Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/871a340386f0499bae36e87b648b379f0d621692.roa
File:                     871a340386f0499bae36e87b648b379f0d621692.roa (raw, json)
Hash identifier:          ea6xat1sgeugneffhyseAxkYCEVrkPfj+szodeMBZtE=
Subject key identifier:   A6:D5:82:B9:55:8E:79:A9:D5:08:80:88:F3:04:3E:F9:DD:C4:53:24
Certificate issuer:       /CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
Certificate serial:       2912BD
Authority key identifier: C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/871a340386f0499bae36e87b648b379f0d621692.roa
Signing time:             Sun 31 Mar 2024 08:30:01 +0000
ROA not before:           Sun 31 Mar 2024 08:30:01 +0000
ROA not after:            Tue 31 Mar 2026 08:30:01 +0000
asID:                     11014
IP address blocks:        131.0.232.0/22 maxlen: 24
                          2803:f580::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2691773 (0x2912bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
        Validity
            Not Before: Mar 31 08:30:01 2024 GMT
            Not After : Mar 31 08:30:01 2026 GMT
        Subject: CN=871a340386f0499bae36e87b648b379f0d621692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:01:e9:85:86:71:c6:45:48:ff:a5:19:e7:6e:
                    0a:91:51:8b:e7:7d:8a:ce:93:6b:53:e0:f7:54:72:
                    b0:f9:9b:7b:c6:6d:86:3a:a3:83:ab:88:a4:89:f1:
                    c6:5e:ea:3c:14:bf:4b:d7:f6:07:69:e6:1a:53:14:
                    69:31:de:73:e8:a2:c4:95:cb:59:31:fb:fc:46:e2:
                    7a:db:86:90:b8:d0:b7:10:8b:5a:7e:99:11:b4:9a:
                    21:c6:dc:20:5a:0d:e0:3a:46:c9:38:a3:90:32:9b:
                    61:0c:0a:8e:e0:06:be:54:aa:85:8e:2e:56:21:6c:
                    12:d2:45:d5:f7:18:09:97:44:9b:3e:7f:57:76:1d:
                    13:85:18:1f:c9:49:78:0b:70:04:ab:40:31:2f:3f:
                    4f:74:1d:b4:e4:b0:4a:1d:ce:09:36:6c:12:5b:11:
                    46:39:2c:da:08:91:41:7f:25:a0:21:1e:ba:fe:22:
                    43:d8:83:69:9f:aa:87:4f:a4:a9:10:d7:cf:d4:c3:
                    00:a3:da:63:79:9d:08:d1:b2:79:e0:61:b9:a3:4f:
                    3d:c0:7a:8b:bb:01:52:65:50:f5:8e:3f:66:37:5e:
                    0f:d3:d2:e1:d9:bf:cb:8a:79:e8:c6:55:40:4e:6f:
                    98:13:53:1b:45:30:c6:9a:77:45:0b:7b:d0:42:4c:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D5:82:B9:55:8E:79:A9:D5:08:80:88:F3:04:3E:F9:DD:C4:53:24
            X509v3 Authority Key Identifier:
                keyid:C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/871a340386f0499bae36e87b648b379f0d621692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.232.0/22
                IPv6:
