Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85e8fc88-b71e-4c4a-b381-6eb625e146bf/5ae8f75ee972cda9983d9475c1f429ae3833a507.roa
File:                     5ae8f75ee972cda9983d9475c1f429ae3833a507.roa (raw, json)
Hash identifier:          3ntsG0SVtdFfEiKZWHvp8nbADnTl1WchZDdRykR9e4o=
Subject key identifier:   80:D1:BC:05:39:06:2C:78:AC:9C:5E:40:AF:03:F0:5E:4C:8E:9D:A0
Certificate issuer:       /CN=47e3dd0bed737f9d8626e504eca46267a679fc8d
Certificate serial:       0D99AA
Authority key identifier: 53:18:6C:01:C2:A4:43:AB:BD:CA:51:C8:CE:F6:21:89:E4:86:BE:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47e3dd0bed737f9d8626e504eca46267a679fc8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/85e8fc88-b71e-4c4a-b381-6eb625e146bf/5ae8f75ee972cda9983d9475c1f429ae3833a507.roa
Signing time:             Wed 24 Mar 2021 14:42:04 +0000
ROA not before:           Wed 24 Mar 2021 14:42:04 +0000
ROA not after:            Tue 24 Mar 2026 14:42:04 +0000
asID:                     263714
IP address blocks:        201.131.73.0/24 maxlen: 24
                          2801:13:6000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891306 (0xd99aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e3dd0bed737f9d8626e504eca46267a679fc8d
        Validity
            Not Before: Mar 24 14:42:04 2021 GMT
            Not After : Mar 24 14:42:04 2026 GMT
        Subject: CN=5ae8f75ee972cda9983d9475c1f429ae3833a507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:69:04:41:ba:91:cf:d2:df:4e:86:0e:17:
                    e1:5d:23:39:cb:a2:e5:3b:0d:d4:ad:57:43:d2:71:
                    69:8e:ed:48:99:8a:93:78:7c:28:58:49:eb:f9:23:
                    36:cc:c0:89:fc:c5:64:17:49:e1:17:4b:88:72:2d:
                    ed:34:4a:9c:74:44:88:49:35:b5:bb:fe:dc:ab:6a:
                    77:3e:a0:c2:49:40:d3:7e:e0:99:3e:87:d3:96:1e:
                    cb:5c:74:cc:c2:de:2e:e2:7b:a5:04:53:78:df:d5:
                    d8:c2:22:7e:71:5e:97:13:74:60:23:1e:40:7a:8f:
                    5b:d8:da:24:7b:8f:b4:6d:39:77:bf:45:8c:57:12:
                    5b:9c:bc:cd:b9:82:28:4b:88:52:20:79:a8:5f:5e:
                    cb:93:d7:23:5a:37:dc:0a:0a:a2:4c:18:42:5d:c0:
                    6c:41:49:34:cd:c9:07:0b:bb:bf:76:ba:6a:31:12:
                    be:b5:8c:63:77:d9:68:0b:23:f9:e3:f8:55:cf:0d:
                    f0:52:6e:76:56:a5:a9:da:a8:92:8d:99:91:eb:16:
                    6b:6a:4c:01:73:50:d9:12:e3:b9:cb:16:0c:e7:51:
                    a4:f2:5a:85:97:ef:cf:ce:e7:35:34:c1:d7:bb:87:
                    54:20:ec:02:0a:2b:db:f5:ce:ed:65:6b:b7:06:1d:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D1:BC:05:39:06:2C:78:AC:9C:5E:40:AF:03:F0:5E:4C:8E:9D:A0
            X509v3 Authority Key Identifier:
                keyid:53:18:6C:01:C2:A4:43:AB:BD:CA:51:C8:CE:F6:21:89:E4:86:BE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47e3dd0bed737f9d8626e504eca46267a679fc8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85e8fc88-b71e-4c4a-b381-6eb625e146bf/5ae8f75ee972cda9983d9475c1f429ae3833a507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/85e8fc88-b71e-4c4a-b381-6eb625e146bf/47e3dd0bed737f9d8626e504eca46267a679fc8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.73.0/24
                IPv6:
                  2801:13:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:0b:3c:f1:86:b1:c0:7f:1e:0a:70:f7:38:3c:be:bc:5b:7b:
         b2:dc:64:6b:05:7f:58:56:c5:1f:d6:05:78:7c:67:07:54:b1:
         fd:58:c3:59:23:0b:b2:d2:e5:0e:fd:45:4e:d3:a0:d8:a3:d6:
         11:fb:64:91:c8:d3:3c:28:30:1f:86:bb:34:ca:22:89:a2:a1:
         76:1c:9a:55:d3:54:4d:e8:ad:bb:fb:7b:88:7e:c0:50:15:5e:
         17:b9:a2:b1:a8:e9:0d:53:93:48:39:15:55:2a:d2:30:04:aa:
         9c:f8:dd:33:4d:97:83:02:74:3e:27:ac:b1:7b:db:e0:c7:ee:
         19:26:31:78:94:64:f8:e1:04:5f:bd:5e:b2:70:10:62:95:67:
         d2:c6:03:17:f7:ee:b4:87:07:e6:f2:93:7f:75:9f:ae:c0:32:
         a6:f0:de:6c:d5:82:35:b4:f2:09:2a:47:f9:07:21:68:b4:9f:
         da:c0:7c:83:b5:7b:2c:43:6c:4b:a0:9c:00:f3:26:3a:f9:1b:
         40:cc:27:a0:6a:91:b1:07:95:18:c8:77:c7:8a:e9:e8:c0:f4:
         18:7c:d7:11:c2:75:c2:14:51:03:27:55:90:21:c1:59:e6:15:
         90:de:4c:66:76:da:f3:52:7d:22:8d:d9:f2:98:cd:7e:85:0b:
         ac:13:9b:a2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDDZmqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
ZTNkZDBiZWQ3MzdmOWQ4NjI2ZTUwNGVjYTQ2MjY3YTY3OWZjOGQwHhcNMjEwMzI0
MTQ0MjA0WhcNMjYwMzI0MTQ0MjA0WjAzMTEwLwYDVQQDEyg1YWU4Zjc1ZWU5NzJj
ZGE5OTgzZDk0NzVjMWY0MjlhZTM4MzNhNTA3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo1tpBEG6kc/S306GDhfhXSM5y6LlOw3UrVdD0nFpju1ImYqT
eHwoWEnr+SM2zMCJ/MVkF0nhF0uIci3tNEqcdESISTW1u/7cq2p3PqDCSUDTfuCZ
PofTlh7LXHTMwt4u4nulBFN439XYwiJ+cV6XE3RgIx5Aeo9b2Noke4+0bTl3v0WM
VxJbnLzNuYIoS4hSIHmoX17Lk9cjWjfcCgqiTBhCXcBsQUk0zckHC7u/drpqMRK+
tYxjd9loCyP54/hVzw3wUm52VqWp2qiSjZmR6xZrakwBc1DZEuO5yxYM51Gk8lqF
l+/Pzuc1NMHXu4dUIOwCCivb9c7tZWu3Bh0bqQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFIDRvAU5Bix4rJxeQK8D8F5Mjp2gMB8GA1UdIwQYMBaAFFMYbAHCpEOrvcpR
yM72IYnkhr5mMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDdlM2Rk
MGJlZDczN2Y5ZDg2MjZlNTA0ZWNhNDYyNjdhNjc5ZmM4ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODVlOGZjODgtYjcxZS00YzRhLWIzODEtNmViNjI1
ZTE0NmJmLzVhZThmNzVlZTk3MmNkYTk5ODNkOTQ3NWMxZjQyOWFlMzgzM2E1MDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NWU4ZmM4OC1iNzFlLTRjNGEtYjM4MS02ZWI2
MjVlMTQ2YmYvNDdlM2RkMGJlZDczN2Y5ZDg2MjZlNTA0ZWNhNDYyNjdhNjc5ZmM4
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAMmDSTAPBAIAAjAJAwcAKAEAE2AAMA0GCSqGSIb3DQEBCwUA
A4IBAQBECzzxhrHAfx4KcPc4PL68W3uy3GRrBX9YVsUf1gV4fGcHVLH9WMNZIwuy
0uUO/UVO06DYo9YR+2SRyNM8KDAfhrs0yiKJoqF2HJpV01RN6K27+3uIfsBQFV4X
uaKxqOkNU5NIORVVKtIwBKqc+N0zTZeDAnQ+J6yxe9vgx+4ZJjF4lGT44QRfvV6y
cBBilWfSxgMX9+60hwfm8pN/dZ+uwDKm8N5s1YI1tPIJKkf5ByFotJ/awHyDtXss
Q2xLoJwA8yY6+RtAzCegapGxB5UYyHfHiunowPQYfNcRwnXCFFEDJ1WQIcFZ5hWQ
3kxmdtrzUn0ijdnymM1+hQusE5ui
-----END CERTIFICATE-----