Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/cc240a3966bae7873e4b3e9ea8c706858283b234.roa
File:                     cc240a3966bae7873e4b3e9ea8c706858283b234.roa (raw, json)
Hash identifier:          Hcwtz2DDyd/FXnpsFOU5EGY+9VJadinN4dxZ7/nMbKY=
Subject key identifier:   F0:39:CB:3F:19:D2:BB:35:79:07:FD:47:E1:F5:03:24:7D:F5:82:18
Certificate issuer:       /CN=4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa
Certificate serial:       0D2CDD
Authority key identifier: 16:32:85:BE:91:49:B4:FA:01:47:42:4E:C1:3D:94:27:89:1E:13:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/cc240a3966bae7873e4b3e9ea8c706858283b234.roa
Signing time:             Wed 24 Mar 2021 14:39:29 +0000
ROA not before:           Wed 24 Mar 2021 14:39:29 +0000
ROA not after:            Tue 24 Mar 2026 14:39:29 +0000
asID:                     27668
IP address blocks:        186.43.128.0/18 maxlen: 24
                          186.43.192.0/18 maxlen: 24
                          190.94.128.0/20 maxlen: 24
                          190.94.144.0/21 maxlen: 24
                          191.100.0.0/16 maxlen: 24
                          200.55.224.0/20 maxlen: 24
                          201.238.128.0/19 maxlen: 24
                          201.238.160.0/20 maxlen: 24
                          201.238.176.0/20 maxlen: 24
                          2800:2f0::/32 maxlen: 48
                          2800:400::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863453 (0xd2cdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa
        Validity
            Not Before: Mar 24 14:39:29 2021 GMT
            Not After : Mar 24 14:39:29 2026 GMT
        Subject: CN=cc240a3966bae7873e4b3e9ea8c706858283b234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:0e:cf:fb:0c:d4:0b:c5:ee:08:5b:e7:26:
                    0a:fc:f5:5c:45:d9:67:c0:e0:5d:d9:72:b9:e6:08:
                    fb:8d:b9:ac:42:35:a1:c8:03:30:3d:b7:3e:85:46:
                    70:71:6b:6a:f6:a9:e1:8c:80:f7:34:0b:9a:19:f5:
                    94:27:bd:ca:c7:8b:74:04:b3:79:49:a4:06:0a:a1:
                    5f:96:0e:fd:74:cf:73:7f:e3:82:c5:60:42:0f:2b:
                    75:b3:de:ca:2b:0f:0a:e1:52:8e:77:30:c1:a0:e4:
                    56:76:84:9e:34:54:8a:26:b8:97:3d:85:62:62:6f:
                    98:0b:77:5f:ee:d1:6d:c4:cb:7b:ce:7e:f9:05:e7:
                    7c:9c:c5:33:5a:9e:23:58:f7:b7:87:4a:73:40:fe:
                    7f:c2:75:ef:b4:fa:ff:3f:b3:4b:0d:f7:97:2d:f2:
                    eb:94:9f:b9:56:57:10:5f:6c:3d:6f:5c:d9:9d:ea:
                    92:45:24:19:7a:bb:fd:d4:8b:41:f8:4a:f2:6a:3b:
                    68:7b:ea:b3:86:db:9c:6b:2e:18:41:0b:a0:5c:33:
                    97:0e:72:18:19:9c:14:88:7c:b4:61:fd:1b:db:90:
                    6e:ac:0f:67:b9:09:8b:82:df:6f:a1:1c:50:48:ce:
                    1a:dc:9a:db:74:28:bf:5d:db:53:97:7a:dc:0c:c8:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:39:CB:3F:19:D2:BB:35:79:07:FD:47:E1:F5:03:24:7D:F5:82:18
            X509v3 Authority Key Identifier:
                keyid:16:32:85:BE:91:49:B4:FA:01:47:42:4E:C1:3D:94:27:89:1E:13:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/cc240a3966bae7873e4b3e9ea8c706858283b234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.43.128.0/17
                  190.94.128.0-190.94.151.255
                  191.100.0.0/16
                  200.55.224.0/20
                  201.238.128.0/18
                IPv6:
                  2800:2f0::/32
                  2800:400::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:7f:e3:ce:02:7a:92:b8:09:16:08:61:d2:9f:da:84:8c:f0:
         24:89:91:e0:a3:03:9e:16:b5:39:54:d8:0d:5d:0c:e9:50:3a:
         24:6e:42:94:2e:97:02:74:cf:d0:9e:50:33:4b:e4:06:82:9b:
         cf:d5:41:07:16:86:4c:d4:ab:7d:0d:f0:4f:42:21:e0:94:e7:
         39:e1:a6:d5:e4:b7:53:b8:d4:ab:97:1c:f7:69:8f:8f:1f:3a:
         8a:78:d3:28:fb:13:00:b8:59:4f:db:e3:28:5b:10:66:33:a9:
         a3:63:a5:1a:de:b4:2b:53:9d:fa:9c:7a:cc:65:b0:7e:e4:01:
         49:ec:9a:ec:3b:53:0f:a6:5f:b5:86:99:97:18:7a:4f:76:8b:
         26:7d:7e:73:30:32:ec:88:c4:f0:dd:57:b7:73:25:57:e1:3d:
         f5:0a:15:25:75:45:bd:5a:d9:ec:41:b0:4d:eb:4f:49:39:f1:
         1a:d8:39:4e:76:07:d4:18:16:b0:49:8b:3e:b7:50:71:7e:c5:
         81:8f:17:3f:66:3d:5a:64:0c:cd:35:81:08:3b:73:a6:d9:17:
         f8:9b:a7:23:b4:89:e2:8b:08:1e:42:89:44:4f:6d:db:d4:0f:
         12:11:04:bd:6f:64:05:2c:98:c0:39:54:2c:f0:a0:4c:e9:6f:
         e4:30:73:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----