Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93fc7048-6005-4494-9d5f-08c026a9fc9c/148c1e5306d0c4171191328df755ee54aa9ba212.roa
File:                     148c1e5306d0c4171191328df755ee54aa9ba212.roa (raw, json)
Hash identifier:          KyYN8jEisZVnCmqojNlIaW99ZyJ90duKJkafo8E/UuE=
Subject key identifier:   D2:49:2E:1E:2F:ED:AF:C2:FC:FB:2D:35:C7:BD:B3:C0:0E:82:A1:75
Certificate issuer:       /CN=fbb725da2eefb2563dff5aa4b39678675020bce6
Certificate serial:       0D4F62
Authority key identifier: 2E:4D:5C:20:16:58:92:DE:B0:02:4C:A0:E4:D8:A5:AD:FD:68:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbb725da2eefb2563dff5aa4b39678675020bce6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93fc7048-6005-4494-9d5f-08c026a9fc9c/148c1e5306d0c4171191328df755ee54aa9ba212.roa
Signing time:             Wed 24 Mar 2021 14:42:01 +0000
ROA not before:           Wed 24 Mar 2021 14:42:01 +0000
ROA not after:            Tue 24 Mar 2026 14:42:01 +0000
asID:                     265684
IP address blocks:        2803:e1c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872290 (0xd4f62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb725da2eefb2563dff5aa4b39678675020bce6
        Validity
            Not Before: Mar 24 14:42:01 2021 GMT
            Not After : Mar 24 14:42:01 2026 GMT
        Subject: CN=148c1e5306d0c4171191328df755ee54aa9ba212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a3:71:a8:94:b0:1b:de:b2:2f:9a:10:b8:46:
                    cf:53:6b:df:88:b1:87:9a:0b:48:f6:56:20:6b:43:
                    02:26:ea:06:1a:48:0d:b3:a4:05:b9:f5:bb:ec:d6:
                    22:37:67:a7:1b:e4:ed:c5:9f:dd:74:f9:27:ae:64:
                    f5:d8:77:4e:18:d3:bf:f3:36:c1:e0:45:ba:fb:db:
                    14:01:c0:54:61:c7:2b:33:5b:80:f8:2a:3a:b6:f3:
                    40:8a:7d:a4:29:ae:fc:a2:e9:50:4f:7b:3f:b3:1b:
                    55:12:fc:1c:ed:07:42:63:f8:c5:c1:ab:c6:02:9a:
                    74:1a:99:93:f3:25:40:81:7d:c2:1b:ed:22:5c:bd:
                    33:dd:27:b4:09:38:ce:c8:86:9c:a0:6f:0d:0a:2d:
                    11:d4:48:48:27:5c:86:74:65:d1:82:a9:00:1d:7f:
                    6d:23:19:07:3b:89:65:d8:9c:46:3e:78:9f:17:1f:
                    72:94:10:fe:52:47:bd:fe:bc:54:26:16:e3:92:95:
                    8d:37:65:df:04:41:5f:f2:8b:6d:06:00:83:3b:54:
                    b0:dc:d1:02:b1:ae:79:4f:e6:87:61:c3:d2:e8:aa:
                    98:ce:ca:db:41:54:b3:e7:11:cf:dc:52:d3:d0:13:
                    28:90:2b:92:83:ad:8a:99:08:59:54:52:8e:2e:4f:
                    c5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:49:2E:1E:2F:ED:AF:C2:FC:FB:2D:35:C7:BD:B3:C0:0E:82:A1:75
            X509v3 Authority Key Identifier:
