Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6ba55e1-ae87-4e3c-9fa7-9be77dc35068/bf55bc1b72b6589b8252fee85c53638ded9a1e57.roa
File:                     bf55bc1b72b6589b8252fee85c53638ded9a1e57.roa (raw, json)
Hash identifier:          NV8DtQOv15UJ9426IrJouMKPtU+usxC4Tp8YXUttF9U=
Subject key identifier:   4F:55:4B:3A:7C:93:B9:C9:C8:77:97:43:8E:39:38:43:D3:B0:AC:0E
Certificate issuer:       /CN=2d7ca63c865258600a0c7a90dd457403deaf58ae
Certificate serial:       0D179A
Authority key identifier: 03:5F:D8:5D:7E:3D:12:69:F8:D8:51:61:01:B7:98:B6:3B:BC:9A:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d7ca63c865258600a0c7a90dd457403deaf58ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6ba55e1-ae87-4e3c-9fa7-9be77dc35068/bf55bc1b72b6589b8252fee85c53638ded9a1e57.roa
Signing time:             Wed 24 Mar 2021 14:30:46 +0000
ROA not before:           Wed 24 Mar 2021 14:30:46 +0000
ROA not after:            Tue 24 Mar 2026 14:30:46 +0000
asID:                     266700
IP address blocks:        45.230.20.0/24 maxlen: 24
                          2801:15:b000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858010 (0xd179a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d7ca63c865258600a0c7a90dd457403deaf58ae
        Validity
            Not Before: Mar 24 14:30:46 2021 GMT
            Not After : Mar 24 14:30:46 2026 GMT
        Subject: CN=bf55bc1b72b6589b8252fee85c53638ded9a1e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b4:d5:86:90:36:ab:38:91:f4:b8:13:ac:98:
                    23:3d:d6:db:38:c2:ee:c6:90:08:54:a8:e3:7d:35:
                    20:64:74:2f:76:ff:69:40:f3:4c:eb:3c:8b:b8:3d:
                    a0:af:56:86:eb:b1:6a:5c:db:8e:be:49:34:5e:86:
                    b1:2a:d2:81:14:d1:42:d4:15:e2:7b:9c:c9:5b:54:
                    10:3d:fb:8c:f2:8c:39:26:a1:aa:b7:6d:3f:ca:0f:
                    ce:0d:5d:58:43:30:37:e3:15:7d:b1:ba:92:27:3f:
                    c6:e0:69:5d:08:2e:dd:31:f0:24:d0:2b:bf:5b:a6:
                    d5:cf:d2:41:12:10:12:c3:9d:77:57:6e:bc:eb:bd:
                    29:7e:ae:f5:42:d9:35:7c:9b:fd:3b:dc:2e:a3:8a:
                    7c:26:7a:17:a5:7a:6a:2e:6a:76:f1:68:fb:c1:4e:
                    5f:0c:8c:d7:1a:67:83:fa:74:dd:b7:03:d2:ef:ac:
                    bc:48:aa:77:ff:a4:a1:e5:39:18:dc:0e:c3:63:ae:
                    cb:6e:58:a8:6c:2e:d6:09:5b:af:08:37:f1:d0:7d:
                    1d:6b:9b:7b:53:a8:65:25:6d:4c:ad:19:5c:4a:24:
                    de:f9:34:db:f9:91:dd:12:e1:5e:29:89:27:46:d3:
                    9d:64:7f:aa:50:fe:82:c1:cb:0e:63:93:ab:cd:11:
                    d6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:55:4B:3A:7C:93:B9:C9:C8:77:97:43:8E:39:38:43:D3:B0:AC:0E
            X509v3 Authority Key Identifier:
