Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/0a47bc733ff6484d5379a56d87d948be5180a601.roa
File:                     0a47bc733ff6484d5379a56d87d948be5180a601.roa (raw, json)
Hash identifier:          ZUb2rVLzgXz9VlMEXxwjI56er/xfJyLtZi0loZkjWNs=
Subject key identifier:   4A:57:48:13:1C:1E:13:2A:E1:FD:D2:53:6F:0F:79:8B:CA:0B:FF:A9
Certificate issuer:       /CN=d46b4ca0a9fad10842355c22e4bfcc2f877fdc28
Certificate serial:       0D0D23
Authority key identifier: 15:44:36:65:79:46:ED:7A:C6:C8:7D:0D:CA:A1:07:76:9C:69:28:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46b4ca0a9fad10842355c22e4bfcc2f877fdc28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/0a47bc733ff6484d5379a56d87d948be5180a601.roa
Signing time:             Wed 24 Mar 2021 14:34:17 +0000
ROA not before:           Wed 24 Mar 2021 14:34:17 +0000
ROA not after:            Tue 24 Mar 2026 14:34:17 +0000
asID:                     263728
IP address blocks:        131.72.232.0/22 maxlen: 22
                          2803:380::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855331 (0xd0d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46b4ca0a9fad10842355c22e4bfcc2f877fdc28
        Validity
            Not Before: Mar 24 14:34:17 2021 GMT
            Not After : Mar 24 14:34:17 2026 GMT
        Subject: CN=0a47bc733ff6484d5379a56d87d948be5180a601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c8:c2:ce:c2:34:30:b6:d0:9a:57:6c:4a:f2:
                    c9:dc:bd:9a:2c:c3:56:03:db:f4:89:6a:b2:d4:96:
                    7a:b2:14:31:a8:80:25:f2:28:66:c5:90:4f:d2:28:
                    05:2b:4d:0c:18:7a:17:d3:02:66:25:e6:d0:54:79:
                    31:56:6b:81:24:4e:ef:d2:46:31:5c:2d:7b:84:65:
                    b1:ad:a2:e2:8c:9a:65:60:9c:1b:4f:c2:21:bf:97:
                    91:0a:b3:0f:7c:cd:e9:fc:17:48:20:92:8e:a9:68:
                    78:c4:ba:7c:53:82:17:cf:8d:b5:41:59:ab:10:f7:
                    4e:f3:cc:36:92:e4:69:1c:34:4a:21:30:1a:a4:6f:
                    d8:34:26:2e:7d:f3:0f:16:d7:c8:6e:63:ee:94:f2:
                    1d:77:f0:bf:92:18:8f:7f:bf:0f:0c:60:61:f5:2c:
                    a8:d8:9e:bf:14:98:cd:d7:57:18:e5:01:7f:9e:72:
                    5f:5c:51:0d:8b:a1:24:e7:77:fd:ba:c5:78:21:6b:
                    23:0c:87:f0:13:14:27:02:d8:29:6a:ec:cc:46:31:
                    e1:c2:03:a6:63:cc:61:f4:70:1e:75:ff:7a:d9:d0:
                    f3:e7:6f:8d:84:88:6b:f8:b3:2c:bb:26:f3:d6:f6:
                    a6:b6:54:6d:dd:fb:b3:99:4a:a9:ac:ad:e2:30:eb:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:57:48:13:1C:1E:13:2A:E1:FD:D2:53:6F:0F:79:8B:CA:0B:FF:A9
            X509v3 Authority Key Identifier:
                keyid:15:44:36:65:79:46:ED:7A:C6:C8:7D:0D:CA:A1:07:76:9C:69:28:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46b4ca0a9fad10842355c22e4bfcc2f877fdc28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/0a47bc733ff6484d5379a56d87d948be5180a601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/d46b4ca0a9fad10842355c22e4bfcc2f877fdc28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.232.0/22
                IPv6:
                  2803:380::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:74:b6:ee:c5:91:5d:67:b1:e6:d8:f0:78:4a:bc:79:fc:69:
         bc:13:44:47:3f:04:45:e5:a1:d7:51:a4:dd:a4:42:09:28:72:
         a5:5e:c5:2f:d6:0b:12:11:1f:d9:c6:f6:fc:5b:15:cf:4a:1b:
         a0:6b:67:d7:1f:81:35:b4:89:e2:7a:a9:5e:76:11:ce:9f:bc:
         73:90:d0:2c:11:d8:4c:d5:fd:a4:e6:28:60:28:78:e0:10:16:
         71:61:5b:f2:36:4a:a7:34:70:f1:20:c8:cf:77:6b:cc:56:6b:
         8f:e0:2c:66:23:7d:f7:40:4f:eb:95:ba:c6:1c:c3:74:66:2c:
         8e:bf:6c:3d:c5:c8:db:33:76:c5:57:9b:54:70:10:82:a8:f6:
         e0:2f:11:ab:69:2f:27:12:81:15:90:d3:84:2a:5f:ce:59:75:
         c7:45:a4:10:f6:6a:8c:47:c7:1c:4d:63:a8:0b:69:0f:02:a9:
         3f:57:aa:6d:0a:9b:24:52:3c:ea:60:e3:77:81:06:9e:87:b6:
         f5:0b:79:13:53:bb:3b:09:04:40:d4:ad:73:2d:a2:6f:70:98:
         9d:03:7c:54:4b:a0:8b:af:1e:3e:55:46:30:d2:42:c7:92:41:
         44:1a:0b:97:9f:38:30:74:fb:a9:4e:4a:a6:6d:15:0b:8a:6a:
         14:a5:c2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----