Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/ef871e80d0c8022a6b2df6a0c564bca277bfa251.roa
File:                     ef871e80d0c8022a6b2df6a0c564bca277bfa251.roa (raw, json)
Hash identifier:          bXFhBtdWcA2YdsYADP5aATuGipAUyJ4/fP6HccUXlB0=
Subject key identifier:   06:8C:84:F5:BD:86:2F:E3:5F:80:4B:A0:47:FF:FE:4F:16:F6:BF:9C
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       1C6556
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/ef871e80d0c8022a6b2df6a0c564bca277bfa251.roa
Signing time:             Fri 17 Mar 2023 15:39:01 +0000
ROA not before:           Tue 23 Mar 2021 14:34:12 +0000
ROA not after:            Tue 24 Mar 2026 14:34:12 +0000
asID:                     264724
IP address blocks:        146.83.81.0/24 maxlen: 24
                          2001:1310:7161::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860950 (0x1c6556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: Mar 23 14:34:12 2021 GMT
            Not After : Mar 24 14:34:12 2026 GMT
        Subject: CN=ef871e80d0c8022a6b2df6a0c564bca277bfa251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:7d:06:48:43:c4:29:c1:58:13:f0:35:3d:
                    8a:4e:23:ba:c0:02:97:1b:8b:9d:16:9d:75:bc:f8:
                    77:e3:01:4b:1b:1c:43:f0:ac:0e:ae:f8:8c:02:50:
                    57:98:a6:c6:15:93:59:9d:ce:75:0e:5c:78:6f:f0:
                    be:2c:69:6c:cc:c0:1f:f1:39:b9:04:d0:fb:2a:e4:
                    3d:61:97:57:5a:cd:b1:60:dc:ea:05:d6:a5:57:df:
                    48:18:91:ae:f0:7a:d0:a9:19:7f:d4:88:fb:e7:20:
                    ef:cb:91:58:2a:fa:2e:c8:99:7a:89:69:d5:8d:19:
                    08:2f:16:bb:09:be:7e:8e:2e:1e:28:54:0b:e4:67:
                    aa:57:f6:db:46:ec:a9:a0:e3:dd:25:11:25:c1:77:
                    81:36:74:18:a2:a2:36:28:f9:f6:37:2a:17:29:00:
                    a6:c1:d1:9e:df:5a:3b:45:f8:f7:58:26:6d:8b:d2:
                    b5:c9:ef:96:9a:54:e9:ab:75:36:7f:68:25:e3:ed:
                    91:e7:21:d3:b7:a1:ff:71:07:18:1e:ab:43:47:40:
                    42:c6:b9:4d:cb:92:8e:95:6c:a4:6e:34:b2:ef:3a:
                    ca:d2:57:89:60:09:36:76:e9:6f:e8:eb:21:f3:d6:
                    24:17:04:50:5f:17:1f:13:34:a0:12:6e:7a:0a:9a:
                    0f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8C:84:F5:BD:86:2F:E3:5F:80:4B:A0:47:FF:FE:4F:16:F6:BF:9C
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/ef871e80d0c8022a6b2df6a0c564bca277bfa251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.81.0/24
                IPv6:
                  2001:1310:7161::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:35:bc:d5:ee:ac:6c:bf:7c:df:b6:96:74:80:ea:62:c2:3d:
