Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/30dd9526e3494a98dfdfd853eaa5b348077d76f5.roa
File:                     30dd9526e3494a98dfdfd853eaa5b348077d76f5.roa (raw, json)
Hash identifier:          W9yn78cUL1oJLSP3cM1q+VNR2J6ygbCX33ZUfo2GFVM=
Subject key identifier:   46:0A:BC:56:9B:D9:79:B1:40:43:AD:0A:DF:28:30:BA:6B:41:CA:3F
Certificate issuer:       /CN=021081310b983679c1c39476508572541f96603f
Certificate serial:       0B95A2
Authority key identifier: A3:74:80:FB:FB:A7:C8:7E:4D:A3:B8:D4:D2:D9:5D:03:9F:92:61:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/021081310b983679c1c39476508572541f96603f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/30dd9526e3494a98dfdfd853eaa5b348077d76f5.roa
Signing time:             Wed 24 Mar 2021 14:43:28 +0000
ROA not before:           Wed 24 Mar 2021 14:43:28 +0000
ROA not after:            Tue 24 Mar 2026 14:43:28 +0000
asID:                     139235
IP address blocks:        131.196.252.0/22 maxlen: 22
                          2806:2ea::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759202 (0xb95a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021081310b983679c1c39476508572541f96603f
        Validity
            Not Before: Mar 24 14:43:28 2021 GMT
            Not After : Mar 24 14:43:28 2026 GMT
        Subject: CN=30dd9526e3494a98dfdfd853eaa5b348077d76f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:73:58:a1:f1:ff:4e:de:1a:78:ef:5c:70:
                    f7:63:c2:5e:68:09:81:96:2f:5e:e2:81:94:6f:47:
                    a1:19:3b:9e:86:6e:bb:32:f0:93:e0:fe:e2:ed:ad:
                    be:6b:e7:1e:e2:6c:77:8b:0f:cb:3b:ae:4a:0b:43:
                    de:e4:26:67:f9:74:95:4a:33:ab:0e:28:68:ee:8d:
                    6c:4a:62:44:9a:e9:c2:b5:fa:8b:f8:c4:4c:dd:10:
                    9a:3f:b5:7a:44:46:03:6c:fa:3f:f0:f5:fc:ba:95:
                    f2:90:d7:0b:37:5a:49:88:64:96:ed:85:af:a0:c8:
                    f0:d2:32:ca:84:90:28:06:d4:90:4d:57:f4:bc:05:
                    87:3f:9d:3b:d4:ef:ab:e0:7f:63:4a:d4:1a:87:57:
                    b9:03:9f:af:13:bc:27:36:fe:0b:9b:4a:5a:78:e0:
                    94:5f:56:9e:f2:51:18:f4:54:8f:9a:32:63:f8:1b:
                    92:7b:71:77:d3:33:07:e0:3b:44:17:df:80:dd:e3:
                    a0:0e:b5:0d:79:d4:6d:17:75:c3:1a:1c:b1:5a:1c:
                    45:66:28:27:a2:4e:05:c4:72:6d:97:82:62:56:c0:
                    85:c8:09:c0:03:20:ad:a0:0e:8a:49:3a:ed:54:0c:
                    ee:a0:7d:e6:ff:dd:e1:eb:84:75:82:04:88:11:5d:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0A:BC:56:9B:D9:79:B1:40:43:AD:0A:DF:28:30:BA:6B:41:CA:3F
            X509v3 Authority Key Identifier:
                keyid:A3:74:80:FB:FB:A7:C8:7E:4D:A3:B8:D4:D2:D9:5D:03:9F:92:61:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/021081310b983679c1c39476508572541f96603f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/30dd9526e3494a98dfdfd853eaa5b348077d76f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/021081310b983679c1c39476508572541f96603f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.252.0/22
