Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/b5156a19d79b853ee5a74e1710c4193902cdf01b.roa
File:                     b5156a19d79b853ee5a74e1710c4193902cdf01b.roa (raw, json)
Hash identifier:          damo35woRNQlHM6EKYdrF+DFL4eWdDXrrEZZ9Iwx508=
Subject key identifier:   9E:9A:7B:87:7C:58:6C:2B:29:07:CD:75:15:73:E1:A7:E7:96:1E:7E
Certificate issuer:       /CN=6de3b6ab985c62f7bde582620020b65073aceec8
Certificate serial:       0CF0D8
Authority key identifier: D8:E5:77:6F:5E:C3:EC:8B:3F:27:2B:63:F3:03:DA:37:C5:97:6D:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6de3b6ab985c62f7bde582620020b65073aceec8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/b5156a19d79b853ee5a74e1710c4193902cdf01b.roa
Signing time:             Wed 24 Mar 2021 14:47:32 +0000
ROA not before:           Wed 24 Mar 2021 14:47:32 +0000
ROA not after:            Tue 24 Mar 2026 14:47:32 +0000
asID:                     28007
IP address blocks:        186.96.64.0/20 maxlen: 24
                          190.52.96.0/20 maxlen: 24
                          190.114.240.0/21 maxlen: 24
                          200.125.184.0/21 maxlen: 24
                          2800:5e0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848088 (0xcf0d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de3b6ab985c62f7bde582620020b65073aceec8
        Validity
            Not Before: Mar 24 14:47:32 2021 GMT
            Not After : Mar 24 14:47:32 2026 GMT
        Subject: CN=b5156a19d79b853ee5a74e1710c4193902cdf01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:90:a3:e1:90:40:af:42:94:09:08:80:a0:57:
                    d1:d3:b4:b9:d9:59:fd:e5:9c:92:72:80:7d:49:ec:
                    2b:70:7c:d0:e3:2a:fb:c9:45:20:a8:b9:37:b0:04:
                    14:91:22:32:88:9b:e5:10:9e:46:98:b0:fa:19:a6:
                    f1:64:4f:1b:6f:cb:11:32:10:9c:d0:b1:68:d3:39:
                    c6:3d:de:71:c1:d9:73:f4:b8:58:a8:ec:2a:d3:1e:
                    e2:15:39:ea:5e:e9:a4:a1:f9:05:1e:8a:45:6d:cf:
                    67:c4:65:d8:4e:71:8c:23:8b:b1:cd:95:a6:48:08:
                    8e:05:0e:05:17:ea:c5:ab:3e:e1:2e:45:30:e7:04:
                    d2:ca:41:46:ae:d0:35:c1:ee:2a:8d:0d:2c:d2:99:
                    b4:6d:1c:47:78:2b:b8:f4:d4:c1:95:24:27:ae:08:
                    37:05:5b:61:73:5b:6e:a9:36:95:c7:a2:f6:9e:1a:
                    ac:2f:00:ff:21:5d:07:19:17:70:d5:fd:ff:ee:4e:
                    cb:de:18:e1:61:f9:1a:30:1e:c3:5b:23:83:1c:e4:
                    5d:59:db:82:4d:31:79:cf:c7:07:d6:f7:45:c4:f7:
                    c9:4e:ed:79:5e:b5:8d:ae:20:82:6f:da:e2:0c:9a:
                    ca:1b:0c:1a:96:d4:0e:bc:d1:e1:e0:98:41:ef:aa:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9A:7B:87:7C:58:6C:2B:29:07:CD:75:15:73:E1:A7:E7:96:1E:7E
            X509v3 Authority Key Identifier:
                keyid:D8:E5:77:6F:5E:C3:EC:8B:3F:27:2B:63:F3:03:DA:37:C5:97:6D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6de3b6ab985c62f7bde582620020b65073aceec8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/b5156a19d79b853ee5a74e1710c4193902cdf01b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fce6f632-bd33-44ba-8d5a-413ec4af59fc/6de3b6ab985c62f7bde582620020b65073aceec8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.64.0/20
                  190.52.96.0/20
                  190.114.240.0/21
                  200.125.184.0/21
                IPv6:
                  2800:5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:a2:18:76:0c:a5:d7:bd:ca:fa:30:21:9e:55:dd:ee:d8:05:
         2c:a6:1e:c8:f4:fe:87:c7:b1:7d:f6:39:f3:44:c4:8c:24:bc:
         10:c8:1b:ad:ef:0b:d5:1e:74:4a:f6:b4:a1:6e:5f:62:3a:64:
         4b:57:6c:ea:4b:c5:9c:75:cf:57:12:cf:8f:9e:bc:c1:90:46:
         47:f9:58:8a:da:6f:b4:37:9c:80:52:49:4f:24:bb:5f:a4:50:
         65:10:01:9c:58:09:58:ad:4c:29:a6:a3:21:d9:09:f1:e0:34:
         d0:db:32:82:2b:58:2a:39:c2:70:fd:f2:23:93:31:c1:39:00:
         14:b0:86:12:35:14:3d:f1:57:39:f0:7a:b4:0c:0f:70:7a:40:
         e4:f3:a4:16:3d:ea:12:29:f0:63:84:b3:ed:60:77:9b:3b:85:
         03:e3:7a:0c:46:f1:6a:d9:9f:31:3b:e9:21:f2:79:1c:5b:55:
         be:0e:bf:bb:a9:5e:16:df:e1:5d:07:e7:47:e7:cf:4c:49:d1:
         1f:45:f3:96:1e:07:64:d7:19:b1:c5:ce:63:65:ba:00:4b:b6:
         d4:83:3b:d5:0f:86:53:cf:cf:9f:e9:4b:0e:10:ce:9b:27:c6:
         34:99:d1:6a:df:52:44:25:17:d9:85:b1:2f:0a:73:f1:32:69:
         ee:05:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----