Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/2bf7781cb58bec590287173a23a9df846c084c36.roa
File:                     2bf7781cb58bec590287173a23a9df846c084c36.roa (raw, json)
Hash identifier:          gOOnCihjH53Dxfr/4OR7Mc1icHTV3/7oP3IXBEZ5aus=
Subject key identifier:   9B:04:DA:BE:2D:F4:AD:04:32:E8:64:FA:56:BE:B4:7E:C0:6C:88:A1
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       0CF3F4
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/2bf7781cb58bec590287173a23a9df846c084c36.roa
Signing time:             Wed 24 Mar 2021 14:29:19 +0000
ROA not before:           Wed 24 Mar 2021 14:29:18 +0000
ROA not after:            Tue 24 Mar 2026 14:29:18 +0000
asID:                     52404
IP address blocks:        138.219.2.0/24 maxlen: 24
                          200.115.83.0/24 maxlen: 24
                          2001:13c7:6013::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848884 (0xcf3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Mar 24 14:29:18 2021 GMT
            Not After : Mar 24 14:29:18 2026 GMT
        Subject: CN=2bf7781cb58bec590287173a23a9df846c084c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5f:7b:e5:1f:b7:21:b1:a9:a9:a4:cd:a6:9e:
                    0b:47:aa:e4:75:bc:56:14:1a:35:0e:d4:95:b9:a1:
                    26:83:ab:eb:a1:65:2f:ec:cc:43:58:0c:e7:0e:b4:
                    44:be:ce:b3:60:3f:c5:5a:e2:d0:17:88:d8:c7:ca:
                    03:66:4f:dc:a2:73:e3:95:0d:03:0d:84:72:07:3b:
                    94:1e:24:98:2b:68:25:e2:fb:23:fe:b3:50:78:80:
                    9e:36:1d:98:12:f2:c8:b4:7c:7c:a5:ed:34:3a:8a:
                    b9:35:a2:fe:f7:c9:57:ae:29:92:fa:f9:3d:38:10:
                    41:36:d2:db:e6:c6:25:99:d9:2c:27:01:05:48:66:
                    30:64:fa:a9:b6:af:04:4e:b0:1d:72:30:22:18:7c:
                    d1:2a:60:2f:51:a8:a3:10:d0:89:f4:17:c3:46:a6:
                    28:6c:11:7c:4c:8f:60:07:bd:17:8e:00:ed:dc:ed:
                    0c:90:e3:97:b3:48:c2:23:6f:47:17:23:2c:e0:ac:
                    44:6a:a5:bf:1a:ed:9a:9e:8d:a6:9b:71:71:a5:8b:
                    59:82:48:65:63:d6:a7:4c:f2:39:f2:0a:fa:ef:ca:
                    20:41:c9:9f:da:4e:b3:c4:40:0f:5c:74:14:78:74:
                    7e:f9:cb:ef:98:0a:53:4a:2b:5c:7d:84:54:82:87:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:04:DA:BE:2D:F4:AD:04:32:E8:64:FA:56:BE:B4:7E:C0:6C:88:A1
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/2bf7781cb58bec590287173a23a9df846c084c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.2.0/24
                  200.115.83.0/24
                IPv6:
                  2001:13c7:6013::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:0e:8d:73:91:07:3d:5e:d3:01:03:60:37:07:3f:b8:2c:e4:
         f6:52:cb:0d:87:1b:da:52:9f:89:8e:55:dc:12:41:2d:cc:5f:
         57:70:71:f4:04:db:ac:b4:09:09:d8:8c:17:a7:d5:16:39:65:
         6f:a4:dc:dc:90:4c:67:2e:58:6b:63:7a:30:b3:fb:fe:a1:8f:
         68:11:3f:c4:28:d4:b3:ed:99:2b:16:a7:af:a1:26:d0:b3:5d:
         73:75:5c:4d:55:cc:26:f3:0e:1f:56:d0:b1:c3:8a:16:04:ed:
         73:c9:a0:6f:51:2b:1d:7e:c5:dc:9c:06:33:07:2c:4f:10:63:
         fe:67:ce:ed:e9:1c:e4:bc:b4:a5:70:e8:af:45:fa:45:10:73:
         63:d4:1a:16:0f:c6:f2:f3:96:97:87:d3:58:b2:12:64:fe:08:
         7b:7f:ce:22:e3:c7:96:00:6d:6e:55:36:3d:d4:ce:8b:d7:5d:
         ca:ae:fa:71:dc:f1:a3:81:2b:c8:f3:f9:62:38:9c:5e:62:cb:
         df:95:d1:88:68:5f:14:e6:da:5c:03:65:55:37:85:16:ef:1c:
         63:f8:96:5b:64:aa:00:e6:1c:4f:ef:e9:4f:60:83:f8:f2:79:
         be:db:1d:4a:6c:46:ec:38:45:eb:d8:b6:ec:d9:e0:d7:d6:bd:
         63:da:e2:91
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDDPP0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjEwMzI0
MTQyOTE4WhcNMjYwMzI0MTQyOTE4WjAzMTEwLwYDVQQDEygyYmY3NzgxY2I1OGJl
YzU5MDI4NzE3M2EyM2E5ZGY4NDZjMDg0YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj1975R+3IbGpqaTNpp4LR6rkdbxWFBo1DtSVuaEmg6vroWUv
7MxDWAznDrREvs6zYD/FWuLQF4jYx8oDZk/conPjlQ0DDYRyBzuUHiSYK2gl4vsj
/rNQeICeNh2YEvLItHx8pe00Ooq5NaL+98lXrimS+vk9OBBBNtLb5sYlmdksJwEF
SGYwZPqptq8ETrAdcjAiGHzRKmAvUaijENCJ9BfDRqYobBF8TI9gB70XjgDt3O0M
kOOXs0jCI29HFyMs4KxEaqW/Gu2ano2mm3FxpYtZgkhlY9anTPI58gr678ogQcmf
2k6zxEAPXHQUeHR++cvvmApTSitcfYRUgodMsQIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFJsE2r4t9K0EMuhk+la+tH7AbIihMB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzJiZjc3ODFjYjU4YmVjNTkwMjg3MTczYTIzYTlkZjg0NmMwODRjMzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAIrbAgMEAMhzUzAPBAIAAjAJAwcAIAETx2ATMA0GCSqGSIb3
DQEBCwUAA4IBAQATDo1zkQc9XtMBA2A3Bz+4LOT2UssNhxvaUp+JjlXcEkEtzF9X
cHH0BNustAkJ2IwXp9UWOWVvpNzckExnLlhrY3ows/v+oY9oET/EKNSz7ZkrFqev
oSbQs11zdVxNVcwm8w4fVtCxw4oWBO1zyaBvUSsdfsXcnAYzByxPEGP+Z87t6Rzk
vLSlcOivRfpFEHNj1BoWD8by85aXh9NYshJk/gh7f84i48eWAG1uVTY91M6L113K
rvpx3PGjgSvI8/liOJxeYsvfldGIaF8U5tpcA2VVN4UW7xxj+JZbZKoA5hxP7+lP
YIP48nm+2x1KbEbsOEXr2Lbs2eDX1r1j2uKR
-----END CERTIFICATE-----