Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/2ddbccde1f82eebb0123c2b22bf8b9d24219f656.roa
File:                     2ddbccde1f82eebb0123c2b22bf8b9d24219f656.roa (raw, json)
Hash identifier:          dQDCq74zdHe4LmeKBoJXMA8Qwfa9h1KSzv0+qAcEPsM=
Subject key identifier:   8E:0E:54:20:7B:94:6B:F2:DD:A3:FD:C9:55:87:6F:88:72:ED:A5:9B
Certificate issuer:       /CN=120d3f1dd0412637d6cfe87a0a26d34c0665388a
Certificate serial:       21D496
Authority key identifier: B7:61:B5:F2:74:4F:DB:FF:C7:B9:E6:F9:E6:02:F4:76:CD:77:30:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/120d3f1dd0412637d6cfe87a0a26d34c0665388a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/2ddbccde1f82eebb0123c2b22bf8b9d24219f656.roa
Signing time:             Fri 18 Aug 2023 18:46:07 +0000
ROA not before:           Thu 17 Aug 2023 18:46:07 +0000
ROA not after:            Mon 18 Aug 2025 18:46:07 +0000
asID:                     52232
IP address blocks:        181.225.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217110 (0x21d496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120d3f1dd0412637d6cfe87a0a26d34c0665388a
        Validity
            Not Before: Aug 17 18:46:07 2023 GMT
            Not After : Aug 18 18:46:07 2025 GMT
        Subject: CN=2ddbccde1f82eebb0123c2b22bf8b9d24219f656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:fd:8e:41:0b:ed:fb:79:23:dc:80:84:11:
                    d9:e1:8a:4d:64:3e:95:23:9f:7c:04:ee:82:e7:81:
                    24:57:cb:49:26:3d:0c:8a:ec:39:d5:8f:f0:72:ec:
                    60:94:6a:90:4c:24:0f:10:d6:bc:54:41:61:14:33:
                    05:32:c5:6b:6e:be:20:4d:62:fb:69:76:45:ad:6f:
                    be:d5:80:1c:5a:1d:31:4d:52:65:64:21:0a:c6:3a:
                    e7:4f:c0:87:1d:bf:15:6b:36:45:38:f7:e8:91:6e:
                    95:09:49:a3:e3:44:39:eb:2d:52:fe:2e:f8:1f:b3:
                    df:b4:df:96:8c:21:70:47:34:cf:59:6c:a4:67:e9:
                    0b:fc:c8:bc:35:f8:6e:8d:61:f3:cb:43:f3:07:13:
                    19:42:f8:96:af:d2:fe:aa:3d:71:96:5f:e8:bd:54:
                    2b:0a:36:f6:f7:55:3a:dc:f0:63:04:8b:ad:d6:da:
                    5f:b2:95:1d:cf:5a:01:dd:cb:39:09:7c:46:50:6b:
                    6f:bb:a1:73:9d:f7:47:ad:3d:a1:d0:1a:4f:c9:8e:
                    60:4d:cd:77:f7:65:4f:9d:32:f2:5f:02:20:55:d2:
                    4b:34:86:fe:ee:89:91:99:ca:da:dd:61:bf:c2:70:
                    7c:0c:cc:d4:85:2b:0f:4c:77:7b:ab:81:3d:59:50:
                    47:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0E:54:20:7B:94:6B:F2:DD:A3:FD:C9:55:87:6F:88:72:ED:A5:9B
            X509v3 Authority Key Identifier:
                keyid:B7:61:B5:F2:74:4F:DB:FF:C7:B9:E6:F9:E6:02:F4:76:CD:77:30:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/120d3f1dd0412637d6cfe87a0a26d34c0665388a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/2ddbccde1f82eebb0123c2b22bf8b9d24219f656.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/120d3f1dd0412637d6cfe87a0a26d34c0665388a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:48:5b:b5:bc:05:f0:bd:76:cc:c0:28:8e:2f:5a:38:a7:ed:
         75:7d:21:3e:6b:89:cf:2d:de:9c:29:c0:8d:7d:eb:72:14:de:
         5d:ab:0f:ba:73:2b:e0:2b:71:1f:7b:20:32:1a:0f:f4:40:b4:
         0f:81:46:fb:24:fa:ba:24:73:c0:7d:40:24:db:1c:2c:92:bb:
         fb:d7:38:4f:d5:a3:3a:b9:fd:91:18:64:d6:b1:6f:07:c1:07:
         40:af:ce:0c:20:a6:5e:c3:05:e7:f0:26:63:92:55:8b:e0:84:
         ba:22:54:6f:13:87:39:4a:fd:c5:54:6c:08:56:cb:1a:18:8b:
         15:df:00:f4:e1:2f:59:3b:79:ed:2b:91:bf:33:7f:d9:e0:23:
         d1:02:11:ca:b7:20:3f:db:4d:1c:6a:49:f6:71:2c:94:eb:ad:
         0b:81:1a:86:bd:49:cc:ec:d4:d2:bd:2a:31:4b:fc:48:9f:55:
         e6:88:c1:05:7a:be:84:63:10:ca:3d:c3:57:bf:8e:ae:ca:31:
         04:3b:41:9e:dc:ee:c3:ac:33:14:d8:7b:bf:bc:c1:43:7f:24:
         3a:c1:df:1e:37:8e:f9:11:49:4c:e0:9f:cf:c8:b4:22:dc:57:
         aa:65:84:a1:a7:d7:09:9d:22:59:64:d4:43:ae:c6:72:3e:27:
         3e:b4:df:7f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIdSWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEy
MGQzZjFkZDA0MTI2MzdkNmNmZTg3YTBhMjZkMzRjMDY2NTM4OGEwHhcNMjMwODE3
MTg0NjA3WhcNMjUwODE4MTg0NjA3WjAzMTEwLwYDVQQDEygyZGRiY2NkZTFmODJl
ZWJiMDEyM2MyYjIyYmY4YjlkMjQyMTlmNjU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArJP9jkEL7ft5I9yAhBHZ4YpNZD6VI598BO6C54EkV8tJJj0M
iuw51Y/wcuxglGqQTCQPENa8VEFhFDMFMsVrbr4gTWL7aXZFrW++1YAcWh0xTVJl
ZCEKxjrnT8CHHb8VazZFOPfokW6VCUmj40Q56y1S/i74H7PftN+WjCFwRzTPWWyk
Z+kL/Mi8NfhujWHzy0PzBxMZQviWr9L+qj1xll/ovVQrCjb291U63PBjBIut1tpf
spUdz1oB3cs5CXxGUGtvu6FznfdHrT2h0BpPyY5gTc1392VPnTLyXwIgVdJLNIb+
7omRmcra3WG/wnB8DMzUhSsPTHd7q4E9WVBHQwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI4OVCB7lGvy3aP9yVWHb4hy7aWbMB8GA1UdIwQYMBaAFLdhtfJ0T9v/x7nm
+eYC9HbNdzDKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTIwZDNm
MWRkMDQxMjYzN2Q2Y2ZlODdhMGEyNmQzNGMwNjY1Mzg4YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzAzMGI1MDgtNjc3Yi00OGUxLWIyY2YtNmRiZTBl
YTliMjZmLzJkZGJjY2RlMWY4MmVlYmIwMTIzYzJiMjJiZjhiOWQyNDIxOWY2NTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMDMwYjUwOC02NzdiLTQ4ZTEtYjJjZi02ZGJl
MGVhOWIyNmYvMTIwZDNmMWRkMDQxMjYzN2Q2Y2ZlODdhMGEyNmQzNGMwNjY1Mzg4
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBbXhADANBgkqhkiG9w0BAQsFAAOCAQEAIUhbtbwF8L12zMAo
ji9aOKftdX0hPmuJzy3enCnAjX3rchTeXasPunMr4CtxH3sgMhoP9EC0D4FG+yT6
uiRzwH1AJNscLJK7+9c4T9WjOrn9kRhk1rFvB8EHQK/ODCCmXsMF5/AmY5JVi+CE
uiJUbxOHOUr9xVRsCFbLGhiLFd8A9OEvWTt57SuRvzN/2eAj0QIRyrcgP9tNHGpJ
9nEslOutC4Eahr1JzOzU0r0qMUv8SJ9V5ojBBXq+hGMQyj3DV7+OrsoxBDtBntzu
w6wzFNh7v7zBQ38kOsHfHjeO+RFJTOCfz8i0ItxXqmWEoafXCZ0iWWTUQ67Gcj4n
PrTffw==
-----END CERTIFICATE-----