                keyid:03:5F:D8:5D:7E:3D:12:69:F8:D8:51:61:01:B7:98:B6:3B:BC:9A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d7ca63c865258600a0c7a90dd457403deaf58ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6ba55e1-ae87-4e3c-9fa7-9be77dc35068/bf55bc1b72b6589b8252fee85c53638ded9a1e57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6ba55e1-ae87-4e3c-9fa7-9be77dc35068/2d7ca63c865258600a0c7a90dd457403deaf58ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.20.0/24
                IPv6:
                  2801:15:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:52:84:0f:33:98:59:ef:02:38:92:09:6b:83:b0:9e:4e:ac:
         14:3e:b6:9c:9e:eb:9c:25:65:cb:79:ac:29:37:df:fa:f8:2a:
         e9:7b:ab:8d:c9:19:47:a4:8d:43:c8:f7:ed:06:f7:d7:7e:87:
         55:38:7c:b9:75:91:19:2e:21:79:02:16:66:f7:19:46:ec:ac:
         48:da:db:ad:cd:97:ed:09:72:4c:20:9c:b4:eb:b7:94:bc:b2:
         7f:b7:e1:89:e5:34:bc:80:06:46:dc:65:73:c3:ba:bf:a2:55:
         63:52:2a:8c:80:78:a9:12:ab:7c:ec:9d:85:37:55:75:74:5c:
         de:da:44:50:39:48:f0:f0:57:0c:51:3b:e1:d2:a2:e2:84:95:
         0b:85:d2:d3:aa:b3:42:58:14:7a:f5:8c:22:e0:c2:b5:b7:02:
         ee:89:f8:10:78:1f:49:b6:ea:55:a8:7f:e5:0b:12:10:83:2f:
         b8:36:c2:82:f0:94:d0:1a:02:12:ec:11:ba:6e:0e:be:bf:2b:
         7d:60:79:fd:0d:a5:53:79:01:2c:1b:3c:40:25:c2:76:62:32:
         d5:0f:d5:4c:27:2a:e7:99:ab:60:54:02:18:6d:91:07:a6:e6:
         17:08:1c:27:ef:59:ac:a9:4b:1c:16:d5:4f:05:d7:10:63:26:
         13:e8:9b:3e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDDReaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJk
N2NhNjNjODY1MjU4NjAwYTBjN2E5MGRkNDU3NDAzZGVhZjU4YWUwHhcNMjEwMzI0
MTQzMDQ2WhcNMjYwMzI0MTQzMDQ2WjAzMTEwLwYDVQQDEyhiZjU1YmMxYjcyYjY1
ODliODI1MmZlZTg1YzUzNjM4ZGVkOWExZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6rTVhpA2qziR9LgTrJgjPdbbOMLuxpAIVKjjfTUgZHQvdv9p
QPNM6zyLuD2gr1aG67FqXNuOvkk0XoaxKtKBFNFC1BXie5zJW1QQPfuM8ow5JqGq
t20/yg/ODV1YQzA34xV9sbqSJz/G4GldCC7dMfAk0Cu/W6bVz9JBEhASw513V268
670pfq71Qtk1fJv9O9wuo4p8JnoXpXpqLmp28Wj7wU5fDIzXGmeD+nTdtwPS76y8
SKp3/6Sh5TkY3A7DY67LbliobC7WCVuvCDfx0H0da5t7U6hlJW1MrRlcSiTe+TTb
+ZHdEuFeKYknRtOdZH+qUP6CwcsOY5OrzRHWIQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFE9VSzp8k7nJyHeXQ445OEPTsKwOMB8GA1UdIwQYMBaAFANf2F1+PRJp+NhR
YQG3mLY7vJqBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmQ3Y2E2
M2M4NjUyNTg2MDBhMGM3YTkwZGQ0NTc0MDNkZWFmNThhZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTZiYTU1ZTEtYWU4Ny00ZTNjLTlmYTctOWJlNzdk
YzM1MDY4L2JmNTViYzFiNzJiNjU4OWI4MjUyZmVlODVjNTM2MzhkZWQ5YTFlNTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNmJhNTVlMS1hZTg3LTRlM2MtOWZhNy05YmU3
N2RjMzUwNjgvMmQ3Y2E2M2M4NjUyNTg2MDBhMGM3YTkwZGQ0NTc0MDNkZWFmNThh
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAC3mFDAPBAIAAjAJAwcAKAEAFbAAMA0GCSqGSIb3DQEBCwUA
A4IBAQCOUoQPM5hZ7wI4kglrg7CeTqwUPracnuucJWXLeawpN9/6+Crpe6uNyRlH
pI1DyPftBvfXfodVOHy5dZEZLiF5AhZm9xlG7KxI2tutzZftCXJMIJy067eUvLJ/
t+GJ5TS8gAZG3GVzw7q/olVjUiqMgHipEqt87J2FN1V1dFze2kRQOUjw8FcMUTvh
0qLihJULhdLTqrNCWBR69Ywi4MK1twLuifgQeB9JtupVqH/lCxIQgy+4NsKC8JTQ
GgIS7BG6bg6+vyt9YHn9DaVTeQEsGzxAJcJ2YjLVD9VMJyrnmatgVAIYbZEHpuYX
CBwn71msqUscFtVPBdcQYyYT6Js+
-----END CERTIFICATE-----