Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e15f412c-655d-4dd4-a769-c1f3dafcf180/b266d4cc2a9b183f3ce2377e5416330ddeb67ac5.roa
File:                     b266d4cc2a9b183f3ce2377e5416330ddeb67ac5.roa (raw, json)
Hash identifier:          bEBzzVgv3baUdUW2YErMBWxXJ/2aUK4WazYv3t3YoG4=
Subject key identifier:   F4:9C:A7:57:B9:C0:42:A8:75:33:1E:53:4C:98:5E:B1:35:DE:DB:28
Certificate issuer:       /CN=311c935d740e146eba9966a47206b78bd5cf9adc
Certificate serial:       0CDECE
Authority key identifier: 28:8C:07:AC:4B:97:9C:FC:13:3F:88:75:3E:D9:13:43:D2:AD:3A:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/311c935d740e146eba9966a47206b78bd5cf9adc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e15f412c-655d-4dd4-a769-c1f3dafcf180/b266d4cc2a9b183f3ce2377e5416330ddeb67ac5.roa
Signing time:             Wed 24 Mar 2021 14:31:39 +0000
ROA not before:           Wed 24 Mar 2021 14:31:39 +0000
ROA not after:            Tue 24 Mar 2026 14:31:39 +0000
asID:                     3273
IP address blocks:        200.12.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843470 (0xcdece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311c935d740e146eba9966a47206b78bd5cf9adc
        Validity
            Not Before: Mar 24 14:31:39 2021 GMT
            Not After : Mar 24 14:31:39 2026 GMT
        Subject: CN=b266d4cc2a9b183f3ce2377e5416330ddeb67ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:7b:8b:56:a0:55:76:6a:1e:34:31:c1:49:
                    bb:90:e4:ba:87:9c:e7:5d:b5:6b:4c:a3:c2:d1:4e:
                    85:d7:42:f0:78:cc:91:2e:e5:27:d3:c7:2c:16:04:
                    f5:e3:e8:47:92:65:16:d0:a2:eb:00:c8:32:01:01:
                    04:d6:ac:56:f2:ea:9a:e2:f3:4f:ca:ba:fa:71:0c:
                    bf:53:59:aa:6f:62:eb:ce:fb:8f:8f:9a:dc:41:34:
                    4e:7b:0b:6f:7e:18:af:00:86:d5:a9:9f:88:23:d2:
                    fa:4b:7b:ac:9f:8a:4b:bf:e9:03:64:e2:c2:f0:bb:
                    d4:e3:c4:a9:33:95:82:8a:ec:03:74:a7:0f:98:74:
                    9a:f0:b9:5e:b4:44:99:04:01:93:2b:d9:dd:80:17:
                    da:d2:0a:7e:3c:81:ac:55:63:3a:53:ce:a4:9f:49:
                    3e:18:9b:e8:f4:51:75:65:ce:81:03:f7:f9:9a:2d:
                    bd:f8:64:85:d0:d2:1b:3f:64:f4:6c:f4:bc:4a:04:
                    96:b9:fc:e4:e7:7c:f6:a3:df:04:df:0c:eb:c6:a1:
                    2a:2f:98:b1:d5:95:12:c4:b0:8c:c2:e2:6d:d2:29:
                    da:a8:63:5c:98:2c:38:32:48:38:93:28:0f:2e:35:
                    cb:d1:f7:1e:40:7e:df:77:84:8b:63:2e:99:69:17:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9C:A7:57:B9:C0:42:A8:75:33:1E:53:4C:98:5E:B1:35:DE:DB:28
            X509v3 Authority Key Identifier:
                keyid:28:8C:07:AC:4B:97:9C:FC:13:3F:88:75:3E:D9:13:43:D2:AD:3A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/311c935d740e146eba9966a47206b78bd5cf9adc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e15f412c-655d-4dd4-a769-c1f3dafcf180/b266d4cc2a9b183f3ce2377e5416330ddeb67ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e15f412c-655d-4dd4-a769-c1f3dafcf180/311c935d740e146eba9966a47206b78bd5cf9adc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a1:c8:9f:70:d6:16:3b:e9:33:7d:0e:38:b8:b4:aa:1b:e3:
         8a:eb:fa:6d:77:1f:79:9f:fa:95:f4:97:4e:56:20:f2:60:d6:
         52:75:3b:ae:2b:2e:8a:72:3a:90:56:9d:a2:20:fe:7e:0d:29:
         35:9a:47:7f:ec:35:5b:4c:17:5a:b2:66:7e:a6:10:42:bb:40:
         f6:a4:11:c3:ec:90:8b:1f:89:2f:20:dd:33:2b:bf:93:0f:c5:
         81:c4:35:6e:b1:09:f1:5d:2c:4b:a2:85:6d:7c:31:fc:21:3d:
         4b:1b:e1:55:ff:4a:b9:59:a0:45:71:0c:09:be:da:48:52:74:
         03:e3:41:0e:ff:73:85:58:90:81:eb:1f:17:c8:52:f5:65:3c:
         80:a3:1b:8e:a7:03:b4:f4:76:71:ef:eb:c4:b9:07:a4:17:97:
         92:f5:60:b6:54:0d:eb:3c:9d:91:13:f1:39:17:3a:e6:01:d6:
         6d:d9:e0:d8:7f:7d:ba:70:30:f6:d5:8c:52:f1:dc:4d:9e:5f:
         a4:27:cd:e3:fb:ec:bc:d4:95:21:0f:a4:7c:1e:9d:83:59:21:
         bc:4c:2e:6c:2b:c1:2f:f5:3a:58:cb:32:14:af:87:af:d5:37:
         08:c1:08:6b:87:fa:37:e2:3c:5d:11:7d:90:61:e0:75:3a:5c:
         ea:f6:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----