Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/eaf1cec0a36cf40a8600e503033a1e9c42e0a76c.roa
File:                     eaf1cec0a36cf40a8600e503033a1e9c42e0a76c.roa (raw, json)
Hash identifier:          Y2VUkTQfL78AB5C+qvBwmXr3Gw38qVaAsHFTWTyvq0Q=
Subject key identifier:   B0:F0:E9:34:F2:6D:79:23:35:F5:D0:95:26:CA:04:EF:90:E3:05:4D
Certificate issuer:       /CN=4393f7432846896d18bc47956f7dce0ffc072b54
Certificate serial:       0C2F5F
Authority key identifier: C5:62:86:91:75:C8:DB:6E:23:A2:5E:89:B8:61:A8:76:6D:95:57:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4393f7432846896d18bc47956f7dce0ffc072b54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/eaf1cec0a36cf40a8600e503033a1e9c42e0a76c.roa
Signing time:             Wed 24 Mar 2021 14:45:29 +0000
ROA not before:           Wed 24 Mar 2021 14:45:29 +0000
ROA not after:            Tue 24 Mar 2026 14:45:29 +0000
asID:                     137951
IP address blocks:        131.221.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798559 (0xc2f5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4393f7432846896d18bc47956f7dce0ffc072b54
        Validity
            Not Before: Mar 24 14:45:29 2021 GMT
            Not After : Mar 24 14:45:29 2026 GMT
        Subject: CN=eaf1cec0a36cf40a8600e503033a1e9c42e0a76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:ed:52:89:f8:a8:82:11:5b:35:9a:48:a0:
                    39:6f:0e:03:d8:a4:4a:49:97:27:9f:51:25:28:8d:
                    05:c7:69:fb:d7:87:9f:b4:78:cb:a2:93:1d:34:e1:
                    b4:6c:f6:41:27:57:6f:66:53:05:17:30:13:2e:99:
                    f5:c1:f2:47:8f:c4:35:0b:d4:1e:92:63:ea:19:14:
                    a5:fc:40:eb:e4:de:21:15:af:f0:93:40:8e:6c:d4:
                    ac:49:de:54:18:39:87:50:15:a9:a9:82:82:50:64:
                    9a:79:ce:0c:8e:45:1c:07:b1:f0:e9:b7:ba:27:7c:
                    94:d0:34:eb:ab:e5:6c:52:2a:07:ec:c9:82:3d:6a:
                    3d:7a:19:ca:14:3a:6c:3c:e3:bf:19:47:3d:65:ea:
                    e4:99:b4:fb:52:18:b0:5a:f9:1f:5a:10:8f:50:eb:
                    15:60:22:bf:40:8a:5e:eb:c8:d4:b4:b0:11:8a:c3:
                    83:94:ee:b1:ac:51:2b:59:07:03:22:6d:78:70:93:
                    b1:a2:0d:ec:49:14:19:f7:93:d3:b3:34:86:49:83:
                    50:18:5b:f9:84:5f:84:12:a6:f1:55:c2:23:b2:43:
                    f5:53:65:f7:78:1c:9e:fa:9b:5f:ba:94:58:91:2c:
                    d6:3b:99:97:98:c8:de:b1:26:bb:d5:17:4e:f4:8f:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F0:E9:34:F2:6D:79:23:35:F5:D0:95:26:CA:04:EF:90:E3:05:4D
            X509v3 Authority Key Identifier:
