Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f62ac99c-22ba-4920-97bb-7f26112237b2/0ec6935108f70c993540bb9417079a357646ffe5.roa
File:                     0ec6935108f70c993540bb9417079a357646ffe5.roa (raw, json)
Hash identifier:          urG+3M4b4+M7VisayF6PWskqZYJMgutWEpbQCz1vnxQ=
Subject key identifier:   8D:A0:ED:7A:C3:65:9D:F2:C3:EB:49:E0:7F:F2:5F:38:D5:BC:1B:BE
Certificate issuer:       /CN=c798b4141963c12fed3a8a7310121b822cdd4e87
Certificate serial:       0D22E0
Authority key identifier: 54:41:1C:B9:EA:09:C1:89:E4:08:E6:DD:E7:50:46:77:61:0E:9C:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c798b4141963c12fed3a8a7310121b822cdd4e87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f62ac99c-22ba-4920-97bb-7f26112237b2/0ec6935108f70c993540bb9417079a357646ffe5.roa
Signing time:             Wed 24 Mar 2021 14:38:11 +0000
ROA not before:           Wed 24 Mar 2021 14:38:11 +0000
ROA not after:            Tue 24 Mar 2026 14:38:11 +0000
asID:                     265721
IP address blocks:        128.201.112.0/22 maxlen: 24
                          2803:33c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860896 (0xd22e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c798b4141963c12fed3a8a7310121b822cdd4e87
        Validity
            Not Before: Mar 24 14:38:11 2021 GMT
            Not After : Mar 24 14:38:11 2026 GMT
        Subject: CN=0ec6935108f70c993540bb9417079a357646ffe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:85:38:25:42:ef:af:f9:92:82:d9:48:b0:
                    86:40:7b:c6:73:1e:1e:71:7d:22:41:b7:af:f8:6e:
                    e8:3d:ad:5e:cc:a6:c5:9d:70:00:77:e1:4b:bf:fd:
                    d9:4e:35:60:5e:95:d9:0b:e4:a9:9a:50:20:43:9e:
                    93:ab:cb:7d:bd:49:fc:83:e7:43:c1:f2:a7:08:e0:
                    79:8f:b7:36:57:b1:f6:33:a6:a1:9f:ab:06:7e:d6:
                    c3:c6:e1:00:75:f1:30:1c:3f:20:d3:7c:34:ca:f3:
                    11:c1:4b:5f:b5:c0:04:07:ef:6e:05:ac:ec:e6:b0:
                    0d:24:48:9a:23:b0:18:5d:86:36:60:75:8e:90:45:
                    32:ec:76:0b:d7:aa:28:49:47:27:17:4f:a8:06:6d:
                    1e:39:84:ef:ba:cc:cb:ce:e3:7e:b4:f4:5d:b6:f5:
                    d9:b2:86:46:bc:94:b1:6d:b5:6e:90:a6:ad:5d:b2:
                    59:63:17:52:e1:27:aa:d7:80:08:4b:67:3b:38:a8:
                    9b:3e:5b:a2:e2:24:09:73:80:a5:11:c1:04:d3:56:
                    09:81:e8:56:ca:44:d8:e8:4b:de:ea:3c:e1:1b:66:
                    b1:41:66:90:e0:0b:f6:4e:fd:53:e9:4a:10:20:b9:
                    a4:22:67:b1:d9:b9:61:3d:7e:7e:10:8c:0d:da:0a:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A0:ED:7A:C3:65:9D:F2:C3:EB:49:E0:7F:F2:5F:38:D5:BC:1B:BE
            X509v3 Authority Key Identifier:
                keyid:54:41:1C:B9:EA:09:C1:89:E4:08:E6:DD:E7:50:46:77:61:0E:9C:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c798b4141963c12fed3a8a7310121b822cdd4e87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f62ac99c-22ba-4920-97bb-7f26112237b2/0ec6935108f70c993540bb9417079a357646ffe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f62ac99c-22ba-4920-97bb-7f26112237b2/c798b4141963c12fed3a8a7310121b822cdd4e87.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.112.0/22
                IPv6:
                  2803:33c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:4f:69:3b:89:1e:e7:32:b4:e5:42:b4:ba:52:e4:5d:11:5d:
         bc:12:e1:23:88:7e:f5:d9:96:88:78:07:b2:20:df:7a:6c:b2:
         14:9b:dc:f7:4e:a8:63:be:09:1c:06:c5:a8:eb:f4:61:3b:14:
         28:cd:9b:ac:68:cb:5f:02:45:85:b3:6d:5a:20:56:b4:a7:a7:
         01:3b:b7:3c:61:91:60:18:5d:65:01:f3:af:d6:3e:3c:2a:32:
         b1:d3:56:38:00:e6:43:f4:be:fc:01:b6:57:51:9c:1e:5c:70:
         46:19:e5:e6:9c:97:2c:54:17:17:16:13:cf:7e:e3:26:1c:c6:
         f5:86:89:40:91:ea:37:80:59:10:83:fc:97:04:b4:d5:64:db:
         84:d0:ad:9e:cf:32:26:ac:cb:56:93:05:0e:93:08:90:75:8c:
         c8:a9:3d:32:a6:84:f7:34:ef:e0:62:d0:79:b5:b3:d3:c3:c1:
         a1:f9:01:fd:a5:ae:a6:7a:0e:05:82:22:a4:38:ee:37:bf:fa:
         a8:e7:99:74:ac:bd:5f:a1:61:e1:68:1a:7b:b4:96:9d:56:eb:
         16:2b:f8:88:9c:b3:60:21:83:0a:b4:e5:00:fd:d5:ed:ed:4e:
         63:c9:25:05:92:b7:e8:ec:45:42:38:90:0e:14:ca:c4:9c:31:
         83:06:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----