                keyid:2E:4D:5C:20:16:58:92:DE:B0:02:4C:A0:E4:D8:A5:AD:FD:68:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbb725da2eefb2563dff5aa4b39678675020bce6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93fc7048-6005-4494-9d5f-08c026a9fc9c/148c1e5306d0c4171191328df755ee54aa9ba212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93fc7048-6005-4494-9d5f-08c026a9fc9c/fbb725da2eefb2563dff5aa4b39678675020bce6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:dc:2c:7b:21:da:d6:e6:e4:c1:df:99:d4:c7:7a:71:01:8e:
         d5:9d:b2:04:4c:b0:ec:3f:65:5a:26:28:04:68:3e:aa:6d:3b:
         be:d8:c0:57:a3:d7:1b:c8:e3:5d:59:9c:cc:81:31:cd:f3:6a:
         30:d1:07:65:44:cf:8a:5f:fd:c7:31:4f:89:74:ac:e1:d5:49:
         d8:6e:31:5e:34:23:f4:dd:24:e6:67:81:37:af:d8:bb:bd:61:
         4d:63:f1:66:ff:11:71:7a:67:1f:9e:43:e4:33:dd:7b:27:c8:
         b7:80:f0:f2:fa:25:d8:80:de:f4:93:62:cc:34:50:25:e0:05:
         7c:4e:15:d6:6b:d3:21:77:c8:27:6d:c5:63:f8:98:17:80:c7:
         41:84:63:ef:21:07:fe:f3:67:fc:b2:ec:0c:b3:8d:b2:f5:62:
         68:c8:6d:e9:4f:8c:3a:2a:38:c8:b9:d9:01:31:a3:fd:34:16:
         2d:ba:a3:5b:1a:12:3f:55:30:36:1f:c8:49:2d:15:ab:16:3f:
         0a:be:78:85:53:ed:e5:e5:b1:5b:2c:5b:da:be:78:2c:7c:6f:
         88:10:84:98:4a:92:55:f9:b2:fa:3a:73:da:4a:ac:2b:92:9a:
         20:59:ce:7d:0f:97:74:12:37:e4:95:12:17:9f:75:98:4a:ae:
         48:27:36:b0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDU9iMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZi
YjcyNWRhMmVlZmIyNTYzZGZmNWFhNGIzOTY3ODY3NTAyMGJjZTYwHhcNMjEwMzI0
MTQ0MjAxWhcNMjYwMzI0MTQ0MjAxWjAzMTEwLwYDVQQDEygxNDhjMWU1MzA2ZDBj
NDE3MTE5MTMyOGRmNzU1ZWU1NGFhOWJhMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA8aNxqJSwG96yL5oQuEbPU2vfiLGHmgtI9lYga0MCJuoGGkgN
s6QFufW77NYiN2enG+TtxZ/ddPknrmT12HdOGNO/8zbB4EW6+9sUAcBUYccrM1uA
+Co6tvNAin2kKa78oulQT3s/sxtVEvwc7QdCY/jFwavGApp0GpmT8yVAgX3CG+0i
XL0z3Se0CTjOyIacoG8NCi0R1EhIJ1yGdGXRgqkAHX9tIxkHO4ll2JxGPnifFx9y
lBD+Uke9/rxUJhbjkpWNN2XfBEFf8ottBgCDO1Sw3NECsa55T+aHYcPS6KqYzsrb
QVSz5xHP3FLT0BMokCuSg62KmQhZVFKOLk/FeQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFNJJLh4v7a/C/PstNce9s8AOgqF1MB8GA1UdIwQYMBaAFC5NXCAWWJLesAJM
oOTYpa39aDVNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmJiNzI1
ZGEyZWVmYjI1NjNkZmY1YWE0YjM5Njc4Njc1MDIwYmNlNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTNmYzcwNDgtNjAwNS00NDk0LTlkNWYtMDhjMDI2
YTlmYzljLzE0OGMxZTUzMDZkMGM0MTcxMTkxMzI4ZGY3NTVlZTU0YWE5YmEyMTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85M2ZjNzA0OC02MDA1LTQ0OTQtOWQ1Zi0wOGMw
MjZhOWZjOWMvZmJiNzI1ZGEyZWVmYjI1NjNkZmY1YWE0YjM5Njc4Njc1MDIwYmNl
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD4cAwDQYJKoZIhvcNAQELBQADggEBAIzcLHsh2tbm5MHf
mdTHenEBjtWdsgRMsOw/ZVomKARoPqptO77YwFej1xvI411ZnMyBMc3zajDRB2VE
z4pf/ccxT4l0rOHVSdhuMV40I/TdJOZngTev2Lu9YU1j8Wb/EXF6Zx+eQ+Qz3Xsn
yLeA8PL6JdiA3vSTYsw0UCXgBXxOFdZr0yF3yCdtxWP4mBeAx0GEY+8hB/7zZ/yy
7AyzjbL1YmjIbelPjDoqOMi52QExo/00Fi26o1saEj9VMDYfyEktFasWPwq+eIVT
7eXlsVssW9q+eCx8b4gQhJhKklX5svo6c9pKrCuSmiBZzn0Pl3QSN+SVEhefdZhK
rkgnNrA=
-----END CERTIFICATE-----