Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13db476b-1103-44ca-a3a1-79150d01ad84/e5469409187e9df31e1351afeb8bd29f91e6d45f.roa
File:                     e5469409187e9df31e1351afeb8bd29f91e6d45f.roa (raw, json)
Hash identifier:          YhnsbXQJCqiUWq1s98kkWb/OcUOyEYfXA04lcjh+e7M=
Subject key identifier:   62:E2:98:30:3B:46:93:DC:99:86:FC:6D:AE:26:19:86:7D:44:5C:95
Certificate issuer:       /CN=2a584b25ee533fa7ea37f69249c0d41f072fc3df
Certificate serial:       049D17
Authority key identifier: EF:59:2A:09:03:D5:3F:EE:41:D2:1F:43:7A:38:D8:F9:91:66:8E:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a584b25ee533fa7ea37f69249c0d41f072fc3df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13db476b-1103-44ca-a3a1-79150d01ad84/e5469409187e9df31e1351afeb8bd29f91e6d45f.roa
Signing time:             Wed 24 Mar 2021 14:29:37 +0000
ROA not before:           Wed 24 Mar 2021 14:29:37 +0000
ROA not after:            Tue 24 Mar 2026 14:29:37 +0000
asID:                     269813
IP address blocks:        2803:bb60::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302359 (0x49d17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a584b25ee533fa7ea37f69249c0d41f072fc3df
        Validity
            Not Before: Mar 24 14:29:37 2021 GMT
            Not After : Mar 24 14:29:37 2026 GMT
        Subject: CN=e5469409187e9df31e1351afeb8bd29f91e6d45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:3e:6b:a0:72:18:e5:06:84:51:ae:1e:bf:
                    ac:db:ac:01:4f:9b:95:85:be:91:1e:44:79:ed:0c:
                    c4:53:3c:31:04:6d:41:17:da:96:31:b9:ce:34:f0:
                    8d:80:39:7d:57:82:61:39:40:98:c6:37:50:1c:55:
                    a7:68:fd:9b:91:fc:cf:ec:b3:51:8c:ca:95:9e:36:
                    ad:bb:d3:a3:7f:de:52:28:d4:c3:e0:4f:af:d8:f6:
                    c9:a1:aa:71:bb:b4:49:ad:be:e7:61:6a:de:7d:32:
                    18:08:03:3a:69:40:75:9a:2f:33:e1:86:b8:bc:df:
                    9b:05:3a:4c:5e:52:75:63:9e:3a:fe:c7:06:57:83:
                    f1:21:90:cd:f5:88:1c:a4:7b:dc:91:b0:1c:47:5e:
                    07:aa:c7:c6:59:c1:2a:74:1a:f2:db:a6:01:b3:56:
                    1c:d5:84:94:26:58:dc:d7:15:30:48:e0:4f:cb:12:
                    3d:c4:03:5c:c2:86:09:56:1c:b7:41:52:5d:3c:e6:
                    f4:a6:15:f3:29:93:6a:ec:e9:0f:4a:d9:fc:a3:96:
                    ff:8e:64:e7:17:93:b2:db:87:98:c9:ff:b5:63:e5:
                    bb:b7:fa:6d:7d:b9:c3:09:bd:ac:a2:f1:ea:7b:c5:
                    e0:92:6a:37:b4:63:17:b3:af:e7:13:a1:b8:8c:ff:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E2:98:30:3B:46:93:DC:99:86:FC:6D:AE:26:19:86:7D:44:5C:95
            X509v3 Authority Key Identifier:
