Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a70b8a79-74d4-45df-a2a7-46eea00929d0/fe9ccaa2306dc3375721f8fc4c55a5abf0ec8bce.roa
File:                     fe9ccaa2306dc3375721f8fc4c55a5abf0ec8bce.roa (raw, json)
Hash identifier:          F7oLQVoFDoZBhBQrCTa58SWvFSvruqsWPohduCdtpXA=
Subject key identifier:   A1:C2:74:0F:9D:47:08:12:92:EA:FB:BA:73:83:1C:28:DB:52:85:BA
Certificate issuer:       /CN=95e6324806626d53c1d3c6b717f576adace69768
Certificate serial:       047A0F
Authority key identifier: 84:02:15:BE:FC:3A:A4:D8:62:3B:68:A3:82:E3:01:C1:16:2B:40:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95e6324806626d53c1d3c6b717f576adace69768.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a70b8a79-74d4-45df-a2a7-46eea00929d0/fe9ccaa2306dc3375721f8fc4c55a5abf0ec8bce.roa
Signing time:             Wed 24 Mar 2021 14:31:17 +0000
ROA not before:           Wed 24 Mar 2021 14:31:17 +0000
ROA not after:            Tue 24 Mar 2026 14:31:17 +0000
asID:                     266829
IP address blocks:        45.238.52.0/22 maxlen: 24
                          2803:b4a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293391 (0x47a0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e6324806626d53c1d3c6b717f576adace69768
        Validity
            Not Before: Mar 24 14:31:17 2021 GMT
            Not After : Mar 24 14:31:17 2026 GMT
        Subject: CN=fe9ccaa2306dc3375721f8fc4c55a5abf0ec8bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:9c:36:a6:f8:4a:83:54:22:02:3c:2a:fb:
                    1c:f4:63:d7:90:6a:7b:05:58:7f:85:63:11:63:c9:
                    41:74:d2:79:ea:93:74:ee:f7:34:ff:81:02:52:78:
                    6b:99:cc:c3:f0:b4:39:83:51:e2:6c:c7:1f:8f:f5:
                    4f:98:8b:e5:27:4e:a4:ff:e4:53:be:25:c0:0e:dc:
                    bc:d0:0e:28:b8:42:d5:97:ab:17:50:00:b1:d2:27:
                    49:5a:97:39:8d:35:6f:91:3c:34:30:7f:ab:1e:51:
                    85:7d:7b:af:1d:ad:1e:fa:f2:f0:f3:4d:08:5b:b0:
                    91:61:33:b4:10:fd:8a:ed:d4:d5:78:51:64:39:bd:
                    74:fc:07:fe:9d:c8:ca:4f:d3:67:95:3d:4a:73:74:
                    4e:71:ef:cc:a8:8a:7b:2f:9b:3b:33:ac:af:bd:5b:
                    8c:71:43:be:21:0b:c8:c8:a4:1d:ea:fe:a4:d9:67:
                    24:77:36:3a:9d:d4:36:48:c4:c5:61:80:46:d9:64:
                    83:58:87:cf:2e:27:33:68:37:1c:9b:43:c2:a9:61:
                    6d:e8:7c:14:8d:37:8e:ef:35:4b:ef:0b:b6:d3:d0:
                    2f:5c:72:b8:e7:4f:eb:d2:78:cb:39:0b:cd:16:55:
                    6e:b3:7d:b9:d4:8d:ab:d3:7c:cd:f2:3e:75:ef:6a:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C2:74:0F:9D:47:08:12:92:EA:FB:BA:73:83:1C:28:DB:52:85:BA
            X509v3 Authority Key Identifier:
