Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/940b152cbc6e50d97d1f46c284bf9c24e2a3d64c.roa
File:                     940b152cbc6e50d97d1f46c284bf9c24e2a3d64c.roa (raw, json)
Hash identifier:          HZ9k8bBVMni/fEd2MNMQcS3pcRPkZXIhnIYFc+nb0go=
Subject key identifier:   41:A3:88:4E:78:25:A3:E5:5B:D5:F6:7E:F6:4D:96:80:21:F4:21:E1
Certificate issuer:       /CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
Certificate serial:       3CDA
Authority key identifier: A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/940b152cbc6e50d97d1f46c284bf9c24e2a3d64c.roa
Signing time:             Tue 05 Jul 2022 06:38:19 +0000
ROA not before:           Thu 30 Jun 2022 03:00:00 +0000
ROA not after:            Sun 30 Jun 2024 03:00:00 +0000
asID:                     271814
IP address blocks:        164.163.184.0/24 maxlen: 24
                          164.163.185.0/24 maxlen: 24
                          2803:8810::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15578 (0x3cda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
        Validity
            Not Before: Jun 30 03:00:00 2022 GMT
            Not After : Jun 30 03:00:00 2024 GMT
        Subject: CN=940b152cbc6e50d97d1f46c284bf9c24e2a3d64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3e:71:1e:dc:f9:42:8a:73:be:b5:8b:7c:ec:
                    11:10:30:a4:fa:cb:b5:f4:b4:bf:5a:90:af:0b:2f:
                    cb:35:69:6d:17:6e:26:78:fd:27:61:1d:cf:58:c1:
                    dc:e3:b4:bf:ee:af:05:69:27:dc:f7:e5:39:cc:36:
                    9f:02:30:ba:c1:22:26:1a:ed:87:a4:d3:56:64:eb:
                    6d:05:3b:49:d6:5f:33:2a:a3:af:f7:ad:36:65:4c:
                    40:06:d9:e7:ec:1a:60:0e:90:a7:7a:8a:6a:50:77:
                    63:e1:74:ab:7b:8f:fa:05:af:72:b4:3b:2e:97:94:
                    21:dc:77:0e:f5:f8:07:33:f2:43:05:23:37:c8:89:
                    81:ea:da:a4:02:c8:6d:bb:a6:f2:ce:df:5a:98:bc:
                    57:56:fd:bc:8a:9a:93:c3:63:17:1c:33:b2:d0:f4:
                    3d:6f:32:e7:67:fa:19:8f:da:ea:19:a2:3e:50:bb:
                    3e:05:8d:f1:a5:00:a3:e1:df:4d:64:e8:17:ac:18:
                    57:aa:e2:b1:08:90:73:32:f3:81:21:ce:81:6a:e7:
                    b1:b2:50:0d:b2:ac:9c:ff:f0:09:e2:69:68:79:9a:
                    6f:cd:58:6f:1b:08:01:75:c7:f3:05:5a:85:cb:2f:
                    72:7c:0d:55:e7:31:b1:fc:e9:8d:57:e6:9f:87:19:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A3:88:4E:78:25:A3:E5:5B:D5:F6:7E:F6:4D:96:80:21:F4:21:E1
            X509v3 Authority Key Identifier:
                keyid:A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/940b152cbc6e50d97d1f46c284bf9c24e2a3d64c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.184.0/23
                IPv6:
                  2803:8810::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:45:2e:52:c8:45:17:ac:bb:38:e4:a7:b0:21:49:a2:4d:68:
         ba:24:77:4f:33:ff:b1:de:08:bf:d8:60:2d:37:37:00:f4:e9:
         46:97:47:80:47:18:8a:de:33:8e:e9:0b:cc:3f:85:44:e7:1b:
         e8:0e:da:ad:ad:25:53:30:2d:4c:71:02:85:1b:86:0f:98:e0:
         ce:c0:a8:a3:95:9d:e1:0b:5b:f5:51:18:57:dd:f5:3f:15:4d:
         3e:f7:c2:30:16:e4:fe:fb:98:1d:7c:71:97:25:39:4a:cc:d9:
         d8:4e:b0:36:ea:8c:d3:d4:9e:39:96:0f:27:7d:9a:2e:df:b9:
         ea:1a:4b:a6:ca:60:7e:d7:f8:c6:4f:5b:64:d8:94:8a:b4:ed:
         34:86:9e:ee:30:9a:a2:90:b2:6d:9d:cd:91:be:83:1a:d4:0f:
         15:b8:15:7c:2c:70:25:20:e9:93:c1:4f:72:19:24:69:a6:02:
         b3:31:95:e5:5d:a0:00:09:95:cf:e3:b7:e1:f2:80:6f:5c:5a:
         f8:a7:70:fe:9d:22:2d:aa:83:9c:81:a3:52:b7:1e:ce:1e:82:
         d4:ce:61:da:5c:a3:db:bb:40:9e:8d:d8:a1:b5:6c:06:cf:3b:
         bd:98:06:a3:cf:8a:5f:48:96:b0:5e:95:bb:20:47:3f:38:cc:
         94:57:05:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----