Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ee94e290-b3cd-4923-a3e9-bc9d0a11f4e7/1abd9deb45902213e5336afe3f68093c5368e925.roa
File:                     1abd9deb45902213e5336afe3f68093c5368e925.roa (raw, json)
Hash identifier:          0sxW1Lkv6tRCEJNYTbTGv2w7R3BfZS6vbDVlEM9pGjQ=
Subject key identifier:   6A:4E:71:08:1E:4C:73:13:B3:7B:D3:AD:8D:02:21:08:9F:73:B9:B6
Certificate issuer:       /CN=6decb94e47c7e060ab0624ffbad84ee053b73a5c
Certificate serial:       5E66
Authority key identifier: 01:82:7A:9C:C0:30:2A:58:A5:50:CA:6F:AB:F5:9D:03:2E:7A:2F:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6decb94e47c7e060ab0624ffbad84ee053b73a5c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ee94e290-b3cd-4923-a3e9-bc9d0a11f4e7/1abd9deb45902213e5336afe3f68093c5368e925.roa
Signing time:             Wed 24 Mar 2021 14:36:06 +0000
ROA not before:           Wed 24 Mar 2021 14:36:06 +0000
ROA not after:            Tue 24 Mar 2026 14:36:06 +0000
asID:                     32034
IP address blocks:        143.208.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24166 (0x5e66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6decb94e47c7e060ab0624ffbad84ee053b73a5c
        Validity
            Not Before: Mar 24 14:36:06 2021 GMT
            Not After : Mar 24 14:36:06 2026 GMT
        Subject: CN=1abd9deb45902213e5336afe3f68093c5368e925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:e5:9c:0b:76:e5:b2:dc:70:d0:8b:f2:6e:
                    80:e1:a1:ca:e7:ea:0f:13:7f:0c:2f:fb:df:d4:20:
                    2e:e6:bd:c5:67:e8:8c:f5:9f:ed:41:e5:43:61:be:
                    7b:e2:fb:45:cd:ce:6f:c8:5d:6b:32:5e:8b:fc:3c:
                    e8:79:d0:f1:e4:7b:89:15:62:fa:07:08:f3:c1:46:
                    b7:e7:96:53:7d:8a:84:fa:b5:c1:2a:d8:88:08:d8:
                    70:8e:c2:ec:47:8e:76:0d:8d:2e:26:cf:ca:e7:a3:
                    a5:ed:5a:bf:68:ea:b7:d3:8b:86:7b:b5:33:ac:79:
                    60:30:b3:6e:6d:62:60:e6:5a:f6:17:8b:67:4a:34:
                    61:96:33:0b:54:99:0a:17:86:dc:95:ee:22:20:a3:
                    31:5f:48:db:b3:e0:10:8a:26:95:58:65:1a:90:d3:
                    5b:d6:8f:d1:ca:2a:f5:98:7a:67:cd:d6:24:11:16:
                    6e:4a:84:5b:93:1a:0e:d2:53:83:cc:54:be:38:1f:
                    45:1d:ce:78:b8:50:d3:0f:a2:0f:6f:08:cb:75:84:
                    0f:46:8b:98:18:59:c0:ef:c0:bb:32:8f:a4:fa:8a:
                    01:17:3d:a6:ea:bb:4b:f1:a8:00:99:f2:da:3d:bc:
                    65:27:37:d7:a8:c1:d3:0f:b0:b3:80:8f:28:2f:bf:
                    39:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4E:71:08:1E:4C:73:13:B3:7B:D3:AD:8D:02:21:08:9F:73:B9:B6
            X509v3 Authority Key Identifier:
                keyid:01:82:7A:9C:C0:30:2A:58:A5:50:CA:6F:AB:F5:9D:03:2E:7A:2F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6decb94e47c7e060ab0624ffbad84ee053b73a5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ee94e290-b3cd-4923-a3e9-bc9d0a11f4e7/1abd9deb45902213e5336afe3f68093c5368e925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ee94e290-b3cd-4923-a3e9-bc9d0a11f4e7/6decb94e47c7e060ab0624ffbad84ee053b73a5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:10:c1:f3:48:23:a2:2a:3e:8b:79:7f:1c:b0:96:15:2b:36:
         1d:31:5e:0e:c4:a5:ec:d6:4c:3f:af:0a:43:79:5d:94:3c:1f:
         ec:8b:aa:70:df:cb:0b:e8:66:9c:79:17:b3:27:5d:e5:e6:52:
         f7:b2:44:80:c2:fc:2f:7f:46:61:68:14:1f:1b:e4:4c:fd:ab:
         9f:40:cf:f9:f1:8f:3b:25:15:2d:e1:ed:4c:bf:8d:21:0b:06:
         ff:37:16:13:80:49:3c:fc:30:31:03:f6:78:4c:aa:22:b9:0b:
         53:62:e6:28:a0:ec:26:51:e6:11:dd:22:c9:9f:7d:55:ec:83:
         b7:ab:10:26:fd:ed:cf:65:c4:5c:e5:19:11:57:cd:54:83:ac:
         a0:d9:8f:f9:42:db:a2:04:79:bf:90:f9:3c:ed:d0:27:5a:6e:
         f2:7e:f2:59:84:ad:45:c0:1d:7f:2b:63:24:3a:cc:f4:87:f5:
         a2:d1:07:30:28:1e:3e:30:c4:63:e5:c5:b4:4b:25:a7:47:e9:
         a2:7c:33:f4:0a:b1:b1:22:3b:05:b8:9e:29:22:e0:0a:6e:4f:
         3c:d8:8e:ad:85:7e:84:3d:fe:6f:91:ce:05:4d:2a:4a:ef:40:
         8d:27:68:cf:57:b6:49:a0:67:d8:22:ea:17:e4:ba:dd:2e:e9:
         7a:26:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----