                keyid:84:02:15:BE:FC:3A:A4:D8:62:3B:68:A3:82:E3:01:C1:16:2B:40:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95e6324806626d53c1d3c6b717f576adace69768.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a70b8a79-74d4-45df-a2a7-46eea00929d0/fe9ccaa2306dc3375721f8fc4c55a5abf0ec8bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a70b8a79-74d4-45df-a2a7-46eea00929d0/95e6324806626d53c1d3c6b717f576adace69768.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.52.0/22
                IPv6:
                  2803:b4a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:a9:84:45:08:4e:90:20:a8:4f:91:2d:68:d0:53:77:b2:d4:
         0e:41:41:71:b1:25:df:05:8b:4d:b7:af:28:50:de:50:c6:39:
         1b:2f:af:b5:54:a0:b4:fa:11:b9:a7:e2:f1:d8:81:db:d3:c9:
         4e:aa:39:4a:59:43:79:eb:db:ca:a4:ea:74:56:45:e7:c0:36:
         eb:e1:88:23:b7:e7:16:c1:59:f5:cd:a2:88:30:ab:a5:54:f2:
         d8:ef:f8:be:6c:24:26:08:d6:b3:28:20:19:bd:d4:2b:f6:35:
         00:1e:eb:b9:e3:77:d0:f8:72:28:ca:87:3e:08:38:e9:d7:3c:
         97:44:5f:80:19:27:ce:68:9e:6f:e1:fe:3f:ba:04:bd:32:6b:
         9a:75:ec:a8:8b:11:41:9d:77:15:e3:b9:a2:7a:12:26:de:2e:
         96:55:bf:38:f4:a5:f5:d5:98:f5:e3:8d:90:bc:4f:67:49:5f:
         1c:73:59:75:f7:d6:40:6d:8e:cb:fd:e6:53:a9:7c:c5:ca:da:
         8a:be:36:bb:98:cf:a5:95:f0:d0:2b:8c:b9:dd:f1:95:a2:6c:
         a8:4f:40:a0:88:a9:7c:40:0e:4c:3d:10:d5:6f:9a:10:1c:79:
         f1:ad:f5:4d:e5:93:74:b9:98:fe:73:9f:7a:a4:35:4a:dc:a8:
         22:29:5b:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBHoPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk1
ZTYzMjQ4MDY2MjZkNTNjMWQzYzZiNzE3ZjU3NmFkYWNlNjk3NjgwHhcNMjEwMzI0
MTQzMTE3WhcNMjYwMzI0MTQzMTE3WjAzMTEwLwYDVQQDEyhmZTljY2FhMjMwNmRj
MzM3NTcyMWY4ZmM0YzU1YTVhYmYwZWM4YmNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsiacNqb4SoNUIgI8Kvsc9GPXkGp7BVh/hWMRY8lBdNJ56pN0
7vc0/4ECUnhrmczD8LQ5g1HibMcfj/VPmIvlJ06k/+RTviXADty80A4ouELVl6sX
UACx0idJWpc5jTVvkTw0MH+rHlGFfXuvHa0e+vLw800IW7CRYTO0EP2K7dTVeFFk
Ob10/Af+ncjKT9NnlT1Kc3ROce/MqIp7L5s7M6yvvVuMcUO+IQvIyKQd6v6k2Wck
dzY6ndQ2SMTFYYBG2WSDWIfPLiczaDccm0PCqWFt6HwUjTeO7zVL7wu209AvXHK4
50/r0njLOQvNFlVus3251I2r03zN8j5172oxpwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFKHCdA+dRwgSkur7unODHCjbUoW6MB8GA1UdIwQYMBaAFIQCFb78OqTYYjto
o4LjAcEWK0BaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTVlNjMy
NDgwNjYyNmQ1M2MxZDNjNmI3MTdmNTc2YWRhY2U2OTc2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTcwYjhhNzktNzRkNC00NWRmLWEyYTctNDZlZWEw
MDkyOWQwL2ZlOWNjYWEyMzA2ZGMzMzc1NzIxZjhmYzRjNTVhNWFiZjBlYzhiY2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNzBiOGE3OS03NGQ0LTQ1ZGYtYTJhNy00NmVl
YTAwOTI5ZDAvOTVlNjMyNDgwNjYyNmQ1M2MxZDNjNmI3MTdmNTc2YWRhY2U2OTc2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3uNDANBAIAAjAHAwUAKAO0oDANBgkqhkiG9w0BAQsFAAOC
AQEANqmERQhOkCCoT5EtaNBTd7LUDkFBcbEl3wWLTbevKFDeUMY5Gy+vtVSgtPoR
uafi8diB29PJTqo5SllDeevbyqTqdFZF58A26+GII7fnFsFZ9c2iiDCrpVTy2O/4
vmwkJgjWsyggGb3UK/Y1AB7rueN30PhyKMqHPgg46dc8l0RfgBknzmieb+H+P7oE
vTJrmnXsqIsRQZ13FeO5onoSJt4ullW/OPSl9dWY9eONkLxPZ0lfHHNZdffWQG2O
y/3mU6l8xcrair42u5jPpZXw0CuMud3xlaJsqE9AoIipfEAOTD0Q1W+aEBx58a31
TeWTdLmY/nOfeqQ1StyoIilbAw==
-----END CERTIFICATE-----