         c4:3a:09:74:2e:b1:a0:41:55:e7:b2:8b:40:cb:a8:88:cb:af:
         6c:4c:18:b1:2d:27:9d:18:cf:a2:5d:30:08:c7:ce:ec:05:7c:
         f8:89:ca:ed:b5:88:07:37:8c:d1:79:ba:ac:7d:cd:da:35:d4:
         b0:d2:7b:e3:d6:a7:23:9a:c6:9d:ba:05:35:90:d9:fa:4c:d7:
         24:11:c4:6b:0a:53:44:75:b2:c0:3d:53:11:6a:e4:a2:df:03:
         48:76:80:55:80:dc:ac:f2:e4:f7:17:18:4b:c8:ed:e2:49:43:
         f7:6f:8e:e8:81:b6:fc:63:09:4d:62:f1:4e:2a:67:a1:df:d7:
         75:7e:15:0a:cb:8c:37:cb:c8:23:78:21:7c:7d:9a:61:f1:92:
         d7:cb:3c:36:5e:d5:90:74:e5:7f:ed:a6:88:d1:d8:08:35:e4:
         8e:93:d0:a7:82:17:e2:ba:c4:81:5b:b9:1d:b2:0c:a5:30:d5:
         92:da:94:08:e9:06:be:bb:5f:62:71:01:8e:be:07:e7:7c:d0:
         78:f3:29:e6:f0:a2:b1:19:df:72:85:65:a3:7a:7b:12:fb:75:
         f0:0c:e9:cd:17:ea:57:ea:c4:28:dc:7b:84:55:45:1b:1e:d9:
         74:87:b4:00
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDHGVWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ4
OTQ3NDMzZWIwMDNlMWEwNzFmNGZmZjVkZWI5NmM4N2E2OTE5YTMwHhcNMjEwMzIz
MTQzNDEyWhcNMjYwMzI0MTQzNDEyWjAzMTEwLwYDVQQDEyhlZjg3MWU4MGQwYzgw
MjJhNmIyZGY2YTBjNTY0YmNhMjc3YmZhMjUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwM59BkhDxCnBWBPwNT2KTiO6wAKXG4udFp11vPh34wFLGxxD
8KwOrviMAlBXmKbGFZNZnc51Dlx4b/C+LGlszMAf8Tm5BND7KuQ9YZdXWs2xYNzq
BdalV99IGJGu8HrQqRl/1Ij75yDvy5FYKvouyJl6iWnVjRkILxa7Cb5+ji4eKFQL
5GeqV/bbRuypoOPdJRElwXeBNnQYoqI2KPn2NyoXKQCmwdGe31o7Rfj3WCZti9K1
ye+WmlTpq3U2f2gl4+2R5yHTt6H/cQcYHqtDR0BCxrlNy5KOlWykbjSy7zrK0leJ
YAk2dulv6Osh89YkFwRQXxcfEzSgEm56CpoPhwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFAaMhPW9hi/jX4BLoEf//k8W9r+cMB8GA1UdIwQYMBaAFP/GevltUSfkhYg5
guW1CgwIY7aCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDg5NDc0
MzNlYjAwM2UxYTA3MWY0ZmZmNWRlYjk2Yzg3YTY5MTlhMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTQ5M2I0MDgtNWFjMS00M2E4LTllYmUtOTk2ZDI5
OTM4ZWYyL2VmODcxZTgwZDBjODAyMmE2YjJkZjZhMGM1NjRiY2EyNzdiZmEyNTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNDkzYjQwOC01YWMxLTQzYTgtOWViZS05OTZk
Mjk5MzhlZjIvNDg5NDc0MzNlYjAwM2UxYTA3MWY0ZmZmNWRlYjk2Yzg3YTY5MTlh
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAJJTUTAPBAIAAjAJAwcAIAETEHFhMA0GCSqGSIb3DQEBCwUA
A4IBAQAkNbzV7qxsv3zftpZ0gOpiwj3EOgl0LrGgQVXnsotAy6iIy69sTBixLSed
GM+iXTAIx87sBXz4icrttYgHN4zRebqsfc3aNdSw0nvj1qcjmsadugU1kNn6TNck
EcRrClNEdbLAPVMRauSi3wNIdoBVgNys8uT3FxhLyO3iSUP3b47ogbb8YwlNYvFO
Kmeh39d1fhUKy4w3y8gjeCF8fZph8ZLXyzw2XtWQdOV/7aaI0dgINeSOk9Cnghfi
usSBW7kdsgylMNWS2pQI6Qa+u19icQGOvgfnfNB48ynm8KKxGd9yhWWjensS+3Xw
DOnNF+pX6sQo3HuEVUUbHtl0h7QA
-----END CERTIFICATE-----