                keyid:C5:62:86:91:75:C8:DB:6E:23:A2:5E:89:B8:61:A8:76:6D:95:57:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4393f7432846896d18bc47956f7dce0ffc072b54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/eaf1cec0a36cf40a8600e503033a1e9c42e0a76c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/4393f7432846896d18bc47956f7dce0ffc072b54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:38:05:83:12:c0:cd:5f:fe:f2:44:5b:ec:b5:4e:01:93:2b:
         f7:7f:91:cb:ec:1e:e2:a8:5c:37:0a:bc:11:dd:06:04:dc:94:
         e2:45:cc:ef:c6:9e:fa:9f:de:0c:e9:f9:fa:66:fd:a6:80:2d:
         bf:b1:9b:c2:a1:3f:c4:1c:07:d0:f5:7c:bb:0f:3c:35:67:bf:
         ec:1d:e4:e6:f3:d4:a5:f2:b6:d0:a7:a2:a4:f3:f2:e5:13:65:
         1e:63:8a:16:d3:70:d0:35:2b:32:1f:b8:9d:ba:03:b4:cf:57:
         b9:e7:ed:0f:37:f3:ad:bc:55:ee:cb:0e:85:e4:82:eb:b3:68:
         e8:b8:27:03:a4:21:11:43:be:bc:d6:72:e3:0d:d0:ef:3f:45:
         cf:61:23:c3:b7:57:88:12:f1:4f:bb:00:48:e0:29:ad:5d:49:
         c1:dd:50:e3:48:5a:a6:e1:15:09:03:13:1b:cb:fa:1f:06:80:
         dc:25:c1:70:ec:68:60:f7:21:45:bc:a0:83:99:9f:ff:8d:b6:
         f6:64:82:fc:ec:4c:99:bb:f7:a6:24:80:a6:4c:60:29:1d:10:
         52:70:cb:e8:2a:5b:cb:4a:1d:8c:ab:0c:2b:04:13:a6:87:9b:
         70:e4:ca:40:01:7c:7f:55:65:99:04:60:f5:63:8b:a4:4c:12:
         3d:ab:ac:94
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDC9fMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
OTNmNzQzMjg0Njg5NmQxOGJjNDc5NTZmN2RjZTBmZmMwNzJiNTQwHhcNMjEwMzI0
MTQ0NTI5WhcNMjYwMzI0MTQ0NTI5WjAzMTEwLwYDVQQDEyhlYWYxY2VjMGEzNmNm
NDBhODYwMGU1MDMwMzNhMWU5YzQyZTBhNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlU3tUon4qIIRWzWaSKA5bw4D2KRKSZcnn1ElKI0Fx2n714ef
tHjLopMdNOG0bPZBJ1dvZlMFFzATLpn1wfJHj8Q1C9QekmPqGRSl/EDr5N4hFa/w
k0CObNSsSd5UGDmHUBWpqYKCUGSaec4MjkUcB7Hw6be6J3yU0DTrq+VsUioH7MmC
PWo9ehnKFDpsPOO/GUc9ZerkmbT7UhiwWvkfWhCPUOsVYCK/QIpe68jUtLARisOD
lO6xrFErWQcDIm14cJOxog3sSRQZ95PTszSGSYNQGFv5hF+EEqbxVcIjskP1U2X3
eBye+ptfupRYkSzWO5mXmMjesSa71RdO9I8tcQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLDw6TTybXkjNfXQlSbKBO+Q4wVNMB8GA1UdIwQYMBaAFMVihpF1yNtuI6Je
ibhhqHZtlVe5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDM5M2Y3
NDMyODQ2ODk2ZDE4YmM0Nzk1NmY3ZGNlMGZmYzA3MmI1NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWQ4MWY2Y2QtZmM4MS00OTFmLWJiOTItMzhkYjcw
ODZjMzIyL2VhZjFjZWMwYTM2Y2Y0MGE4NjAwZTUwMzAzM2ExZTljNDJlMGE3NmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZDgxZjZjZC1mYzgxLTQ5MWYtYmI5Mi0zOGRi
NzA4NmMzMjIvNDM5M2Y3NDMyODQ2ODk2ZDE4YmM0Nzk1NmY3ZGNlMGZmYzA3MmI1
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIPdmDANBgkqhkiG9w0BAQsFAAOCAQEAdDgFgxLAzV/+8kRb
7LVOAZMr93+Ry+we4qhcNwq8Ed0GBNyU4kXM78ae+p/eDOn5+mb9poAtv7GbwqE/
xBwH0PV8uw88NWe/7B3k5vPUpfK20KeipPPy5RNlHmOKFtNw0DUrMh+4nboDtM9X
ueftDzfzrbxV7ssOheSC67No6LgnA6QhEUO+vNZy4w3Q7z9Fz2Ejw7dXiBLxT7sA
SOAprV1Jwd1Q40hapuEVCQMTG8v6HwaA3CXBcOxoYPchRbygg5mf/4229mSC/OxM
mbv3piSApkxgKR0QUnDL6Cpby0odjKsMKwQTpoebcOTKQAF8f1VlmQRg9WOLpEwS
PauslA==
-----END CERTIFICATE-----