                IPv6:
                  2806:2ea::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:54:e7:48:c4:c9:76:2c:b4:40:b3:ce:83:04:43:c6:38:23:
         c9:83:bd:27:9d:5f:c7:e6:77:5e:be:3e:54:f8:f1:9c:5e:2f:
         2a:24:3e:f1:22:6b:24:a2:14:0e:d9:0a:d6:97:43:d3:5c:9f:
         35:e0:4a:b8:25:c2:5d:80:f6:9f:e0:bd:4c:b2:dd:fe:a0:95:
         7e:79:a1:72:e6:16:ee:7c:c1:28:2f:f7:fe:d3:12:a3:ff:f9:
         51:e0:ef:bb:b4:b8:4f:f3:a8:9f:c5:ce:fe:8e:cc:e9:bf:1c:
         4b:9b:4b:10:16:ee:3f:75:c3:44:b6:7d:d8:1e:04:99:0a:ca:
         9d:ce:d0:6c:fa:07:63:44:06:bd:fa:b5:f0:6f:ea:6f:00:1d:
         32:a6:4b:2e:f2:24:b9:71:52:d6:d2:4b:37:07:2d:62:de:89:
         41:d1:13:c8:33:e0:be:bf:52:d4:68:1a:de:50:9f:ae:ff:a1:
         77:0c:50:ab:7d:9b:4c:9e:5f:58:31:ac:75:6d:19:9f:68:81:
         5b:9a:e1:4f:df:59:c8:a2:02:1c:42:84:7b:53:59:98:93:df:
         9e:49:d4:4b:3b:27:56:74:4e:58:eb:bb:9a:d7:58:f5:06:cb:
         92:97:d4:c0:5b:54:d2:bc:00:fd:f6:90:d4:f5:ef:fb:02:5f:
         92:e2:f0:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDC5WiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAy
MTA4MTMxMGI5ODM2NzljMWMzOTQ3NjUwODU3MjU0MWY5NjYwM2YwHhcNMjEwMzI0
MTQ0MzI4WhcNMjYwMzI0MTQ0MzI4WjAzMTEwLwYDVQQDEygzMGRkOTUyNmUzNDk0
YTk4ZGZkZmQ4NTNlYWE1YjM0ODA3N2Q3NmY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArMJzWKHx/07eGnjvXHD3Y8JeaAmBli9e4oGUb0ehGTuehm67
MvCT4P7i7a2+a+ce4mx3iw/LO65KC0Pe5CZn+XSVSjOrDiho7o1sSmJEmunCtfqL
+MRM3RCaP7V6REYDbPo/8PX8upXykNcLN1pJiGSW7YWvoMjw0jLKhJAoBtSQTVf0
vAWHP5071O+r4H9jStQah1e5A5+vE7wnNv4Lm0paeOCUX1ae8lEY9FSPmjJj+BuS
e3F30zMH4DtEF9+A3eOgDrUNedRtF3XDGhyxWhxFZignok4FxHJtl4JiVsCFyAnA
AyCtoA6KSTrtVAzuoH3m/93h64R1ggSIEV0O8QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFEYKvFab2XmxQEOtCt8oMLprQco/MB8GA1UdIwQYMBaAFKN0gPv7p8h+TaO4
1NLZXQOfkmF7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDIxMDgx
MzEwYjk4MzY3OWMxYzM5NDc2NTA4NTcyNTQxZjk2NjAzZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjk5OTZiYjgtNzlmYi00MjYxLWJkNWItNmY5NGMy
ODNhNThjLzMwZGQ5NTI2ZTM0OTRhOThkZmRmZDg1M2VhYTViMzQ4MDc3ZDc2ZjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yOTk5NmJiOC03OWZiLTQyNjEtYmQ1Yi02Zjk0
YzI4M2E1OGMvMDIxMDgxMzEwYjk4MzY3OWMxYzM5NDc2NTA4NTcyNTQxZjk2NjAz
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAoPE/DANBAIAAjAHAwUAKAYC6jANBgkqhkiG9w0BAQsFAAOC
AQEABlTnSMTJdiy0QLPOgwRDxjgjyYO9J51fx+Z3Xr4+VPjxnF4vKiQ+8SJrJKIU
DtkK1pdD01yfNeBKuCXCXYD2n+C9TLLd/qCVfnmhcuYW7nzBKC/3/tMSo//5UeDv
u7S4T/Oon8XO/o7M6b8cS5tLEBbuP3XDRLZ92B4EmQrKnc7QbPoHY0QGvfq18G/q
bwAdMqZLLvIkuXFS1tJLNwctYt6JQdETyDPgvr9S1Gga3lCfrv+hdwxQq32bTJ5f
WDGsdW0Zn2iBW5rhT99ZyKICHEKEe1NZmJPfnknUSzsnVnROWOu7mtdY9QbLkpfU
wFtU0rwA/faQ1PXv+wJfkuLwZw==
-----END CERTIFICATE-----