Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/d31cf9fd2cc6fd91e261959a1bf9ec0f3986915f.roa
File:                     d31cf9fd2cc6fd91e261959a1bf9ec0f3986915f.roa (raw, json)
Hash identifier:          +f1+Lo6A9nNBPAtTYv1aqDQ6jNPuqF3hDH2vDLixlOs=
Subject key identifier:   00:A5:8E:F7:29:1A:F1:CE:18:A5:83:6D:FD:78:AD:BA:E2:85:87:D4
Certificate issuer:       /CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
Certificate serial:       048DCE
Authority key identifier: 07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/d31cf9fd2cc6fd91e261959a1bf9ec0f3986915f.roa
Signing time:             Wed 24 Mar 2021 14:32:32 +0000
ROA not before:           Wed 24 Mar 2021 14:32:32 +0000
ROA not after:            Tue 24 Mar 2026 14:32:32 +0000
asID:                     27875
IP address blocks:        179.0.132.0/22 maxlen: 24
                          179.0.136.0/21 maxlen: 24
                          200.9.147.0/24 maxlen: 24
                          200.12.133.0/24 maxlen: 24
                          200.12.134.0/23 maxlen: 24
                          200.12.136.0/23 maxlen: 24
                          200.12.138.0/24 maxlen: 24
                          2801:1e0::/41 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298446 (0x48dce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
        Validity
            Not Before: Mar 24 14:32:32 2021 GMT
            Not After : Mar 24 14:32:32 2026 GMT
        Subject: CN=d31cf9fd2cc6fd91e261959a1bf9ec0f3986915f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d1:e2:6b:f6:4e:07:79:4c:21:4e:61:2d:3e:
                    04:c7:db:d1:36:ad:d7:f7:2f:67:a8:cc:95:c1:24:
                    36:2f:83:65:f7:ce:ac:62:f7:38:9f:b6:56:08:c1:
                    37:42:9d:0a:c1:d2:2f:b0:83:d0:e8:e3:20:3a:bf:
                    cf:55:5b:46:c5:d7:80:c4:67:1d:c5:ed:51:61:49:
                    25:93:5f:b7:2f:3f:85:7d:75:94:b3:70:b3:8c:26:
                    9f:9a:6f:3e:5a:30:09:2e:bb:a4:3c:75:24:95:16:
                    e9:a7:51:d9:6c:96:21:d6:4e:41:42:9d:9e:b8:6c:
                    0a:94:cd:99:87:07:bf:2e:80:fc:c4:51:bc:aa:03:
                    d1:8c:37:01:92:dd:14:59:43:d1:e5:d0:89:e0:a6:
                    64:6a:d0:e8:ab:ce:5a:20:f2:6c:db:83:c8:63:e8:
                    15:f1:63:66:98:a0:28:67:d2:d2:15:1c:4e:a6:69:
                    20:95:89:21:2e:5c:7f:c8:26:32:8d:73:2b:06:b5:
                    bd:36:3a:29:f8:31:22:f1:b4:8c:31:9f:20:aa:60:
                    c4:22:22:b1:4f:e7:31:34:72:30:4b:0e:78:cb:bc:
                    00:6f:03:22:bf:6e:4b:af:53:cd:20:7c:e2:76:d6:
                    b1:99:f6:81:c3:ac:76:e0:ce:9b:a4:44:41:04:bf:
                    a3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A5:8E:F7:29:1A:F1:CE:18:A5:83:6D:FD:78:AD:BA:E2:85:87:D4
            X509v3 Authority Key Identifier:
                keyid:07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/d31cf9fd2cc6fd91e261959a1bf9ec0f3986915f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.132.0-179.0.143.255
