Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c302c9dc-86bf-433c-94c1-3823003b0994/87845652b4ed40474041c24dce632aa87c3aed67.roa
File:                     87845652b4ed40474041c24dce632aa87c3aed67.roa (raw, json)
Hash identifier:          U7O0A82y1aefaUzwyryOf4xvcyw/HV4FQ4wHW75MUGI=
Subject key identifier:   15:84:A0:AC:D8:84:6F:0B:31:A2:98:C9:8F:F9:14:4B:E6:50:EC:25
Certificate issuer:       /CN=f7582e945084f247c549687d5d9f96b8a927f018
Certificate serial:       093AB4
Authority key identifier: B6:88:CA:C8:49:33:3F:76:D8:A0:B9:4C:1B:23:6A:3D:94:35:E5:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7582e945084f247c549687d5d9f96b8a927f018.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c302c9dc-86bf-433c-94c1-3823003b0994/87845652b4ed40474041c24dce632aa87c3aed67.roa
Signing time:             Wed 24 Mar 2021 14:33:58 +0000
ROA not before:           Wed 24 Mar 2021 14:33:58 +0000
ROA not after:            Tue 24 Mar 2026 14:33:58 +0000
asID:                     269925
IP address blocks:        201.71.0.0/23 maxlen: 24
                          2803:62e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604852 (0x93ab4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7582e945084f247c549687d5d9f96b8a927f018
        Validity
            Not Before: Mar 24 14:33:58 2021 GMT
            Not After : Mar 24 14:33:58 2026 GMT
        Subject: CN=87845652b4ed40474041c24dce632aa87c3aed67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:a7:ff:d7:7e:b9:7d:86:ed:a6:b0:6c:e6:
                    b9:bd:7d:e5:52:e3:e2:53:8c:51:bd:ae:27:48:51:
                    c5:27:74:41:5b:a4:21:e5:b1:b6:07:5f:eb:15:4f:
                    b8:d3:ec:32:cd:73:07:ef:1d:5e:7b:ad:f7:42:c3:
                    ac:01:8d:53:55:a3:ce:03:50:04:d1:72:85:aa:b1:
                    a9:a9:14:6b:b6:3e:e8:e7:23:85:66:c1:f4:22:2d:
                    9c:80:4b:35:ff:05:aa:d8:26:84:9e:0a:26:fe:77:
                    f7:3c:de:b7:f0:1a:34:64:9f:39:f8:fd:f8:5c:b9:
                    17:7a:28:c7:d5:fb:9f:5e:83:75:d2:4b:c5:90:95:
                    fa:00:f9:bc:c1:31:6e:e4:7e:6c:5c:88:9b:54:8a:
                    97:93:59:bd:25:fc:a8:a6:34:0f:a1:1e:54:5e:53:
                    05:12:e9:ad:2d:3c:b3:f4:a5:bc:3d:0c:b4:ab:ac:
                    db:d1:8a:a5:5d:a8:86:eb:f8:6e:3a:c5:0d:4a:4a:
                    b7:3c:1e:da:20:de:70:1c:57:43:01:1b:6f:17:57:
                    6a:b2:8a:15:03:03:2a:0c:6c:46:f4:cb:32:2d:1d:
                    d5:fa:94:7d:37:95:d5:94:da:13:5a:27:d8:aa:72:
                    ed:b5:56:c4:ae:0a:4b:95:76:93:83:ef:64:cf:c3:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:84:A0:AC:D8:84:6F:0B:31:A2:98:C9:8F:F9:14:4B:E6:50:EC:25
            X509v3 Authority Key Identifier:
                keyid:B6:88:CA:C8:49:33:3F:76:D8:A0:B9:4C:1B:23:6A:3D:94:35:E5:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7582e945084f247c549687d5d9f96b8a927f018.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c302c9dc-86bf-433c-94c1-3823003b0994/87845652b4ed40474041c24dce632aa87c3aed67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c302c9dc-86bf-433c-94c1-3823003b0994/f7582e945084f247c549687d5d9f96b8a927f018.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.0.0/23
                IPv6:
                  2803:62e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:bc:46:0f:63:ae:5a:ca:73:27:0e:1a:f9:75:69:6e:a9:a6:
         ca:22:66:83:8c:ef:92:c9:dd:3f:cf:14:cc:61:88:fc:fa:02:
         3e:8f:79:af:47:bc:64:db:57:a2:d1:c8:da:be:83:d8:2e:b7:
         2e:69:a0:13:8c:58:ae:31:4b:39:b3:0b:a2:42:98:09:3f:7d:
         bb:3e:74:30:23:f4:8a:89:5c:a1:bb:b6:44:fa:6c:9d:7e:b2:
         d4:aa:f8:4f:fb:a6:69:ef:87:18:75:05:87:8c:1d:1d:80:e2:
         01:d0:8d:9a:5a:30:97:1e:a4:d5:08:87:1a:1f:e7:6b:b5:cc:
         c8:ce:80:0c:71:7a:27:7b:58:0a:99:6d:dd:d1:fe:4a:5f:ca:
         55:6a:ad:29:46:7d:0b:e3:c4:87:f9:f6:01:b7:5d:91:a9:55:
         d4:e9:17:45:eb:55:e9:05:24:70:ef:96:e4:45:ad:b8:b8:3a:
         90:5a:d9:c8:ef:90:13:c9:cb:91:6b:1e:76:8d:b8:20:ac:94:
         04:20:d7:93:75:8b:0a:88:51:b3:66:95:8c:41:98:47:39:2b:
         54:ee:0a:dd:ba:ab:1f:62:47:24:49:c7:33:7b:cf:50:c7:e6:
         5a:90:12:3b:39:cf:57:a4:f2:62:f4:75:8d:64:f3:4f:96:c7:
         5c:5c:22:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDCTq0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY3
NTgyZTk0NTA4NGYyNDdjNTQ5Njg3ZDVkOWY5NmI4YTkyN2YwMTgwHhcNMjEwMzI0
MTQzMzU4WhcNMjYwMzI0MTQzMzU4WjAzMTEwLwYDVQQDEyg4Nzg0NTY1MmI0ZWQ0
MDQ3NDA0MWMyNGRjZTYzMmFhODdjM2FlZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsFmn/9d+uX2G7aawbOa5vX3lUuPiU4xRva4nSFHFJ3RBW6Qh
5bG2B1/rFU+40+wyzXMH7x1ee633QsOsAY1TVaPOA1AE0XKFqrGpqRRrtj7o5yOF
ZsH0Ii2cgEs1/wWq2CaEngom/nf3PN638Bo0ZJ85+P34XLkXeijH1fufXoN10kvF
kJX6APm8wTFu5H5sXIibVIqXk1m9JfyopjQPoR5UXlMFEumtLTyz9KW8PQy0q6zb
0YqlXaiG6/huOsUNSkq3PB7aIN5wHFdDARtvF1dqsooVAwMqDGxG9MsyLR3V+pR9
N5XVlNoTWifYqnLttVbErgpLlXaTg+9kz8M62wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBWEoKzYhG8LMaKYyY/5FEvmUOwlMB8GA1UdIwQYMBaAFLaIyshJMz922KC5
TBsjaj2UNeVQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjc1ODJl
OTQ1MDg0ZjI0N2M1NDk2ODdkNWQ5Zjk2YjhhOTI3ZjAxOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzMwMmM5ZGMtODZiZi00MzNjLTk0YzEtMzgyMzAw
M2IwOTk0Lzg3ODQ1NjUyYjRlZDQwNDc0MDQxYzI0ZGNlNjMyYWE4N2MzYWVkNjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMzAyYzlkYy04NmJmLTQzM2MtOTRjMS0zODIz
MDAzYjA5OTQvZjc1ODJlOTQ1MDg0ZjI0N2M1NDk2ODdkNWQ5Zjk2YjhhOTI3ZjAx
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAclHADANBAIAAjAHAwUAKANi4DANBgkqhkiG9w0BAQsFAAOC
AQEANLxGD2OuWspzJw4a+XVpbqmmyiJmg4zvksndP88UzGGI/PoCPo95r0e8ZNtX
otHI2r6D2C63LmmgE4xYrjFLObMLokKYCT99uz50MCP0iolcobu2RPpsnX6y1Kr4
T/umae+HGHUFh4wdHYDiAdCNmlowlx6k1QiHGh/na7XMyM6ADHF6J3tYCplt3dH+
Sl/KVWqtKUZ9C+PEh/n2AbddkalV1OkXRetV6QUkcO+W5EWtuLg6kFrZyO+QE8nL
kWsedo24IKyUBCDXk3WLCohRs2aVjEGYRzkrVO4K3bqrH2JHJEnHM3vPUMfmWpAS
OznPV6TyYvR1jWTzT5bHXFwiEw==
-----END CERTIFICATE-----