Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f6c40017-1704-4b7e-b616-ec05f525dfea/2f5e67d5101c67421c59c7381f92fb3d36a53d2a.roa
File:                     2f5e67d5101c67421c59c7381f92fb3d36a53d2a.roa (raw, json)
Hash identifier:          7Xz1VNpSAlZVCL2swYt2Z8pHiGGOvOcnIhCUCFbEDKE=
Subject key identifier:   AD:71:53:A3:D9:AE:2C:AB:93:C2:0C:D3:7B:94:DE:07:04:F9:DB:49
Certificate issuer:       /CN=8645a0b0079c3b9d770e0aec383c5034d164eae4
Certificate serial:       0C2B09
Authority key identifier: 2A:14:60:F7:0E:31:4C:34:17:37:3F:7F:40:88:C0:94:FE:05:69:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8645a0b0079c3b9d770e0aec383c5034d164eae4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f6c40017-1704-4b7e-b616-ec05f525dfea/2f5e67d5101c67421c59c7381f92fb3d36a53d2a.roa
Signing time:             Wed 24 Mar 2021 14:38:20 +0000
ROA not before:           Wed 24 Mar 2021 14:38:20 +0000
ROA not after:            Tue 24 Mar 2026 14:38:20 +0000
asID:                     27887
IP address blocks:        179.43.192.0/18 maxlen: 24
                          186.1.64.0/18 maxlen: 24
                          186.33.64.0/18 maxlen: 24
                          190.122.96.0/20 maxlen: 24
                          190.122.112.0/20 maxlen: 24
                          200.26.168.0/21 maxlen: 24
                          2803:1400::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797449 (0xc2b09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8645a0b0079c3b9d770e0aec383c5034d164eae4
        Validity
            Not Before: Mar 24 14:38:20 2021 GMT
            Not After : Mar 24 14:38:20 2026 GMT
        Subject: CN=2f5e67d5101c67421c59c7381f92fb3d36a53d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:b2:ad:16:5f:b8:8b:b0:00:a3:2e:47:cb:
                    2e:13:05:03:fa:c5:49:f8:e7:01:53:2e:8f:8c:c3:
                    4c:b3:67:4a:ca:76:65:1b:78:77:e3:42:dc:f8:40:
                    58:3f:5c:52:55:00:d4:f5:01:1a:8f:f6:3b:d9:22:
                    b0:de:49:4c:60:ec:65:1e:80:54:6f:6f:06:ea:ee:
                    75:dc:b6:9e:d5:f8:31:6f:0f:4c:52:f0:57:8f:25:
                    0b:24:37:37:dd:aa:af:a0:19:be:e0:8f:9f:d6:23:
                    24:36:a4:7d:ca:74:e3:5c:65:a3:ed:11:3e:78:6d:
                    04:6a:2d:bf:44:de:98:2a:1a:98:0b:68:0e:de:59:
                    f2:37:3b:b1:b0:e2:f5:15:57:32:6e:5a:5b:2e:25:
                    01:0e:0d:ac:55:25:2a:c2:1e:aa:fc:1e:81:62:db:
                    73:12:8a:be:55:2b:00:29:17:65:2e:31:71:74:2a:
                    1a:7d:44:2e:3b:6b:e6:90:49:d8:c5:4f:2d:3e:f7:
                    e9:f8:e1:0f:32:92:02:83:98:3b:71:84:50:dc:dd:
                    a2:7c:30:64:02:d9:a8:91:af:eb:9e:e4:c8:b8:53:
                    17:70:cf:ac:9a:c5:98:54:8b:4a:91:1b:dd:fc:e1:
                    c0:1b:25:e2:56:05:ce:a8:e1:1c:29:ec:0a:f3:f0:
                    23:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:71:53:A3:D9:AE:2C:AB:93:C2:0C:D3:7B:94:DE:07:04:F9:DB:49
            X509v3 Authority Key Identifier:
                keyid:2A:14:60:F7:0E:31:4C:34:17:37:3F:7F:40:88:C0:94:FE:05:69:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8645a0b0079c3b9d770e0aec383c5034d164eae4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f6c40017-1704-4b7e-b616-ec05f525dfea/2f5e67d5101c67421c59c7381f92fb3d36a53d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f6c40017-1704-4b7e-b616-ec05f525dfea/8645a0b0079c3b9d770e0aec383c5034d164eae4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.192.0/18
                  186.1.64.0/18
                  186.33.64.0/18
                  190.122.96.0/19
                  200.26.168.0/21
                IPv6:
                  2803:1400::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:fa:ad:bc:e8:a8:ef:17:ad:d1:fc:d7:bb:6c:37:85:4b:53:
         b6:af:19:bc:24:d6:e4:c9:9d:d3:24:c8:35:19:4d:c4:9e:5c:
         0d:14:33:55:6b:85:47:a2:f9:21:93:82:b3:38:87:52:77:1e:
         a3:b9:09:8f:06:64:18:5b:57:5a:72:fb:ab:20:ed:4d:00:98:
         3c:11:d2:c8:28:76:ae:77:70:85:8c:7e:02:1b:d4:8f:0a:52:
         59:24:79:17:91:8e:b5:4e:2c:f1:d3:cd:ae:3c:d0:8d:6b:84:
         64:cf:09:b8:67:6e:a1:70:90:39:0a:fd:a7:f9:d2:e6:0b:fd:
         b9:98:da:ad:1f:35:d2:cd:86:8a:0b:e3:87:c0:4e:d2:9f:d7:
         4a:83:7e:fe:a7:30:8f:2b:e0:9a:80:4f:24:ed:60:fc:d5:a4:
         92:5e:87:9c:88:5e:bf:e5:78:6b:49:d7:f5:fc:d1:12:a3:21:
         c5:14:72:34:9a:77:a9:fc:68:5e:d2:a8:31:11:04:fb:7a:00:
         e4:36:db:c1:9a:5f:bc:bf:be:3d:7c:b2:14:06:0a:5a:bd:41:
         b3:d0:fa:33:3e:0b:36:53:25:2a:3d:7b:54:ab:9a:bd:74:4e:
         ad:88:81:78:72:dc:a9:cf:d6:7c:a6:61:27:6f:2a:ec:3d:98:
         3a:27:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----