                  200.9.147.0/24
                  200.12.133.0-200.12.138.255
                IPv6:
                  2801:1e0::/41

    Signature Algorithm: sha256WithRSAEncryption
         46:23:50:9e:9a:ae:4d:94:c6:ae:bc:bb:5d:df:69:36:5f:7e:
         9d:ca:58:9b:47:72:c5:09:58:6d:23:35:62:fa:0d:bd:5c:9f:
         1e:0f:ba:3a:c0:46:18:17:c5:21:5e:33:9b:ec:d9:f1:e7:1e:
         f4:04:d3:e5:c8:19:32:46:d9:94:9a:72:4b:74:d9:8e:16:94:
         c4:ab:84:73:1d:49:a5:cd:8e:d5:75:0e:d5:7f:50:22:45:bb:
         0d:99:ca:94:25:7d:ea:2d:91:da:de:62:bc:50:39:03:ee:4f:
         7f:8c:8a:ba:82:ee:f2:af:48:d1:25:78:53:b7:f2:11:2c:ab:
         0f:30:44:2a:a0:fe:00:a6:fa:3a:d0:40:27:4e:ae:a7:fe:1a:
         7f:2e:9f:52:51:0c:79:c9:aa:6e:c4:41:16:9f:2a:b0:62:2e:
         bb:1b:1b:bb:4e:43:b2:85:ad:b3:5a:1e:d6:bc:cc:90:d1:89:
         7d:44:cd:ee:d8:54:d5:b6:e9:3a:80:a1:05:8b:ab:17:dd:09:
         a5:13:dd:4b:2f:47:62:fc:84:b5:be:dd:b3:b3:f2:42:cd:9b:
         45:9a:ab:d4:81:de:07:85:9c:7e:d8:d0:39:b4:57:42:ec:c9:
         f3:c9:f6:3e:86:0f:0e:49:49:51:c1:09:9f:7f:4f:8f:3b:ee:
         c6:37:d0:b4
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIDBI3OMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhl
N2Q2NmU1ODMxN2I3NTIxMzA1NmFmZTVkM2I2ZTRhNGY4ZGJmYmYwHhcNMjEwMzI0
MTQzMjMyWhcNMjYwMzI0MTQzMjMyWjAzMTEwLwYDVQQDEyhkMzFjZjlmZDJjYzZm
ZDkxZTI2MTk1OWExYmY5ZWMwZjM5ODY5MTVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAotHia/ZOB3lMIU5hLT4Ex9vRNq3X9y9nqMyVwSQ2L4Nl986s
Yvc4n7ZWCME3Qp0KwdIvsIPQ6OMgOr/PVVtGxdeAxGcdxe1RYUklk1+3Lz+FfXWU
s3CzjCafmm8+WjAJLrukPHUklRbpp1HZbJYh1k5BQp2euGwKlM2Zhwe/LoD8xFG8
qgPRjDcBkt0UWUPR5dCJ4KZkatDoq85aIPJs24PIY+gV8WNmmKAoZ9LSFRxOpmkg
lYkhLlx/yCYyjXMrBrW9Njop+DEi8bSMMZ8gqmDEIiKxT+cxNHIwSw54y7wAbwMi
v25Lr1PNIHzidtaxmfaBw6x24M6bpERBBL+juwIDAQABo4ICiDCCAoQwHQYDVR0O
BBYEFACljvcpGvHOGKWDbf14rbrihYfUMB8GA1UdIwQYMBaAFAcBo19NR6JxfRNr
I1n/pcs6goFTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGU3ZDY2
ZTU4MzE3Yjc1MjEzMDU2YWZlNWQzYjZlNGE0ZjhkYmZiZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjAxOWMyNDItMmMyOC00ZTZiLTg5NDMtMTNkYzg0
ZDQ1NzgyL2QzMWNmOWZkMmNjNmZkOTFlMjYxOTU5YTFiZjllYzBmMzk4NjkxNWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMDE5YzI0Mi0yYzI4LTRlNmItODk0My0xM2Rj
ODRkNDU3ODIvOGU3ZDY2ZTU4MzE3Yjc1MjEzMDU2YWZlNWQzYjZlNGE0ZjhkYmZi
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBMBggrBgEFBQcBBwEB/wQ9
MDswKAQCAAEwIjAMAwQCswCEAwQEswCAAwQAyAmTMAwDBADIDIUDBADIDIowDwQC
AAIwCQMHBygBAeAAADANBgkqhkiG9w0BAQsFAAOCAQEARiNQnpquTZTGrry7Xd9p
Nl9+ncpYm0dyxQlYbSM1YvoNvVyfHg+6OsBGGBfFIV4zm+zZ8ece9ATT5cgZMkbZ
lJpyS3TZjhaUxKuEcx1Jpc2O1XUO1X9QIkW7DZnKlCV96i2R2t5ivFA5A+5Pf4yK
uoLu8q9I0SV4U7fyESyrDzBEKqD+AKb6OtBAJ06up/4afy6fUlEMecmqbsRBFp8q
sGIuuxsbu05DsoWts1oe1rzMkNGJfUTN7thU1bbpOoChBYurF90JpRPdSy9HYvyE
tb7ds7PyQs2bRZqr1IHeB4WcftjQObRXQuzJ88n2PoYPDklJUcEJn39PjzvuxjfQ
tA==
-----END CERTIFICATE-----