Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/6feba0367d5ed2919ea904e46f689e0ca005feeb.roa
File:                     6feba0367d5ed2919ea904e46f689e0ca005feeb.roa (raw, json)
Hash identifier:          ebRcZMfqMg+VnK6nqh/en3GEv/5bT8rZryNSWiipauo=
Subject key identifier:   C4:DC:3E:2F:D8:93:12:A4:1D:1B:91:3B:D3:8A:7A:BE:37:BE:46:D0
Certificate issuer:       /CN=0a6ca410e9d4d6609a966809763133d36a922b82
Certificate serial:       12EA28
Authority key identifier: 61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/6feba0367d5ed2919ea904e46f689e0ca005feeb.roa
Signing time:             Mon 25 Oct 2021 15:26:01 +0000
ROA not before:           Fri 08 Oct 2021 03:00:00 +0000
ROA not after:            Sun 08 Oct 2023 03:00:00 +0000
asID:                     269799
IP address blocks:        201.182.243.0/24 maxlen: 24
                          2803:8420:ff00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239592 (0x12ea28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a6ca410e9d4d6609a966809763133d36a922b82
        Validity
            Not Before: Oct  8 03:00:00 2021 GMT
            Not After : Oct  8 03:00:00 2023 GMT
        Subject: CN=6feba0367d5ed2919ea904e46f689e0ca005feeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f2:d6:2b:3e:57:68:0d:9f:2f:43:61:23:21:
                    a6:74:f4:b6:89:fd:f9:f5:4c:57:e7:6c:cd:e7:89:
                    89:02:4f:07:13:e5:bc:a6:9b:ca:06:56:ae:53:26:
                    0e:27:53:0b:a2:67:87:47:5a:ca:7b:a8:53:69:e3:
                    5a:38:cf:82:b1:7e:d1:1f:00:61:97:05:61:ec:8f:
                    e2:4a:96:04:35:f8:ff:cf:a0:28:35:7d:c2:c5:9a:
                    9f:c1:c5:5e:d2:90:5d:eb:5b:62:b3:e3:59:56:ab:
                    cf:29:4b:f6:ae:b3:73:76:0f:1d:ed:63:31:1c:10:
                    96:7c:80:4d:b4:35:a5:7e:36:74:dc:f2:2d:77:a0:
                    c8:dd:3b:e6:3f:1c:b0:b6:51:55:e3:e5:7f:33:08:
                    a1:2e:d9:eb:43:e5:e3:dc:75:b7:ae:6c:c4:fc:65:
                    27:a0:43:3d:a4:a9:a6:b1:a7:6c:56:32:0c:3c:89:
                    bc:47:b2:05:82:7a:b2:18:b4:10:97:e1:a3:72:4e:
                    65:8c:aa:61:3a:94:0c:d3:4b:e0:d7:10:00:2d:1a:
                    f0:4a:80:0f:69:9a:c4:c8:3b:93:5b:90:3f:26:75:
                    7f:b9:f6:99:23:1d:e5:46:21:25:5b:bb:8f:e0:15:
                    8d:25:22:09:b1:1d:52:19:bb:a6:90:ca:60:c7:66:
                    a0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DC:3E:2F:D8:93:12:A4:1D:1B:91:3B:D3:8A:7A:BE:37:BE:46:D0
            X509v3 Authority Key Identifier:
                keyid:61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/6feba0367d5ed2919ea904e46f689e0ca005feeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/0a6ca410e9d4d6609a966809763133d36a922b82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.243.0/24
                IPv6:
                  2803:8420:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:f8:59:a1:c5:c6:89:12:07:ea:9a:d0:e3:1e:f7:94:e5:10:
         7d:bf:45:d9:c0:68:c3:f8:8d:d3:d8:ea:f9:ab:3f:78:72:75:
         7e:80:5b:5d:d5:88:26:20:0d:23:6c:39:cb:4c:b8:d3:1d:c5:
         af:5f:6d:12:aa:c0:9a:e2:c3:0e:53:b8:bc:21:e4:18:5d:f7:
         fe:cf:b0:44:48:ce:26:90:d1:ab:d6:3f:67:c1:54:0e:5e:70:
         f6:67:c7:b5:de:31:93:f5:ca:46:f9:18:3c:40:1e:8a:24:db:
         e8:94:f0:99:0d:6c:f1:08:6e:13:45:a9:45:13:a7:8e:a4:4e:
         36:28:64:33:dd:67:3b:d7:9f:67:64:85:e0:ed:26:da:d9:ba:
         e3:83:f1:51:e1:32:cc:a8:c0:d4:f1:9d:ca:ec:b5:da:54:fa:
         9d:80:5a:bd:bc:e4:3b:5b:bb:8d:68:aa:1d:a9:34:45:87:1f:
         f8:6f:0b:f4:79:93:a6:a0:74:a9:87:da:6a:95:14:96:c0:da:
         58:e6:a0:ab:12:0d:39:c4:fc:ce:4f:6e:d3:14:11:8d:d1:b6:
         57:24:38:98:04:ab:47:17:f2:cd:6f:b3:a4:d5:ff:9f:10:81:
         1c:a8:4c:43:47:d0:03:4e:26:00:00:18:a0:66:16:4b:8e:b1:
         63:87:ae:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----