Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/b5e6815f44662862c38e23f269ba2268151b6510.roa
File:                     b5e6815f44662862c38e23f269ba2268151b6510.roa (raw, json)
Hash identifier:          6zuqz4nG/IzWq/OgXGObpN3CSxDyNRt042OpHW6wBHQ=
Subject key identifier:   FD:AA:55:2C:FC:CD:87:F6:A8:90:29:EC:39:81:97:3C:2C:9F:CE:99
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       0E09AD
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/b5e6815f44662862c38e23f269ba2268151b6510.roa
Signing time:             Wed 24 Mar 2021 14:33:16 +0000
ROA not before:           Wed 24 Mar 2021 14:33:16 +0000
ROA not after:            Tue 24 Mar 2026 14:33:16 +0000
asID:                     27836
IP address blocks:        186.172.0.0/14 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919981 (0xe09ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Mar 24 14:33:16 2021 GMT
            Not After : Mar 24 14:33:16 2026 GMT
        Subject: CN=b5e6815f44662862c38e23f269ba2268151b6510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bb:ff:7d:ca:d0:ab:96:24:3a:c8:46:fc:ce:
                    4e:e6:06:2c:85:a0:b9:44:11:19:c9:16:83:13:ec:
                    1f:ff:67:10:74:49:97:be:58:3f:91:76:b8:ef:e2:
                    c5:e5:e4:2c:99:2f:3e:c3:7b:0c:db:c1:c6:9e:1f:
                    f6:23:d0:b4:09:0a:08:69:8e:3c:fb:b2:0a:44:9b:
                    91:bf:f2:6b:b2:af:c1:e2:a8:ed:13:ea:f3:5c:89:
                    0e:6e:dc:af:23:0c:27:7b:fd:12:2c:e5:7f:a0:2b:
                    87:13:d0:2a:62:38:73:ad:e2:7c:09:40:db:13:88:
                    10:f1:8d:28:84:9d:41:fe:8f:3e:c6:dd:37:e9:5b:
                    86:e3:db:c7:9d:49:b0:6d:26:54:2d:4b:3c:71:55:
                    bb:3c:d0:65:bf:82:39:9c:56:18:f6:b8:f2:77:f2:
                    4a:f6:92:46:4b:ba:ca:d8:cf:aa:aa:2a:ec:cd:3e:
                    3b:97:5d:c6:b2:44:c1:7f:f4:b8:2b:c0:0c:5d:4d:
                    9d:2c:62:ad:17:0e:50:f7:07:2a:e1:1c:8a:68:45:
                    9e:fe:6e:48:dc:6e:83:3e:31:d2:db:3b:06:b9:f8:
                    24:66:2c:50:4e:8d:42:73:9d:96:a4:14:d7:28:f6:
                    38:66:ff:b9:18:ca:0a:21:8f:d2:e3:30:ae:a3:1d:
                    ea:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AA:55:2C:FC:CD:87:F6:A8:90:29:EC:39:81:97:3C:2C:9F:CE:99
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/b5e6815f44662862c38e23f269ba2268151b6510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.172.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         1e:32:55:3d:3e:cb:34:7d:af:32:94:6a:08:8b:b7:26:e2:d2:
         61:a1:c3:a5:cf:8f:d9:d4:26:62:0b:cb:55:6d:39:23:3e:ab:
         fd:c3:e6:c0:f7:bf:37:fe:80:a1:2e:72:94:19:07:72:b0:d1:
         90:ff:14:89:ca:26:47:56:52:82:50:de:59:b1:1b:a5:ec:ec:
         da:35:1d:fb:78:be:3c:db:15:a7:08:42:c8:d8:3b:f0:56:cb:
         6a:1c:a4:a2:c6:b9:c5:95:38:9f:29:88:22:ee:0c:81:1e:e2:
         ad:37:5e:d5:a4:3b:fd:1b:06:10:1d:95:1c:82:52:82:47:a7:
         75:60:14:ac:11:4a:9f:e8:b4:ce:61:4f:e8:9a:d2:b6:78:c4:
         ff:d1:41:6f:b8:dd:50:ea:1d:a1:02:e1:7b:3e:0c:34:29:05:
         a4:df:dd:a5:26:f5:d9:83:63:20:00:0c:55:9b:59:6a:50:26:
         af:2b:9f:ed:f0:68:28:ee:ec:ec:68:08:ab:14:f8:2c:8e:32:
         c3:84:f7:9e:de:dd:fe:b3:67:0d:b8:34:84:8d:06:41:89:bd:
         25:36:35:d3:6e:6d:f8:e5:ca:85:d1:50:85:74:f5:52:5b:21:
         69:3a:ba:38:32:82:80:56:d2:ce:75:35:d3:fb:3e:17:02:25:
         0a:3c:82:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----