Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f12da800-9804-421b-9f72-848eab73dc60/ae88baaadbaad1836a9da2df225f89a7f57c5e93.roa
File:                     ae88baaadbaad1836a9da2df225f89a7f57c5e93.roa (raw, json)
Hash identifier:          yFU0QinAQF79waZkCUuE1loxEst0pqcDZ9ky2zJ8rQM=
Subject key identifier:   E7:8A:3A:2E:0E:FC:2B:5E:8C:4D:CA:02:39:F5:08:C8:10:B0:46:40
Certificate issuer:       /CN=88e65149963b042f7b215d5f327e64cfe5b1e2ab
Certificate serial:       07B3BF
Authority key identifier: 40:B2:33:A3:45:4C:B8:C3:BB:87:C6:46:33:B8:C4:55:A7:A4:6A:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88e65149963b042f7b215d5f327e64cfe5b1e2ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f12da800-9804-421b-9f72-848eab73dc60/ae88baaadbaad1836a9da2df225f89a7f57c5e93.roa
Signing time:             Wed 24 Mar 2021 14:34:12 +0000
ROA not before:           Wed 24 Mar 2021 14:34:11 +0000
ROA not after:            Tue 24 Mar 2026 14:34:11 +0000
asID:                     269947
IP address blocks:        190.97.172.0/22 maxlen: 24
                          2803:bae0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504767 (0x7b3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e65149963b042f7b215d5f327e64cfe5b1e2ab
        Validity
            Not Before: Mar 24 14:34:11 2021 GMT
            Not After : Mar 24 14:34:11 2026 GMT
        Subject: CN=ae88baaadbaad1836a9da2df225f89a7f57c5e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a5:e8:bc:11:f7:35:5a:de:f5:bc:b7:a4:34:
                    c1:50:d7:45:fa:5f:6e:35:74:3a:b1:a3:92:f4:7e:
                    3b:25:d4:82:41:0e:3e:3e:0a:ee:1c:82:0b:34:88:
                    64:f3:f7:b6:4d:a7:f0:7b:f7:ff:ed:8e:bf:0b:54:
                    e3:7e:12:20:f0:a7:4e:bd:d1:f7:0a:e9:a6:a4:6f:
                    bc:1f:ba:f7:d0:25:bd:51:45:93:f1:02:28:f7:c7:
                    d1:65:12:12:b3:fb:42:36:db:10:b7:a0:c3:3c:8d:
                    a4:da:c8:53:af:e1:61:cd:95:1d:bc:48:c0:cf:c1:
                    5f:f4:9a:6d:54:48:c5:44:de:28:19:f7:46:1a:69:
                    dd:6b:fa:b6:ca:83:da:f2:10:92:60:28:c4:3f:47:
                    8b:25:24:c2:bd:97:f4:1f:9a:06:64:4e:42:af:72:
                    bc:43:e4:5c:15:26:0e:b7:ce:c3:cb:a2:e5:c0:75:
                    8c:16:5f:25:50:35:5d:6f:ea:ca:21:97:3c:46:e9:
                    14:00:90:f8:a6:e0:87:7b:a4:76:4b:ce:46:e8:89:
                    ae:62:30:49:d6:bf:6b:4e:be:5c:fa:3a:51:e5:ae:
                    57:fd:db:f7:96:7e:13:76:1b:db:93:a4:dc:a2:5d:
                    7f:59:e9:89:d8:64:e8:f8:57:5d:2f:f9:6e:d9:63:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8A:3A:2E:0E:FC:2B:5E:8C:4D:CA:02:39:F5:08:C8:10:B0:46:40
            X509v3 Authority Key Identifier:
                keyid:40:B2:33:A3:45:4C:B8:C3:BB:87:C6:46:33:B8:C4:55:A7:A4:6A:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88e65149963b042f7b215d5f327e64cfe5b1e2ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f12da800-9804-421b-9f72-848eab73dc60/ae88baaadbaad1836a9da2df225f89a7f57c5e93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f12da800-9804-421b-9f72-848eab73dc60/88e65149963b042f7b215d5f327e64cfe5b1e2ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.172.0/22
                IPv6:
                  2803:bae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:e9:0f:87:b7:a2:17:95:3d:9b:f4:a8:9a:b1:e4:0d:e8:36:
         65:a2:e9:d5:ce:1a:f6:d5:2d:5b:1d:90:d9:e7:72:24:24:bc:
         70:54:9a:72:a0:27:e8:7d:11:1f:26:13:b6:c7:33:19:43:a1:
         83:ec:dc:66:65:60:49:b2:71:4e:10:9a:d2:e8:d3:7b:86:d8:
         87:96:61:4c:1c:f5:c4:ee:d7:6b:53:3b:cc:19:ca:5c:d3:53:
         dc:5d:fb:96:d1:0e:f2:87:d5:2c:5b:af:74:b2:22:e2:b9:4c:
         03:22:d0:fa:28:46:3a:82:19:92:59:60:ea:69:40:f7:62:cf:
         a7:03:44:ce:70:b0:07:b0:11:f1:16:b9:a3:89:86:0c:f0:d2:
         80:3d:1e:3b:94:97:00:1a:a4:fd:ae:a3:c7:e4:19:cf:59:d1:
         05:c9:f4:29:78:1f:32:5b:0b:27:67:ca:fc:81:ed:e2:b6:a9:
         00:9e:44:49:5d:ea:53:9f:88:92:d4:69:65:8d:52:a7:90:73:
         0d:80:03:2d:ec:28:ca:37:fa:7a:dd:ce:a5:89:0e:ab:ad:21:
         23:34:01:98:fd:77:2f:90:79:1f:4d:9d:1b:19:bd:68:16:d7:
         38:c8:86:f9:85:54:88:34:b3:69:84:bd:1c:b2:b0:08:90:81:
         73:2e:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----