Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dd212142-08ec-4bd6-a128-5f1db55072f6/9a93f4149622b2311fd7986c7345ede465ab1401.roa
File:                     9a93f4149622b2311fd7986c7345ede465ab1401.roa (raw, json)
Hash identifier:          tdg489KoA2hOR0McC/nMAQNJq/icVASWMI7nAPsBAiM=
Subject key identifier:   7B:9E:89:70:CD:58:8A:92:2F:18:CB:16:C1:5F:F1:59:28:1F:89:20
Certificate issuer:       /CN=fcd81b44b948a3af4c23183b58f4c263b9ae881b
Certificate serial:       0D25C9
Authority key identifier: 5F:A2:74:DE:88:E0:B2:E9:F7:CE:CE:41:9B:DE:24:92:69:3C:48:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd81b44b948a3af4c23183b58f4c263b9ae881b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dd212142-08ec-4bd6-a128-5f1db55072f6/9a93f4149622b2311fd7986c7345ede465ab1401.roa
Signing time:             Wed 24 Mar 2021 14:46:14 +0000
ROA not before:           Wed 24 Mar 2021 14:46:14 +0000
ROA not after:            Tue 24 Mar 2026 14:46:14 +0000
asID:                     264733
IP address blocks:        191.97.120.0/21 maxlen: 24
                          2803:d280::/48 maxlen: 48
                          2803:d280:4::/46 maxlen: 48
                          2803:d280:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861641 (0xd25c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd81b44b948a3af4c23183b58f4c263b9ae881b
        Validity
            Not Before: Mar 24 14:46:14 2021 GMT
            Not After : Mar 24 14:46:14 2026 GMT
        Subject: CN=9a93f4149622b2311fd7986c7345ede465ab1401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dc:62:98:5b:69:70:1f:03:d0:1e:97:11:25:
                    d8:10:23:18:6f:5a:41:fc:73:8d:14:47:f8:d6:18:
                    a3:92:d4:fd:5b:79:ff:27:cf:9b:f7:e1:17:2f:a8:
                    0b:5c:32:2a:cf:a7:8f:28:96:2a:99:ab:6a:b9:54:
                    72:23:6c:06:53:76:cb:93:70:a0:ba:10:c8:a7:3d:
                    96:52:4c:a9:cf:dd:4e:92:38:2f:0b:a1:ef:16:92:
                    fa:0b:81:04:34:d9:40:f0:5a:da:bb:7a:c6:a8:91:
                    3c:c6:3c:c5:95:72:d8:dc:12:94:ba:c1:b7:54:cd:
                    f1:6c:c7:44:d1:8e:9f:cf:3f:da:de:d7:fc:a1:a0:
                    ba:94:4a:74:3a:f1:6f:42:70:84:24:65:a6:ad:01:
                    08:9c:f8:37:63:e2:13:90:8d:58:bd:97:e6:eb:34:
                    90:e6:e2:90:25:10:48:d9:7a:ae:8d:a9:a5:6a:74:
                    a3:45:b1:46:f5:0c:15:ad:93:b8:e2:2f:8f:4a:3e:
                    78:e6:f9:d4:1b:75:7e:09:df:d9:00:20:88:72:fe:
                    09:ff:3c:c2:e7:a8:74:5a:57:5f:15:3e:21:49:9e:
                    59:f8:bb:d7:9c:8d:a1:ab:46:ca:59:c4:4a:92:23:
                    ad:49:36:d9:b3:ab:89:28:79:86:62:07:46:ab:e2:
                    8e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9E:89:70:CD:58:8A:92:2F:18:CB:16:C1:5F:F1:59:28:1F:89:20
            X509v3 Authority Key Identifier:
                keyid:5F:A2:74:DE:88:E0:B2:E9:F7:CE:CE:41:9B:DE:24:92:69:3C:48:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd81b44b948a3af4c23183b58f4c263b9ae881b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dd212142-08ec-4bd6-a128-5f1db55072f6/9a93f4149622b2311fd7986c7345ede465ab1401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dd212142-08ec-4bd6-a128-5f1db55072f6/fcd81b44b948a3af4c23183b58f4c263b9ae881b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.120.0/21
                IPv6:
                  2803:d280::/48
                  2803:d280:4::-2803:d280:8:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         68:d7:99:d6:6e:6e:6e:9f:0c:ae:3e:8c:ca:94:aa:83:6e:82:
         7d:ef:ec:81:30:37:a5:42:d2:e1:b8:eb:bd:31:0c:20:57:00:
         0e:ca:b7:59:40:25:d9:e7:85:af:bc:81:80:8e:2a:63:e9:5c:
         7d:0b:aa:3e:4b:90:2b:63:8f:79:19:1f:4c:1e:41:7f:10:00:
         53:3b:f3:73:75:dc:ad:9d:b8:e3:dc:4f:b4:3d:e5:d1:f6:3d:
         5e:e5:14:af:04:ec:8f:d2:35:85:c6:75:70:fa:99:39:e9:27:
         1c:1b:7f:fd:72:f3:5f:1a:34:d6:82:36:7b:97:30:1f:c9:7a:
         ec:e4:93:0a:1f:ad:a5:c2:65:0a:8b:25:66:1d:1e:f1:eb:b5:
         d1:f7:19:25:f2:73:20:99:f5:68:17:9d:31:87:80:27:0b:64:
         bd:08:39:12:f1:39:e3:ca:5b:d8:ea:5f:f3:0d:d6:61:be:fe:
         d5:b5:88:a4:3f:51:9d:18:7f:2a:7f:46:6c:cc:92:c2:2c:d2:
         76:f5:57:5f:dd:85:53:c0:90:fd:ff:47:94:13:8c:9b:eb:61:
         a6:1a:3e:c5:22:d6:77:cf:e4:99:ac:23:85:8d:d5:0c:32:15:
         78:e1:1e:33:4b:5a:a7:b2:fd:a0:40:41:58:a4:f0:cb:0f:df:
         7c:5c:84:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----