Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ade9823-155a-4d28-a290-701014f0dfab/217698d341112f55fa9b371f9b2e24614f93e5a4.roa
File:                     217698d341112f55fa9b371f9b2e24614f93e5a4.roa (raw, json)
Hash identifier:          ENISxdWwAEZOjkvLu7RGNAjW8h+57Bwnri+cL2i9H/o=
Subject key identifier:   9B:4E:CE:BE:C6:AE:BD:A9:A2:2D:DF:2A:B5:F5:1F:FE:EF:84:4C:C5
Certificate issuer:       /CN=78ce920229a719aff4086516467be9df09055d5b
Certificate serial:       0D16D3
Authority key identifier: D5:92:46:AB:EC:C9:8F:BC:65:00:78:CE:38:C2:04:7C:72:40:C5:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78ce920229a719aff4086516467be9df09055d5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ade9823-155a-4d28-a290-701014f0dfab/217698d341112f55fa9b371f9b2e24614f93e5a4.roa
Signing time:             Wed 24 Mar 2021 14:37:12 +0000
ROA not before:           Wed 24 Mar 2021 14:37:10 +0000
ROA not after:            Tue 24 Mar 2026 14:37:10 +0000
asID:                     61464
IP address blocks:        201.131.37.0/24 maxlen: 24
                          2801:16:a000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857811 (0xd16d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ce920229a719aff4086516467be9df09055d5b
        Validity
            Not Before: Mar 24 14:37:10 2021 GMT
            Not After : Mar 24 14:37:10 2026 GMT
        Subject: CN=217698d341112f55fa9b371f9b2e24614f93e5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9e:2f:07:8a:90:a7:ed:2d:c0:cd:79:fb:51:
                    5d:40:b6:53:52:32:9d:85:28:28:0f:ec:a9:9f:89:
                    6a:ee:f9:e2:56:ee:22:e6:a5:36:48:11:bc:98:c3:
                    28:1b:61:d8:a8:8d:af:15:33:06:65:4f:09:28:0d:
                    13:e5:0a:ee:e0:63:66:2b:5b:51:28:78:78:63:5a:
                    9a:eb:d6:12:3e:c6:e6:e0:53:39:fd:20:a1:b1:f5:
                    d6:67:76:0c:88:59:88:6b:d8:68:36:7f:94:36:68:
                    a9:a4:08:56:d2:ba:3f:87:b3:57:9c:d9:62:27:99:
                    c5:61:4f:23:d9:93:38:1d:a0:59:28:80:ad:7d:64:
                    e5:c1:17:35:0e:a3:82:0c:24:7a:ff:63:29:3e:fd:
                    4b:cf:87:fa:80:4c:04:14:8e:b7:bd:57:56:e1:4c:
                    a2:6b:40:ba:6c:dd:75:22:c7:1d:b3:8f:d1:6f:04:
                    c3:21:48:c6:f5:0a:53:18:9f:ad:79:ab:3b:fa:ef:
                    c0:e4:e9:c6:91:5b:1e:eb:36:a4:c0:c2:ee:62:e2:
                    12:3d:fb:ba:01:9d:fe:63:ad:4a:1f:80:75:10:82:
                    39:c4:ec:a3:99:52:32:f4:4d:46:a5:e0:d0:b3:c9:
                    55:b6:eb:c4:b7:af:8f:30:d0:b0:6e:82:f8:22:9f:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4E:CE:BE:C6:AE:BD:A9:A2:2D:DF:2A:B5:F5:1F:FE:EF:84:4C:C5
            X509v3 Authority Key Identifier:
                keyid:D5:92:46:AB:EC:C9:8F:BC:65:00:78:CE:38:C2:04:7C:72:40:C5:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78ce920229a719aff4086516467be9df09055d5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ade9823-155a-4d28-a290-701014f0dfab/217698d341112f55fa9b371f9b2e24614f93e5a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ade9823-155a-4d28-a290-701014f0dfab/78ce920229a719aff4086516467be9df09055d5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.37.0/24
                IPv6:
                  2801:16:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:2a:31:42:0b:68:d8:19:98:71:89:9e:c3:c6:7e:95:b6:96:
         4c:f2:d5:f7:89:de:00:56:e2:5c:63:cc:59:d1:aa:5b:28:e8:
         47:88:5a:2b:3f:48:6e:91:e3:3d:79:a3:b1:46:61:3e:2a:d5:
         ee:64:c4:94:63:86:54:92:e4:4b:9b:a6:fb:a1:e7:66:c9:d0:
         08:07:e2:38:4e:de:3a:7a:e1:60:48:2e:a8:a5:45:79:a6:e0:
         c8:ac:76:01:87:05:13:47:f3:6e:b7:01:51:3c:b9:4b:cb:5b:
         fd:f7:2b:40:c5:aa:45:41:25:57:ae:b4:59:5a:6f:e8:29:30:
         5e:ce:6c:af:af:69:4d:fd:2c:99:25:8e:0a:3a:69:20:82:b6:
         ac:24:14:10:4c:c0:17:65:93:59:8b:ee:96:16:73:76:26:27:
         dd:06:6e:4d:e8:75:97:d7:30:b3:83:52:c2:34:e4:75:53:77:
         71:d6:b2:9d:0c:8f:4f:19:8d:bc:d6:2c:46:50:d4:93:05:af:
         ee:fa:2e:cd:87:f7:85:3f:d1:ea:ac:25:78:56:ee:66:3a:fb:
         32:29:b6:21:a7:df:26:00:0d:ab:b8:62:8d:1c:c1:27:c7:0c:
         0b:ee:ee:b0:71:72:2e:62:49:a8:43:24:36:49:16:1e:6f:96:
         55:b1:15:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----