Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8a8aa86-e86b-4ffa-92f9-b565404f4659/4aefce6e37ffa1520f51df535ccd1611cee7cd4e.roa
File:                     4aefce6e37ffa1520f51df535ccd1611cee7cd4e.roa (raw, json)
Hash identifier:          fgAXgFwSs/rkCf/sE56G3/9VZMwvtdv5PHP6P3lfo7Q=
Subject key identifier:   F4:EC:6A:6F:89:6C:69:B8:66:C0:6C:DD:73:57:80:57:E3:E9:AA:4B
Certificate issuer:       /CN=ebedcbcfe1c07143badb5838ff5d6bc181610b63
Certificate serial:       0623C3
Authority key identifier: 25:53:59:E0:40:45:3E:61:A0:1A:06:3F:37:00:E5:35:C3:07:D2:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebedcbcfe1c07143badb5838ff5d6bc181610b63.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d8a8aa86-e86b-4ffa-92f9-b565404f4659/4aefce6e37ffa1520f51df535ccd1611cee7cd4e.roa
Signing time:             Wed 24 Mar 2021 14:31:09 +0000
ROA not before:           Wed 24 Mar 2021 14:31:09 +0000
ROA not after:            Tue 24 Mar 2026 14:31:09 +0000
asID:                     52409
IP address blocks:        190.120.176.0/20 maxlen: 24
                          2803:9100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402371 (0x623c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebedcbcfe1c07143badb5838ff5d6bc181610b63
        Validity
            Not Before: Mar 24 14:31:09 2021 GMT
            Not After : Mar 24 14:31:09 2026 GMT
        Subject: CN=4aefce6e37ffa1520f51df535ccd1611cee7cd4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6e:07:e8:70:e5:ee:3e:57:49:70:6a:26:80:
                    e9:77:62:ff:70:48:7f:20:f5:d7:fb:32:5d:8a:05:
                    c9:2a:ac:2b:ab:4d:4a:12:cf:0d:98:30:b6:2a:ee:
                    31:e7:68:0b:d7:a0:13:fb:5a:b9:ff:e8:9d:16:2f:
                    57:f5:ea:c1:36:81:8c:00:75:6a:56:5f:bd:7b:58:
                    1d:0c:14:6f:85:2f:35:ec:0a:bf:e7:8f:34:b3:23:
                    22:4e:04:ff:11:21:ee:8b:46:14:9f:75:e2:89:cc:
                    39:b2:c2:b0:82:4c:34:aa:6c:da:18:b5:2d:3e:88:
                    12:87:d7:9e:38:67:b5:40:3b:3b:60:32:57:22:78:
                    00:e5:c4:a5:97:f2:59:67:ea:3a:ad:a2:d6:ea:d4:
                    01:5c:88:08:c6:80:88:24:33:be:b6:6f:4f:a9:d3:
                    44:27:64:21:96:ca:07:f0:e6:94:59:62:ef:7a:03:
                    9a:06:2d:05:e1:bd:b1:5e:a3:53:5e:ba:9a:66:d9:
                    8c:20:ea:c9:27:e3:eb:89:97:9c:8a:ae:2d:f5:0b:
                    7b:3e:38:24:75:14:67:d7:ae:b7:c9:4c:2e:32:9c:
                    e4:7e:11:e6:71:96:95:41:49:2b:e7:ed:3d:77:a5:
                    2b:d1:97:b3:75:07:97:50:a5:0b:e6:28:da:ed:cd:
                    51:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EC:6A:6F:89:6C:69:B8:66:C0:6C:DD:73:57:80:57:E3:E9:AA:4B
            X509v3 Authority Key Identifier:
                keyid:25:53:59:E0:40:45:3E:61:A0:1A:06:3F:37:00:E5:35:C3:07:D2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebedcbcfe1c07143badb5838ff5d6bc181610b63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8a8aa86-e86b-4ffa-92f9-b565404f4659/4aefce6e37ffa1520f51df535ccd1611cee7cd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d8a8aa86-e86b-4ffa-92f9-b565404f4659/ebedcbcfe1c07143badb5838ff5d6bc181610b63.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.176.0/20
                IPv6:
                  2803:9100::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:49:f5:75:e6:9d:74:fc:6d:c0:76:0f:06:7b:dc:4f:e2:c4:
         bc:97:d6:52:94:8c:13:89:5c:97:44:a4:5f:59:ba:3c:00:77:
         65:c3:f7:96:c9:8a:64:25:b1:10:c2:23:56:b2:eb:93:09:e0:
         a9:63:47:e5:df:b5:7b:a6:fc:12:9e:b9:29:15:18:5f:41:e1:
         8c:ae:99:fa:32:64:61:40:c1:4b:6c:4c:be:68:cd:de:c8:5e:
         4a:ab:1a:0e:2e:32:ec:77:03:86:1f:b3:17:8b:72:dc:08:11:
         9d:3c:77:4d:75:db:1b:37:5d:d7:73:7a:25:4d:d7:c7:17:06:
         cd:a4:b4:49:b5:31:17:39:e7:f3:f8:4e:38:1f:7d:75:1e:04:
         06:79:2f:a8:9c:f5:bf:d0:65:2b:a6:d9:77:e9:27:ef:b9:09:
         1f:c9:8d:1a:6d:c5:61:3f:0d:b8:2b:13:33:fc:b0:a1:c8:f7:
         11:31:52:39:ab:b4:db:db:f9:3f:69:2e:31:60:da:48:61:11:
         f5:ec:f4:64:2e:10:1d:82:30:8e:22:1f:ec:50:1b:98:e6:c5:
         eb:43:20:d5:0d:db:56:b9:b7:5c:ba:06:88:f6:0d:d5:c2:ef:
         2f:cb:11:0f:56:a1:6e:5c:ae:d3:2c:54:e6:1b:2d:ea:35:2b:
         71:c8:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----