Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83fbc5ae-3df1-406b-b4a9-6c39fdc29573/e063410ffed050478f3e70dc04a3a83a699aa037.roa
File:                     e063410ffed050478f3e70dc04a3a83a699aa037.roa (raw, json)
Hash identifier:          gfdFfYJHIGICRJoUSaouQ9m3Jjhqw9cRhXWLdMFdx8A=
Subject key identifier:   5C:98:04:0E:94:71:30:DF:A2:B0:2B:0A:9F:75:FE:B3:19:9D:A6:88
Certificate issuer:       /CN=92107f32f7512ff7c8629e32c158eed42fc5f6a2
Certificate serial:       0D40B4
Authority key identifier: 61:C3:9C:F3:67:E5:00:20:D0:05:66:E7:D8:E2:46:6C:2A:C3:E3:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92107f32f7512ff7c8629e32c158eed42fc5f6a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83fbc5ae-3df1-406b-b4a9-6c39fdc29573/e063410ffed050478f3e70dc04a3a83a699aa037.roa
Signing time:             Wed 24 Mar 2021 14:37:32 +0000
ROA not before:           Wed 24 Mar 2021 14:37:30 +0000
ROA not after:            Tue 24 Mar 2026 14:37:30 +0000
asID:                     52468
IP address blocks:        170.246.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868532 (0xd40b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92107f32f7512ff7c8629e32c158eed42fc5f6a2
        Validity
            Not Before: Mar 24 14:37:30 2021 GMT
            Not After : Mar 24 14:37:30 2026 GMT
        Subject: CN=e063410ffed050478f3e70dc04a3a83a699aa037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:21:71:31:cc:ce:f0:a7:1d:dd:b9:90:9f:
                    df:ee:a6:58:47:54:92:31:a2:b7:6d:94:59:98:5b:
                    e8:1b:53:50:e7:c5:e7:67:0a:99:54:00:97:a8:be:
                    20:f3:69:c0:73:2d:66:0b:2a:f0:9c:c4:d1:a0:1a:
                    02:17:66:68:74:11:34:58:c2:c2:8c:93:76:43:a9:
                    04:d2:0b:dc:ae:9b:66:b9:eb:4e:e2:48:65:91:73:
                    9c:d2:4e:28:11:e6:cb:77:84:11:e6:bc:37:1e:47:
                    b8:d6:6e:46:43:57:26:90:95:7a:06:1a:9d:3e:0f:
                    e0:24:72:a7:c4:90:8d:6e:dd:9b:c4:bb:85:12:4a:
                    5f:59:7f:6d:da:2a:d6:bb:77:da:21:b6:77:a9:49:
                    b4:43:2a:37:fd:01:6f:da:46:30:f5:d9:d4:f3:db:
                    cf:63:80:88:79:87:d1:cb:e1:73:29:19:09:a9:4f:
                    d6:c8:99:99:88:64:b3:ba:42:25:2e:0a:2f:65:c1:
                    2d:98:7f:b3:43:2f:95:3d:1a:57:d8:55:22:52:52:
                    3e:b7:07:69:28:ca:66:7e:6b:40:6c:9a:23:ff:98:
                    e3:8e:8b:1a:65:b6:53:2f:b2:a6:c0:5d:94:b0:e8:
                    70:92:ab:a1:df:0f:cd:fe:69:65:29:ca:69:52:43:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:98:04:0E:94:71:30:DF:A2:B0:2B:0A:9F:75:FE:B3:19:9D:A6:88
            X509v3 Authority Key Identifier:
                keyid:61:C3:9C:F3:67:E5:00:20:D0:05:66:E7:D8:E2:46:6C:2A:C3:E3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92107f32f7512ff7c8629e32c158eed42fc5f6a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83fbc5ae-3df1-406b-b4a9-6c39fdc29573/e063410ffed050478f3e70dc04a3a83a699aa037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83fbc5ae-3df1-406b-b4a9-6c39fdc29573/92107f32f7512ff7c8629e32c158eed42fc5f6a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:bd:bd:cd:26:7d:18:4b:68:c0:51:27:d7:8a:e9:c5:33:d1:
         63:15:f9:27:fd:c7:90:71:f4:d3:cf:6d:55:c2:44:8b:fa:db:
         bc:1f:23:07:fe:a0:65:89:cf:0b:21:c5:8e:3b:b7:6c:2e:fe:
         05:ec:fd:74:26:58:8a:8f:16:97:16:59:c4:9c:b2:b4:4a:f4:
         07:48:59:ae:3a:b5:44:2a:8d:e5:a2:90:8d:27:58:45:e3:56:
         f3:72:fc:c3:c5:af:29:63:bf:27:13:78:f0:ce:ea:97:8e:e1:
         06:0c:9c:f0:0d:62:50:16:fc:f0:86:3c:36:3c:02:dd:73:eb:
         59:67:6a:f6:93:96:5d:e1:d4:e1:c7:c9:55:92:0c:f3:a4:b0:
         98:48:08:f8:37:52:43:fc:67:3d:90:5d:4b:31:87:08:65:3d:
         ea:bf:98:62:09:49:08:c7:2f:ed:a7:cf:b4:8a:15:aa:98:fa:
         5c:23:96:1d:2c:2d:92:2d:a2:8e:b8:7f:73:9a:b5:a6:b5:2c:
         b1:03:cc:37:d9:ba:e5:72:21:0f:cf:00:ef:d7:1e:7d:0a:64:
         a5:2c:0a:51:6b:19:5d:6d:d9:41:e4:dd:3f:ea:4f:9b:e6:d0:
         3a:52:dd:84:64:64:11:90:99:05:1a:00:ee:72:34:12:c2:a2:
         29:b0:ca:0a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDUC0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDky
MTA3ZjMyZjc1MTJmZjdjODYyOWUzMmMxNThlZWQ0MmZjNWY2YTIwHhcNMjEwMzI0
MTQzNzMwWhcNMjYwMzI0MTQzNzMwWjAzMTEwLwYDVQQDEyhlMDYzNDEwZmZlZDA1
MDQ3OGYzZTcwZGMwNGEzYTgzYTY5OWFhMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwUkhcTHMzvCnHd25kJ/f7qZYR1SSMaK3bZRZmFvoG1NQ58Xn
ZwqZVACXqL4g82nAcy1mCyrwnMTRoBoCF2ZodBE0WMLCjJN2Q6kE0gvcrptmuetO
4khlkXOc0k4oEebLd4QR5rw3Hke41m5GQ1cmkJV6BhqdPg/gJHKnxJCNbt2bxLuF
EkpfWX9t2irWu3faIbZ3qUm0Qyo3/QFv2kYw9dnU89vPY4CIeYfRy+FzKRkJqU/W
yJmZiGSzukIlLgovZcEtmH+zQy+VPRpX2FUiUlI+twdpKMpmfmtAbJoj/5jjjosa
ZbZTL7KmwF2UsOhwkquh3w/N/mllKcppUkNmjQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFyYBA6UcTDforArCp91/rMZnaaIMB8GA1UdIwQYMBaAFGHDnPNn5QAg0AVm
59jiRmwqw+NtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTIxMDdm
MzJmNzUxMmZmN2M4NjI5ZTMyYzE1OGVlZDQyZmM1ZjZhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODNmYmM1YWUtM2RmMS00MDZiLWI0YTktNmMzOWZk
YzI5NTczL2UwNjM0MTBmZmVkMDUwNDc4ZjNlNzBkYzA0YTNhODNhNjk5YWEwMzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84M2ZiYzVhZS0zZGYxLTQwNmItYjRhOS02YzM5
ZmRjMjk1NzMvOTIxMDdmMzJmNzUxMmZmN2M4NjI5ZTMyYzE1OGVlZDQyZmM1ZjZh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqr2ZDANBgkqhkiG9w0BAQsFAAOCAQEAI729zSZ9GEtowFEn
14rpxTPRYxX5J/3HkHH0089tVcJEi/rbvB8jB/6gZYnPCyHFjju3bC7+Bez9dCZY
io8WlxZZxJyytEr0B0hZrjq1RCqN5aKQjSdYReNW83L8w8WvKWO/JxN48M7ql47h
Bgyc8A1iUBb88IY8NjwC3XPrWWdq9pOWXeHU4cfJVZIM86SwmEgI+DdSQ/xnPZBd
SzGHCGU96r+YYglJCMcv7afPtIoVqpj6XCOWHSwtki2ijrh/c5q1prUssQPMN9m6
5XIhD88A79cefQpkpSwKUWsZXW3ZQeTdP+pPm+bQOlLdhGRkEZCZBRoA7nI0EsKi
KbDKCg==
-----END CERTIFICATE-----