Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f088d18d-3efe-4604-864c-cb55834af003/5cd9c4cd8ee14ab835e33175ac03b9ee7c3d16e9.roa
File:                     5cd9c4cd8ee14ab835e33175ac03b9ee7c3d16e9.roa (raw, json)
Hash identifier:          CTeqe2bSrfzrHi43nHkOhPvdbcdftZxnNpf0McRR+aQ=
Subject key identifier:   49:0B:E3:4A:97:AA:1F:AC:55:F9:C9:04:C1:FB:16:DB:07:BF:FF:24
Certificate issuer:       /CN=35dce422626a57eb82f943d8d37ec630e859534c
Certificate serial:       0D65BD
Authority key identifier: D6:B0:BD:81:2B:25:D9:7F:0C:AB:8F:80:7E:5F:3E:85:75:19:0B:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35dce422626a57eb82f943d8d37ec630e859534c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f088d18d-3efe-4604-864c-cb55834af003/5cd9c4cd8ee14ab835e33175ac03b9ee7c3d16e9.roa
Signing time:             Wed 24 Mar 2021 14:31:08 +0000
ROA not before:           Wed 24 Mar 2021 14:31:08 +0000
ROA not after:            Tue 24 Mar 2026 14:31:08 +0000
asID:                     263823
IP address blocks:        138.219.216.0/22 maxlen: 24
                          2803:1a40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878013 (0xd65bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dce422626a57eb82f943d8d37ec630e859534c
        Validity
            Not Before: Mar 24 14:31:08 2021 GMT
            Not After : Mar 24 14:31:08 2026 GMT
        Subject: CN=5cd9c4cd8ee14ab835e33175ac03b9ee7c3d16e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:4c:1c:41:5e:fd:75:7c:10:db:7c:a2:34:
                    a3:76:b9:3e:7f:d8:e8:23:2b:05:d0:4a:e2:7f:51:
                    8d:34:a6:24:8f:a3:86:c0:ae:ee:31:bf:fb:b5:35:
                    82:6f:6d:9b:a4:55:15:79:91:d1:1a:68:fa:96:bf:
                    0f:b7:2a:4d:02:1d:be:cc:8b:40:90:84:c7:c7:6f:
                    30:98:f6:f9:ce:b9:9d:60:e6:0c:cf:38:ad:45:a0:
                    6c:a1:f2:7b:b6:da:ad:d5:54:71:6c:ba:f2:78:e4:
                    73:df:85:fe:1b:e2:12:41:05:4c:eb:5d:50:60:bb:
                    19:3e:f2:59:b7:ac:a1:1d:a4:36:0a:cf:02:5f:f5:
                    f5:82:ba:70:eb:dc:d5:80:f8:0d:b4:d7:a0:cd:f3:
                    9d:05:d6:ee:98:d8:a4:e6:56:75:c5:1f:2d:b7:da:
                    8d:3a:b8:83:be:a1:9d:5e:56:de:fb:7d:37:e8:51:
                    f9:34:f4:74:ef:5b:c3:17:ec:32:01:fe:25:f3:63:
                    08:20:a8:4f:5e:ca:14:93:fb:13:5d:22:7b:3b:c2:
                    5f:f8:2a:a8:6f:09:ae:6d:b0:cc:af:08:8b:0c:89:
                    26:95:fc:80:9e:48:b0:31:08:dc:35:7c:25:73:9e:
                    74:bd:ef:40:a5:de:16:bd:be:4f:35:4c:38:d9:47:
                    04:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0B:E3:4A:97:AA:1F:AC:55:F9:C9:04:C1:FB:16:DB:07:BF:FF:24
            X509v3 Authority Key Identifier:
                keyid:D6:B0:BD:81:2B:25:D9:7F:0C:AB:8F:80:7E:5F:3E:85:75:19:0B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35dce422626a57eb82f943d8d37ec630e859534c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f088d18d-3efe-4604-864c-cb55834af003/5cd9c4cd8ee14ab835e33175ac03b9ee7c3d16e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f088d18d-3efe-4604-864c-cb55834af003/35dce422626a57eb82f943d8d37ec630e859534c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.216.0/22
                IPv6:
                  2803:1a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:b4:e9:e5:80:e2:00:08:50:31:31:c6:9b:81:f8:63:9a:ea:
         5d:2a:c4:c3:d3:61:5b:61:e2:b4:0c:23:22:04:88:bd:04:19:
         3d:ac:6e:5f:08:c1:ed:6e:8c:ee:98:49:9e:76:f2:b8:c0:83:
         03:8d:bc:17:cc:d0:81:79:b7:4b:ac:a1:8d:2b:ef:87:dd:82:
         3c:f3:0a:46:c5:e3:59:d3:b2:3e:8a:d5:b9:46:a3:42:5e:40:
         6a:52:d5:40:00:4c:54:96:a6:f7:80:0e:35:4c:94:14:ac:9f:
         9a:c7:62:6b:ae:fd:11:c2:7e:8c:fb:74:5e:04:cb:d3:8b:10:
         f4:b2:3b:4a:0e:6b:54:3d:9f:21:f5:19:f4:d5:d6:c2:52:c5:
         8a:e8:f9:d8:03:7a:96:2a:35:ce:da:ed:b5:8a:75:ed:25:28:
         3e:76:30:ae:29:e4:52:fe:e4:04:e4:1f:8e:d1:17:77:21:4a:
         87:7f:e0:43:5d:a7:d8:33:71:28:35:ac:72:46:55:b4:6c:65:
         2e:c3:30:cb:2c:cd:f1:f3:70:31:4b:35:37:53:ff:e8:18:27:
         49:69:d4:05:56:30:fe:26:c8:c8:5d:e5:32:d6:d0:a9:c1:0b:
         56:ff:a4:7a:00:39:2b:69:a9:fb:9f:52:98:d5:a3:ac:fa:2a:
         26:52:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----