1b:37:1c:18:ec:e1:59:27:84:d5:e1:
         92:2f:e2:8c:6b:a7:19:cf:9a:9d:a7:8c:35:cb:f6:03:9a:82:
         27:e3:2a:a9:d8:98:b3:46:62:8a:d9:be:83:49:96:33:be:26:
         8d:47:cf:42:ec:e8:2f:cb:c2:4a:b8:19:a9:2a:dc:39:f1:37:
         6e:7d:c7:94:e8:96:a3:02:9f:f8:36:7b:fe:db:f3:16:53:a3:
         74:43:e3:3f:77:9a:20:af:3a:80:56:32:2c:a4:6c:93:e5:4a:
         a3:08:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----