Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/2dda2e5ed611da7b3c4a3b0eba0672cb725987d8.roa
File:                     2dda2e5ed611da7b3c4a3b0eba0672cb725987d8.roa (raw, json)
Hash identifier:          TqtysDha38hwneqjaqGOq1ctNRSSzs4Pm+RJnbvs35I=
Subject key identifier:   55:12:41:FF:6A:67:3D:61:F6:C4:C2:42:59:AE:8A:06:15:AC:15:A4
Certificate issuer:       /CN=132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc
Certificate serial:       06F9
Authority key identifier: 50:F9:00:34:5B:2F:F6:D1:61:4A:38:08:71:C0:E8:3C:C0:5A:A7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/2dda2e5ed611da7b3c4a3b0eba0672cb725987d8.roa
Signing time:             Sun 19 Sep 2021 01:02:53 +0000
ROA not before:           Sat 18 Sep 2021 03:00:00 +0000
ROA not after:            Thu 18 Sep 2025 03:00:00 +0000
asID:                     265606
IP address blocks:        200.71.108.0/22 maxlen: 24
                          2806:3ac::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1785 (0x6f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc
        Validity
            Not Before: Sep 18 03:00:00 2021 GMT
            Not After : Sep 18 03:00:00 2025 GMT
        Subject: CN=2dda2e5ed611da7b3c4a3b0eba0672cb725987d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:05:42:02:33:08:4a:7b:90:4b:89:7e:ee:
                    77:db:1a:0d:1d:c3:bc:03:11:d7:c8:ba:72:73:90:
                    94:7b:e6:ef:80:65:f5:fc:df:37:14:fe:60:61:e3:
                    9f:b1:c8:b7:f5:18:66:27:12:65:71:2d:33:fd:cd:
                    28:be:16:c1:db:45:7b:95:d0:a8:ca:c6:1f:ff:1a:
                    06:85:71:ad:1b:a0:6b:e4:e7:92:e5:34:b6:79:bd:
                    76:c7:99:74:cf:1c:20:04:76:82:d3:2c:37:95:e2:
                    95:46:e8:7a:4e:65:b9:96:6d:20:cd:3e:33:a8:ed:
                    65:b0:6b:ed:e5:c1:4f:80:f2:6f:27:a1:2c:6b:e3:
                    b5:41:d6:bd:22:ba:1e:64:c2:50:90:06:3f:47:ec:
                    fd:57:04:ba:2a:e4:7e:e1:cc:c4:e2:20:51:9d:3f:
                    ac:d3:b4:7a:9e:41:73:51:d2:3d:51:53:04:68:ab:
                    ff:1f:24:96:11:84:88:6e:85:e5:31:0e:2c:05:b7:
                    8d:cd:b1:da:66:07:0c:21:e4:24:74:04:26:58:d2:
                    a7:33:22:57:51:1e:2d:12:35:a7:40:0c:42:23:ea:
                    12:e4:8e:ca:21:6e:68:ce:2d:fb:67:ad:cb:4e:ef:
                    72:64:fb:ed:bc:b8:5a:0b:b7:bf:71:eb:34:13:84:
                    be:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:12:41:FF:6A:67:3D:61:F6:C4:C2:42:59:AE:8A:06:15:AC:15:A4
            X509v3 Authority Key Identifier:
                keyid:50:F9:00:34:5B:2F:F6:D1:61:4A:38:08:71:C0:E8:3C:C0:5A:A7:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/2dda2e5ed611da7b3c4a3b0eba0672cb725987d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.108.0/22
