Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4bc988c-e0a1-4ab0-83e8-a9ae652f1e08/0af15526c3ba5c7a81d9964a1c437c1a4115eb5b.roa
File:                     0af15526c3ba5c7a81d9964a1c437c1a4115eb5b.roa (raw, json)
Hash identifier:          7gjJUtzvct3iWdh1G3gemadEW7UDMPs1HZjxk/D3McM=
Subject key identifier:   87:7F:37:FC:F1:E0:EA:FF:73:53:BD:1B:02:20:BC:C8:AB:BF:75:6E
Certificate issuer:       /CN=82098e6d1b0275171ebaa1bab499d421893df411
Certificate serial:       0D8880
Authority key identifier: EA:3F:12:FB:AF:1C:C3:6B:F8:BA:F8:E6:D3:24:41:2C:9C:26:87:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82098e6d1b0275171ebaa1bab499d421893df411.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4bc988c-e0a1-4ab0-83e8-a9ae652f1e08/0af15526c3ba5c7a81d9964a1c437c1a4115eb5b.roa
Signing time:             Wed 22 Jun 2022 21:00:49 +0000
ROA not before:           Fri 03 Dec 2021 03:00:00 +0000
ROA not after:            Sun 03 Dec 2023 03:00:00 +0000
asID:                     265727
IP address blocks:        160.238.136.0/22 maxlen: 24
                          2803:d5c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886912 (0xd8880)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82098e6d1b0275171ebaa1bab499d421893df411
        Validity
            Not Before: Dec  3 03:00:00 2021 GMT
            Not After : Dec  3 03:00:00 2023 GMT
        Subject: CN=0af15526c3ba5c7a81d9964a1c437c1a4115eb5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:07:2f:60:b8:6d:bd:62:69:78:07:28:92:
                    2e:ad:a4:32:1a:46:e9:df:e5:88:68:08:d6:18:ff:
                    e4:3e:43:84:81:af:0b:2e:a0:d0:e9:05:95:28:0d:
                    c8:5c:d2:d4:8e:25:91:a6:8a:2e:59:16:bd:c1:0d:
                    a1:57:a7:19:b5:e2:c8:19:2a:22:23:cf:ef:b9:d3:
                    09:00:1f:7a:32:49:b2:99:de:8b:07:08:21:af:cc:
                    95:4c:98:34:0e:bf:e0:63:d3:49:a2:57:c6:52:13:
                    8c:8a:f8:f9:09:61:e8:12:c2:e1:0b:d5:3b:6b:92:
                    5f:03:a8:18:d9:0e:16:53:08:2d:17:13:fe:f2:e1:
                    56:72:c1:59:94:d6:2e:34:64:5f:6a:4e:3f:86:2b:
                    cf:d7:66:8f:4c:45:cf:9a:19:04:51:38:60:85:20:
                    95:db:29:4f:58:e7:60:b6:a0:37:e3:f9:1e:f2:1e:
                    43:32:a3:89:02:19:00:7c:79:db:f2:a2:df:84:99:
                    74:56:c5:40:a4:63:54:74:85:92:50:e8:9d:58:0c:
                    da:b7:83:b0:68:b5:de:20:b8:63:2f:04:af:f4:51:
                    08:46:ef:d2:d4:5c:e0:4d:da:3e:17:ff:58:18:42:
                    e5:3e:33:bc:67:8f:60:65:25:db:39:c5:41:e5:cb:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7F:37:FC:F1:E0:EA:FF:73:53:BD:1B:02:20:BC:C8:AB:BF:75:6E
            X509v3 Authority Key Identifier:
                keyid:EA:3F:12:FB:AF:1C:C3:6B:F8:BA:F8:E6:D3:24:41:2C:9C:26:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82098e6d1b0275171ebaa1bab499d421893df411.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4bc988c-e0a1-4ab0-83e8-a9ae652f1e08/0af15526c3ba5c7a81d9964a1c437c1a4115eb5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4bc988c-e0a1-4ab0-83e8-a9ae652f1e08/82098e6d1b0275171ebaa1bab499d421893df411.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.136.0/22
                IPv6:
                  2803:d5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:96:d7:fe:87:a1:8d:5a:1e:ac:4a:d6:f2:f6:bb:2e:da:1f:
         64:dd:0e:70:98:27:3a:2a:2a:bb:92:a0:a1:8a:68:02:d6:5b:
         0b:cf:35:ef:67:af:f4:b5:09:86:54:da:f5:78:1e:5d:44:61:
         9a:7f:b0:0e:a8:bb:b4:d0:7c:4a:89:d4:5b:69:37:f6:77:75:
         7f:12:3d:0d:a3:1b:cc:f2:aa:77:67:7f:f7:92:9a:25:dd:2a:
         93:90:41:ea:f6:e5:4f:92:f6:34:26:ec:97:5a:ea:28:41:2a:
         26:27:f7:eb:a2:b4:97:a2:34:7f:aa:69:dd:fb:08:02:da:22:
         a5:fb:e5:ce:6b:f0:5d:f3:84:3c:91:76:c8:62:02:59:8e:19:
         e0:9f:dd:ba:dd:8b:96:7f:72:77:10:16:45:01:af:c6:7e:a9:
         b8:d3:90:80:25:ae:f2:9d:71:dc:6c:ce:3a:42:7e:5b:3c:b9:
         08:22:42:d6:7b:c0:2c:b3:42:47:7a:e4:d8:ab:c6:7e:3e:3a:
         fb:5f:2d:14:2c:8c:de:58:e4:6d:a9:97:81:d3:0c:eb:3b:f3:
         ea:6d:6c:3e:1c:b8:00:0d:00:ce:b5:ed:88:8d:ac:35:9f:6c:
         c0:ca:6f:ee:37:db:e9:0b:39:c6:c8:a4:11:b4:06:f0:7f:9e:
         b8:29:3f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----