                keyid:EF:59:2A:09:03:D5:3F:EE:41:D2:1F:43:7A:38:D8:F9:91:66:8E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a584b25ee533fa7ea37f69249c0d41f072fc3df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13db476b-1103-44ca-a3a1-79150d01ad84/e5469409187e9df31e1351afeb8bd29f91e6d45f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13db476b-1103-44ca-a3a1-79150d01ad84/2a584b25ee533fa7ea37f69249c0d41f072fc3df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bb60::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:5b:0f:18:a0:b1:6e:8b:1d:9b:bb:ea:db:62:ee:e9:a6:
         b8:7c:5b:1a:fe:41:80:8b:04:6e:b8:c1:96:06:2b:f5:60:e8:
         e7:eb:8a:8d:aa:b9:5f:94:0f:0d:85:97:66:86:fc:9b:0f:43:
         3b:61:1c:24:f7:c7:2c:11:e4:d0:29:e5:1e:92:19:5a:62:d1:
         51:ff:77:55:75:f2:fe:06:8a:4e:dc:8b:ce:9a:23:f0:7b:9e:
         04:f7:6f:7f:a4:63:44:dd:19:99:a2:6a:f2:44:4f:2f:fd:7a:
         c4:6c:4c:e7:2f:d8:c7:10:be:90:5a:f9:79:ed:90:cb:df:9a:
         38:82:76:c5:09:92:2e:19:58:c2:08:41:73:ad:76:8e:50:42:
         7a:fe:d2:df:3e:b0:91:a7:b1:40:ff:37:42:e0:10:12:7e:9c:
         e3:7a:08:c8:69:ad:f2:f6:33:af:5f:76:ac:51:f4:f3:a5:0c:
         0a:12:df:19:58:41:97:b4:30:b9:d1:eb:e8:dd:26:5d:67:06:
         87:26:26:aa:f0:47:b7:be:28:d4:ee:05:59:b0:e5:b4:a3:8a:
         14:e7:8f:6a:33:04:10:6c:d0:0f:5f:1f:17:e6:53:62:d6:93:
         6f:ac:57:82:a0:5e:6b:92:01:eb:4d:c2:e6:ad:2d:ac:69:64:
         98:f2:2a:b1
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBJ0XMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
NTg0YjI1ZWU1MzNmYTdlYTM3ZjY5MjQ5YzBkNDFmMDcyZmMzZGYwHhcNMjEwMzI0
MTQyOTM3WhcNMjYwMzI0MTQyOTM3WjAzMTEwLwYDVQQDEyhlNTQ2OTQwOTE4N2U5
ZGYzMWUxMzUxYWZlYjhiZDI5ZjkxZTZkNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAolo+a6ByGOUGhFGuHr+s26wBT5uVhb6RHkR57QzEUzwxBG1B
F9qWMbnONPCNgDl9V4JhOUCYxjdQHFWnaP2bkfzP7LNRjMqVnjatu9Ojf95SKNTD
4E+v2PbJoapxu7RJrb7nYWrefTIYCAM6aUB1mi8z4Ya4vN+bBTpMXlJ1Y546/scG
V4PxIZDN9YgcpHvckbAcR14HqsfGWcEqdBry26YBs1Yc1YSUJljc1xUwSOBPyxI9
xANcwoYJVhy3QVJdPOb0phXzKZNq7OkPStn8o5b/jmTnF5Oy24eYyf+1Y+W7t/pt
fbnDCb2sovHqe8Xgkmo3tGMXs6/nE6G4jP/cgwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFGLimDA7RpPcmYb8ba4mGYZ9RFyVMB8GA1UdIwQYMBaAFO9ZKgkD1T/uQdIf
Q3o42PmRZo7mMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmE1ODRi
MjVlZTUzM2ZhN2VhMzdmNjkyNDljMGQ0MWYwNzJmYzNkZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTNkYjQ3NmItMTEwMy00NGNhLWEzYTEtNzkxNTBk
MDFhZDg0L2U1NDY5NDA5MTg3ZTlkZjMxZTEzNTFhZmViOGJkMjlmOTFlNmQ0NWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xM2RiNDc2Yi0xMTAzLTQ0Y2EtYTNhMS03OTE1
MGQwMWFkODQvMmE1ODRiMjVlZTUzM2ZhN2VhMzdmNjkyNDljMGQ0MWYwNzJmYzNk
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDu2AwDQYJKoZIhvcNAQELBQADggEBACjzWw8YoLFuix2b
u+rbYu7pprh8Wxr+QYCLBG64wZYGK/Vg6Ofrio2quV+UDw2Fl2aG/JsPQzthHCT3
xywR5NAp5R6SGVpi0VH/d1V18v4Gik7ci86aI/B7ngT3b3+kY0TdGZmiavJETy/9
esRsTOcv2McQvpBa+XntkMvfmjiCdsUJki4ZWMIIQXOtdo5QQnr+0t8+sJGnsUD/
N0LgEBJ+nON6CMhprfL2M69fdqxR9POlDAoS3xlYQZe0MLnR6+jdJl1nBocmJqrw
R7e+KNTuBVmw5bSjihTnj2ozBBBs0A9fHxfmU2LWk2+sV4KgXmuSAetNwuatLaxp
ZJjyKrE=
-----END CERTIFICATE-----