Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da38814e-d13e-4782-9cc8-02bd6a5484ae/4880328485e503e3563dffab57a4a96aa08b0574.roa
File:                     4880328485e503e3563dffab57a4a96aa08b0574.roa (raw, json)
Hash identifier:          p4IZedg4UUrG3RnCs1ctB3MmH7+gAhh8SzB7WOu9O8w=
Subject key identifier:   E5:6D:5D:13:FD:91:83:EB:44:EE:F6:7B:6E:0A:68:43:1E:3E:3A:61
Certificate issuer:       /CN=bada1b221e9d59bee5cea814e744cb7da002bd3f
Certificate serial:       0CB58D
Authority key identifier: 04:96:21:6F:36:98:65:44:94:7A:C1:9D:44:06:90:4D:57:78:79:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bada1b221e9d59bee5cea814e744cb7da002bd3f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/da38814e-d13e-4782-9cc8-02bd6a5484ae/4880328485e503e3563dffab57a4a96aa08b0574.roa
Signing time:             Wed 24 Mar 2021 14:29:09 +0000
ROA not before:           Wed 24 Mar 2021 14:29:09 +0000
ROA not after:            Tue 24 Mar 2026 14:29:09 +0000
asID:                     265806
IP address blocks:        181.191.186.0/23 maxlen: 24
                          2801:1f:3000::/48 maxlen: 49

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832909 (0xcb58d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bada1b221e9d59bee5cea814e744cb7da002bd3f
        Validity
            Not Before: Mar 24 14:29:09 2021 GMT
            Not After : Mar 24 14:29:09 2026 GMT
        Subject: CN=4880328485e503e3563dffab57a4a96aa08b0574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ee:40:93:d5:f6:09:00:3d:22:b4:2b:b2:b9:
                    61:79:8e:62:68:a7:19:25:e0:ae:0d:98:fc:df:0d:
                    e4:ec:4a:d4:a8:1d:17:81:21:95:77:dd:c5:04:ae:
                    28:09:47:79:58:54:69:29:45:ca:a8:8b:df:01:b9:
                    a8:ec:f6:7e:0d:ef:35:29:d2:c7:12:0c:59:c7:0e:
                    06:f4:95:8f:92:2b:5b:8a:e9:92:93:3f:b9:c1:b2:
                    e0:ac:f2:92:b8:b6:80:b2:7e:67:b7:4a:dd:68:fd:
                    14:2a:84:12:37:99:60:85:ce:3a:f6:f8:dc:9b:45:
                    04:27:e9:9d:b3:8a:48:3a:9c:0f:e3:b6:59:5d:3d:
                    6e:a9:6b:e8:b5:18:40:eb:39:74:d0:64:c4:32:52:
                    e0:c1:a8:fa:a3:43:f1:87:15:bc:96:3d:b8:4f:43:
                    e5:f3:8a:b8:a1:0c:2b:d3:73:fb:e2:3b:96:48:b5:
                    1d:db:d0:8c:2d:a9:82:71:61:10:95:6e:56:28:2d:
                    23:40:da:62:ad:c1:fe:a8:21:eb:82:cb:d2:78:a9:
                    8d:5d:52:ab:68:63:9c:94:bf:54:e9:a7:ee:e2:f7:
                    66:87:eb:8a:b9:6f:01:9d:be:d0:b3:36:94:5e:c8:
                    cb:a9:d7:c6:06:72:0e:03:89:ba:50:a2:3d:84:1e:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6D:5D:13:FD:91:83:EB:44:EE:F6:7B:6E:0A:68:43:1E:3E:3A:61
            X509v3 Authority Key Identifier:
                keyid:04:96:21:6F:36:98:65:44:94:7A:C1:9D:44:06:90:4D:57:78:79:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bada1b221e9d59bee5cea814e744cb7da002bd3f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da38814e-d13e-4782-9cc8-02bd6a5484ae/4880328485e503e3563dffab57a4a96aa08b0574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/da38814e-d13e-4782-9cc8-02bd6a5484ae/bada1b221e9d59bee5cea814e744cb7da002bd3f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.186.0/23
                IPv6:
                  2801:1f:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:49:6d:be:26:81:54:6e:a2:71:0e:e8:44:8c:90:56:bd:1c:
         60:6e:01:47:4a:1b:f9:a5:d5:71:ac:72:2f:7d:bb:ad:05:46:
         b6:47:18:d8:84:69:ae:71:ce:41:62:88:b7:6c:6d:ea:d4:df:
         55:15:39:2c:cb:51:86:8f:01:3a:b9:37:d7:20:26:33:4f:c4:
         3c:6d:50:d9:1e:4d:ae:58:46:1e:c4:91:e7:43:b9:6b:9a:a2:
         92:df:c2:0e:c6:b1:66:61:c9:2a:49:f5:4c:b5:13:c3:7e:ed:
         3b:9b:6f:e1:f2:fa:c9:94:c2:9d:6a:20:21:f0:fb:c4:89:12:
         4a:28:9b:79:85:9a:2a:d3:d0:ab:02:d5:95:6f:b1:ef:51:fc:
         3f:1a:55:26:03:40:0e:86:9f:0f:f5:ac:9b:e8:97:18:77:62:
         2f:f7:e7:a2:13:db:dd:38:b9:b0:be:7e:dc:5f:16:65:41:0b:
         41:a8:e0:a1:0e:ea:e5:a5:52:b8:45:b0:a8:60:5f:9c:45:a1:
         a1:c3:5e:85:63:b9:1a:4e:55:d7:72:1b:72:69:b2:a5:7f:8e:
         ee:06:91:c0:c2:08:fc:da:07:91:1c:07:4e:3b:40:26:19:80:
         55:4c:de:05:26:bf:64:fb:16:8b:7f:bf:af:f9:37:a8:1c:b9:
         55:24:3e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----