                IPv6:
                  2806:3ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:0f:f7:1d:41:68:bf:e0:c3:a5:04:bc:b1:bf:c6:38:c1:bf:
         5d:64:44:fb:b7:46:69:e5:95:9f:c9:59:f7:ac:db:0e:b4:69:
         04:29:47:a0:b8:e1:af:f9:67:66:c1:1c:b2:28:b3:40:db:b0:
         46:3a:ae:0d:ab:9a:12:48:c4:89:1f:d9:f9:89:be:db:33:b0:
         33:9f:18:f2:ee:61:a0:ac:ef:0e:2f:1e:c2:be:e4:78:50:3b:
         ce:df:4f:49:73:5a:3d:7d:da:c3:ee:38:ed:3c:08:14:02:d9:
         b7:f7:57:b7:37:1e:d4:06:fd:a3:e8:b5:7f:67:77:93:dc:dc:
         1a:b9:04:58:5c:53:47:76:59:eb:d6:e7:7f:d1:5d:68:c4:b3:
         59:c6:52:b3:e7:9d:5f:65:2e:a5:90:bf:c7:c1:8c:99:f1:37:
         dd:e7:46:aa:96:10:39:1d:c3:9e:02:2c:54:3c:e6:09:36:00:
         5c:a8:b3:37:d3:49:26:d4:97:1e:e0:c3:62:f9:dd:d1:e1:4c:
         7e:77:d0:04:f0:b5:04:a6:92:90:0d:71:23:f3:b4:6a:33:3c:
         76:2e:d3:c8:04:84:5f:64:25:70:a1:4c:3f:97:21:9b:d4:f2:
         60:fc:74:65:fc:a1:fa:fd:21:7a:aa:b7:1f:7a:75:3c:2e:a8:
         a4:88:69:75
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTMy
Y2I0NWRlZTA2MGE0YTJiMWQ3ZGNjMzg1YzFjZjE5NTZmOWVjYzAeFw0yMTA5MTgw
MzAwMDBaFw0yNTA5MTgwMzAwMDBaMDMxMTAvBgNVBAMTKDJkZGEyZTVlZDYxMWRh
N2IzYzRhM2IwZWJhMDY3MmNiNzI1OTg3ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnEwVCAjMISnuQS4l+7nfbGg0dw7wDEdfIunJzkJR75u+AZfX8
3zcU/mBh45+xyLf1GGYnEmVxLTP9zSi+FsHbRXuV0KjKxh//GgaFca0boGvk55Ll
NLZ5vXbHmXTPHCAEdoLTLDeV4pVG6HpOZbmWbSDNPjOo7WWwa+3lwU+A8m8noSxr
47VB1r0iuh5kwlCQBj9H7P1XBLoq5H7hzMTiIFGdP6zTtHqeQXNR0j1RUwRoq/8f
JJYRhIhuheUxDiwFt43NsdpmBwwh5CR0BCZY0qczIldRHi0SNadADEIj6hLkjsoh
bmjOLftnrctO73Jk++28uFoLt79x6zQThL6LAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUVRJB/2pnPWH2xMJCWa6KBhWsFaQwHwYDVR0jBBgwFoAUUPkANFsv9tFhSjgI
ccDoPMBap24wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8xMzJjYjQ1
ZGVlMDYwYTRhMmIxZDdkY2MzODVjMWNmMTk1NmY5ZWNjLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9iZmY5NDhmMi00YWM4LTQyZDAtOGQ3ZC03NDdjYTI2
YzQ2OWEvMmRkYTJlNWVkNjExZGE3YjNjNGEzYjBlYmEwNjcyY2I3MjU5ODdkOC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2JmZjk0OGYyLTRhYzgtNDJkMC04ZDdkLTc0N2Nh
MjZjNDY5YS8xMzJjYjQ1ZGVlMDYwYTRhMmIxZDdkY2MzODVjMWNmMTk1NmY5ZWNj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCyEdsMA0EAgACMAcDBQAoBgOsMA0GCSqGSIb3DQEBCwUAA4IB
AQAxD/cdQWi/4MOlBLyxv8Y4wb9dZET7t0Zp5ZWfyVn3rNsOtGkEKUeguOGv+Wdm
wRyyKLNA27BGOq4Nq5oSSMSJH9n5ib7bM7Aznxjy7mGgrO8OLx7CvuR4UDvO309J
c1o9fdrD7jjtPAgUAtm391e3Nx7UBv2j6LV/Z3eT3NwauQRYXFNHdlnr1ud/0V1o
xLNZxlKz551fZS6lkL/HwYyZ8Tfd50aqlhA5HcOeAixUPOYJNgBcqLM300km1Jce
4MNi+d3R4Ux+d9AE8LUEppKQDXEj87RqMzx2LtPIBIRfZCVwoUw/lyGb1PJg/HRl
/KH6/SF6qrcfenU8LqikiGl1
-----END CERTIFICATE-----