                  2803:f580::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:df:39:2f:db:f8:4a:1c:1a:74:a1:09:58:26:13:1d:99:c1:
         6f:ce:d1:17:0f:30:1a:2d:33:9f:23:d8:c8:29:f4:f1:0c:9d:
         c6:cf:51:4f:9b:f9:fe:89:0b:4c:90:32:48:a9:03:41:fa:07:
         c5:8c:46:5b:19:42:48:32:fc:b4:e2:fe:de:4c:d7:03:99:2a:
         d0:14:bc:5e:36:4a:1f:84:49:3e:0c:ca:86:1d:06:98:52:b3:
         69:6a:d0:8f:fc:fc:76:e0:31:1f:c4:c5:ca:c4:e6:9d:e6:7e:
         81:06:9f:bc:78:23:d8:58:83:db:3f:41:b9:dc:4d:91:d4:92:
         40:1f:6a:3e:bc:3e:2d:2f:dd:37:84:de:54:5e:f8:f5:45:69:
         95:9d:11:d0:8f:de:45:c2:39:f4:26:61:da:b1:ef:49:c8:6f:
         76:63:90:f9:2a:50:0a:05:e3:25:19:63:71:3c:e2:72:c4:15:
         88:9b:2a:9b:c4:ff:74:50:94:a7:90:c7:41:45:f1:e8:4a:5b:
         f7:26:a5:52:f5:05:91:44:8b:4d:4c:ed:9e:09:51:a0:f1:63:
         b1:52:77:51:22:a0:cf:1d:ca:14:93:bc:7f:c8:db:4b:e7:92:
         48:69:8d:c6:0b:19:92:82:28:ee:fe:ef:e4:1e:47:e7:4f:2b:
         aa:c5:08:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDKRK9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNh
NjQyZjBmNWJmMWY0MjZjMTRhYjk4NGE1ZWVjNWNjMTIxOWY0YTgwHhcNMjQwMzMx
MDgzMDAxWhcNMjYwMzMxMDgzMDAxWjAzMTEwLwYDVQQDEyg4NzFhMzQwMzg2ZjA0
OTliYWUzNmU4N2I2NDhiMzc5ZjBkNjIxNjkyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6wHphYZxxkVI/6UZ524KkVGL532KzpNrU+D3VHKw+Zt7xm2G
OqODq4ikifHGXuo8FL9L1/YHaeYaUxRpMd5z6KLElctZMfv8RuJ624aQuNC3EIta
fpkRtJohxtwgWg3gOkbJOKOQMpthDAqO4Aa+VKqFji5WIWwS0kXV9xgJl0SbPn9X
dh0ThRgfyUl4C3AEq0AxLz9PdB205LBKHc4JNmwSWxFGOSzaCJFBfyWgIR66/iJD
2INpn6qHT6SpENfP1MMAo9pjeZ0I0bJ54GG5o089wHqLuwFSZVD1jj9mN14P09Lh
2b/LinnoxlVATm+YE1MbRTDGmndFC3vQQkwPaQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFKbVgrlVjnmp1QiAiPMEPvndxFMkMB8GA1UdIwQYMBaAFMWVJLXI1WgeSuXn
anIxYouHgkGIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2E2NDJm
MGY1YmYxZjQyNmMxNGFiOTg0YTVlZWM1Y2MxMjE5ZjRhOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmE1YTE1OGMtMjdiNy00OGE2LThlOTYtYmJmOTAy
YzIwNDA4Lzg3MWEzNDAzODZmMDQ5OWJhZTM2ZTg3YjY0OGIzNzlmMGQ2MjE2OTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYTVhMTU4Yy0yN2I3LTQ4YTYtOGU5Ni1iYmY5
MDJjMjA0MDgvM2E2NDJmMGY1YmYxZjQyNmMxNGFiOTg0YTVlZWM1Y2MxMjE5ZjRh
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAoMA6DANBAIAAjAHAwUAKAP1gDANBgkqhkiG9w0BAQsFAAOC
AQEAGt85L9v4ShwadKEJWCYTHZnBb87RFw8wGi0znyPYyCn08Qydxs9RT5v5/okL
TJAySKkDQfoHxYxGWxlCSDL8tOL+3kzXA5kq0BS8XjZKH4RJPgzKhh0GmFKzaWrQ
j/z8duAxH8TFysTmneZ+gQafvHgj2FiD2z9BudxNkdSSQB9qPrw+LS/dN4TeVF74
9UVplZ0R0I/eRcI59CZh2rHvSchvdmOQ+SpQCgXjJRljcTzicsQViJsqm8T/dFCU
p5DHQUXx6Epb9yalUvUFkUSLTUztnglRoPFjsVJ3USKgzx3KFJO8f8jbS+eSSGmN
xgsZkoIo7v7v5B5H508rqsUIuQ==
-----END CERTIFICATE-----