Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c99fce9-cd50-4f90-a95b-5750e80ebd31/41ce30a960979a911a50b8caf523d53ddb7dd088.roa
File:                     41ce30a960979a911a50b8caf523d53ddb7dd088.roa (raw, json)
Hash identifier:          Slh+N9l9L5Gq6TaFXEQOW2dKDhtc1lLK3Er6V6D/raw=
Subject key identifier:   33:39:4B:6F:79:2D:69:D2:C9:B4:C9:9F:AF:4F:8A:AB:01:4B:42:36
Certificate issuer:       /CN=17ccd74c1e85364d261d260b4add3a1b8ce32fc4
Certificate serial:       0CC8A9
Authority key identifier: 55:B7:1D:38:1E:72:3A:F0:E7:67:83:A9:DD:EC:7A:4D:B4:AE:3B:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17ccd74c1e85364d261d260b4add3a1b8ce32fc4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c99fce9-cd50-4f90-a95b-5750e80ebd31/41ce30a960979a911a50b8caf523d53ddb7dd088.roa
Signing time:             Wed 24 Mar 2021 14:38:52 +0000
ROA not before:           Wed 24 Mar 2021 14:38:51 +0000
ROA not after:            Tue 24 Mar 2026 14:38:51 +0000
asID:                     52345
IP address blocks:        200.16.94.0/24 maxlen: 24
                          2801:19:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837801 (0xcc8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ccd74c1e85364d261d260b4add3a1b8ce32fc4
        Validity
            Not Before: Mar 24 14:38:51 2021 GMT
            Not After : Mar 24 14:38:51 2026 GMT
        Subject: CN=41ce30a960979a911a50b8caf523d53ddb7dd088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2d:10:d2:73:55:f0:f7:cb:39:1e:5d:74:db:
                    85:95:48:42:d3:5e:8c:c7:04:c5:8c:f4:ef:1d:38:
                    42:bf:b1:dc:f3:2a:43:c2:e9:37:eb:e9:b4:65:7f:
                    61:c1:2c:92:39:06:67:1c:38:27:33:06:c1:04:17:
                    d9:a2:8c:23:63:9b:96:5f:28:c6:3b:54:8f:6c:d6:
                    6e:31:a5:89:7e:56:d9:59:99:d7:9d:2a:28:c9:e8:
                    95:2a:a8:63:17:99:97:36:6d:72:80:10:df:c8:31:
                    1c:3e:27:04:a8:8e:85:af:7b:a5:06:f4:07:08:a1:
                    b6:60:5a:1a:66:f2:8d:f5:f4:6c:57:19:76:d3:43:
                    fb:24:39:93:0c:fc:5b:90:a7:fd:60:6e:f8:9e:90:
                    1b:8d:60:29:48:7b:8f:86:59:63:a5:89:72:e2:03:
                    95:eb:fa:63:df:57:32:5e:4d:e2:8b:79:4f:d8:2e:
                    17:4a:3f:30:2a:f8:09:a6:c1:ae:21:c6:ab:f4:b8:
                    85:a5:80:d2:8d:05:e6:eb:68:8a:aa:50:0d:c0:a6:
                    8d:20:b5:84:86:cf:ed:fa:9a:31:6f:7f:cf:52:08:
                    9f:f6:70:c7:b3:7c:39:8e:3d:33:ca:31:bf:e0:e8:
                    9a:d4:3f:30:f3:83:2b:c6:5d:ec:4b:ae:43:0e:e5:
                    f3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:39:4B:6F:79:2D:69:D2:C9:B4:C9:9F:AF:4F:8A:AB:01:4B:42:36
            X509v3 Authority Key Identifier:
                keyid:55:B7:1D:38:1E:72:3A:F0:E7:67:83:A9:DD:EC:7A:4D:B4:AE:3B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17ccd74c1e85364d261d260b4add3a1b8ce32fc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c99fce9-cd50-4f90-a95b-5750e80ebd31/41ce30a960979a911a50b8caf523d53ddb7dd088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c99fce9-cd50-4f90-a95b-5750e80ebd31/17ccd74c1e85364d261d260b4add3a1b8ce32fc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.94.0/24
                IPv6:
                  2801:19:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:40:23:c6:7a:de:2a:a2:11:a5:35:6e:fa:d2:d1:12:56:
         da:b4:f8:e8:a8:6d:b2:db:11:5e:5c:bd:ce:82:33:fd:61:f8:
         30:99:56:42:63:f5:5a:e2:e2:4e:3b:88:20:69:74:2a:5c:f3:
         23:1e:1a:68:f2:24:4f:d0:57:30:1f:8e:ab:96:ab:84:89:c7:
         d3:5d:0e:b1:e0:ab:44:2c:3f:04:27:42:10:c8:5a:c1:7d:90:
         8d:df:ef:0a:4a:4a:df:f3:00:b3:22:ff:e1:bc:a6:ab:9d:ca:
         79:4e:cc:3c:18:9a:f1:fd:57:0a:c3:9a:ea:fa:91:86:4a:2e:
         0c:b9:f8:64:c6:10:68:e9:8b:89:b0:fe:61:bc:09:1e:95:87:
         05:37:1b:2b:57:3a:c6:f0:3b:df:2b:e9:cf:01:0c:0b:94:35:
         06:1c:fc:3d:7b:92:bb:76:b4:1a:55:8d:fa:79:3d:a4:7e:d9:
         95:f3:35:1d:ca:f8:db:a5:00:2a:e7:b0:52:0c:c5:81:fd:30:
         2e:f4:59:4d:70:ca:56:ac:24:6e:75:f0:38:61:fc:1a:52:3e:
         c3:1c:3e:05:21:ea:c7:66:1e:78:e0:53:f6:09:06:1a:87:d7:
         b9:66:6d:e0:92:0c:6e:b3:48:85:28:73:a3:e4:26:30:35:9c:
         74:69:1a:08
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDDMipMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE3
Y2NkNzRjMWU4NTM2NGQyNjFkMjYwYjRhZGQzYTFiOGNlMzJmYzQwHhcNMjEwMzI0
MTQzODUxWhcNMjYwMzI0MTQzODUxWjAzMTEwLwYDVQQDEyg0MWNlMzBhOTYwOTc5
YTkxMWE1MGI4Y2FmNTIzZDUzZGRiN2RkMDg4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkC0Q0nNV8PfLOR5ddNuFlUhC016MxwTFjPTvHThCv7Hc8ypD
wuk36+m0ZX9hwSySOQZnHDgnMwbBBBfZoowjY5uWXyjGO1SPbNZuMaWJflbZWZnX
nSooyeiVKqhjF5mXNm1ygBDfyDEcPicEqI6Fr3ulBvQHCKG2YFoaZvKN9fRsVxl2
00P7JDmTDPxbkKf9YG74npAbjWApSHuPhlljpYly4gOV6/pj31cyXk3ii3lP2C4X
Sj8wKvgJpsGuIcar9LiFpYDSjQXm62iKqlANwKaNILWEhs/t+poxb3/PUgif9nDH
s3w5jj0zyjG/4Oia1D8w84Mrxl3sS65DDuXzgwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFDM5S295LWnSybTJn69PiqsBS0I2MB8GA1UdIwQYMBaAFFW3HTgecjrw52eD
qd3sek20rjuVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTdjY2Q3
NGMxZTg1MzY0ZDI2MWQyNjBiNGFkZDNhMWI4Y2UzMmZjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWM5OWZjZTktY2Q1MC00ZjkwLWE5NWItNTc1MGU4
MGViZDMxLzQxY2UzMGE5NjA5NzlhOTExYTUwYjhjYWY1MjNkNTNkZGI3ZGQwODgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85Yzk5ZmNlOS1jZDUwLTRmOTAtYTk1Yi01NzUw
ZTgwZWJkMzEvMTdjY2Q3NGMxZTg1MzY0ZDI2MWQyNjBiNGFkZDNhMWI4Y2UzMmZj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAMgQXjAPBAIAAjAJAwcAKAEAGYAAMA0GCSqGSIb3DQEBCwUA
A4IBAQBth0AjxnreKqIRpTVu+tLRElbatPjoqG2y2xFeXL3OgjP9YfgwmVZCY/Va
4uJOO4ggaXQqXPMjHhpo8iRP0FcwH46rlquEicfTXQ6x4KtELD8EJ0IQyFrBfZCN
3+8KSkrf8wCzIv/hvKarncp5Tsw8GJrx/VcKw5rq+pGGSi4MufhkxhBo6YuJsP5h
vAkelYcFNxsrVzrG8DvfK+nPAQwLlDUGHPw9e5K7drQaVY36eT2kftmV8zUdyvjb
pQAq57BSDMWB/TAu9FlNcMpWrCRudfA4YfwaUj7DHD4FIerHZh544FP2CQYah9e5
Zm3gkgxus0iFKHOj5CYwNZx0aRoI
-----END CERTIFICATE-----