Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/b67ff9c3f87d9da9d62e45cb5f20289805d1293b.roa
File:                     b67ff9c3f87d9da9d62e45cb5f20289805d1293b.roa (raw, json)
Hash identifier:          l2UE7e6OUB+CXoZDSgPQKoi/mAmNIJgtsbe+Y5GQvk0=
Subject key identifier:   99:70:A6:53:C7:D3:55:F6:5C:55:60:E4:98:D7:6C:66:7B:8F:89:1F
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       0E0599
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/b67ff9c3f87d9da9d62e45cb5f20289805d1293b.roa
Signing time:             Wed 24 Mar 2021 14:33:16 +0000
ROA not before:           Wed 24 Mar 2021 14:33:16 +0000
ROA not after:            Tue 24 Mar 2026 14:33:16 +0000
asID:                     27995
IP address blocks:        179.2.0.0/15 maxlen: 15
                          179.4.0.0/16 maxlen: 16
                          186.20.0.0/16 maxlen: 16
                          186.21.0.0/16 maxlen: 16
                          186.172.0.0/14 maxlen: 14
                          190.110.128.0/19 maxlen: 19
                          191.116.0.0/14 maxlen: 14
                          2800:540::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918937 (0xe0599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Mar 24 14:33:16 2021 GMT
            Not After : Mar 24 14:33:16 2026 GMT
        Subject: CN=b67ff9c3f87d9da9d62e45cb5f20289805d1293b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:08:8c:26:2e:43:33:3d:96:91:20:a9:fc:cd:
                    5e:23:0e:05:7f:70:b8:61:fe:b5:5d:b7:51:91:b9:
                    47:22:96:44:ba:d0:12:e1:f6:a3:79:67:18:dd:ad:
                    43:a0:d4:c9:53:de:d0:80:7f:cd:50:9b:30:3a:af:
                    bb:6a:33:64:83:7a:05:13:5b:e7:dc:dc:80:c8:27:
                    f9:aa:03:67:d4:14:2e:a7:ef:d2:fa:36:da:18:64:
                    8a:33:49:21:28:ee:b8:04:8d:f6:46:58:1f:39:b2:
                    be:f9:4e:6c:4a:f9:18:8c:e5:56:54:0d:6b:b2:13:
                    b2:01:d9:4b:c7:06:41:53:9b:df:95:46:1d:b3:94:
                    f4:92:2e:b0:9e:8c:a4:0c:ea:30:43:56:32:a0:9c:
                    c1:5a:ed:13:b5:42:fc:7b:22:99:91:7f:9e:dd:68:
                    89:57:c7:d1:42:62:72:85:62:c2:7f:6e:9d:31:c9:
                    e3:c3:54:7b:bf:ca:32:3f:19:a5:a0:ac:27:9d:c4:
                    74:70:a9:36:28:4f:a5:e5:e1:20:1b:9a:f4:1e:ac:
                    36:8d:51:60:5b:fb:8b:8f:3c:84:11:bb:50:cf:da:
                    60:a4:18:81:53:f3:c4:f7:6e:2b:b0:f0:04:c6:ce:
                    43:b8:4b:91:52:68:bf:b6:c3:1f:64:7d:dd:c3:1b:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:70:A6:53:C7:D3:55:F6:5C:55:60:E4:98:D7:6C:66:7B:8F:89:1F
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/b67ff9c3f87d9da9d62e45cb5f20289805d1293b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.2.0.0-179.4.255.255
                  186.20.0.0/15
                  186.172.0.0/14
                  190.110.128.0/19
                  191.116.0.0/14
                IPv6:
                  2800:540::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:41:f1:56:e9:67:b5:4c:78:0f:fc:c7:08:e3:47:02:84:c7:
         81:8f:19:8c:c6:9b:78:7d:0e:a6:fc:13:1c:b3:de:ac:41:46:
         24:fb:23:8a:3a:9b:a8:8e:5a:b6:db:62:78:c9:63:6e:2f:76:
         7b:47:94:dc:b4:6c:1b:f4:87:3a:74:70:e8:b0:1d:60:e1:c4:
         10:fe:20:4c:4a:72:ea:8b:a1:a1:c5:64:89:61:1c:ff:ca:ec:
         d9:74:07:35:4e:a2:97:66:de:16:95:ba:df:67:56:71:5a:9c:
         ac:66:c9:f7:bd:b2:34:0a:bc:0c:3d:32:9c:33:c1:39:98:5a:
         17:e4:7a:06:f6:1c:7f:dd:a2:57:e8:d1:13:81:1d:d3:10:66:
         4f:4f:74:cb:b7:97:a6:a4:5a:43:7b:1a:33:6f:f8:ba:d7:a0:
         05:6e:14:30:b5:2c:5c:34:0d:0c:e1:6a:a2:07:d0:ba:eb:ae:
         73:d1:33:20:42:08:f6:37:2a:5f:c7:8b:e7:1a:b6:cd:ac:d0:
         f5:4d:39:e9:d4:84:ef:45:07:9b:f4:90:18:48:75:61:90:7a:
         ad:36:3f:3d:d4:0b:0c:a4:1e:56:8f:a9:4a:68:06:80:e9:76:
         bb:f8:f7:c9:d2:24:51:dd:a5:1d:4c:58:43:72:35:bc:a2:84:
         12:f9:8e:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----