Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/cf88ed1aac943ac16942fcf96710314393df1f0f.roa
File:                     cf88ed1aac943ac16942fcf96710314393df1f0f.roa (raw, json)
Hash identifier:          JTuxWwHMc/3loXmka7zZjWZgT4YViVYhmkkZ27odSrM=
Subject key identifier:   EC:AA:85:1D:9C:FD:2E:5F:8D:F6:F5:CF:85:18:D1:7C:74:17:4D:3F
Certificate issuer:       /CN=415bbdadc090f33ec878e16eb6264e70c552a90c
Certificate serial:       0DAB05
Authority key identifier: 75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/cf88ed1aac943ac16942fcf96710314393df1f0f.roa
Signing time:             Wed 24 Mar 2021 14:41:14 +0000
ROA not before:           Wed 24 Mar 2021 14:41:13 +0000
ROA not after:            Tue 24 Mar 2026 14:41:13 +0000
asID:                     27947
IP address blocks:        186.33.160.0/19 maxlen: 24
                          2800:bf0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895749 (0xdab05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bbdadc090f33ec878e16eb6264e70c552a90c
        Validity
            Not Before: Mar 24 14:41:13 2021 GMT
            Not After : Mar 24 14:41:13 2026 GMT
        Subject: CN=cf88ed1aac943ac16942fcf96710314393df1f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c1:50:5b:9a:30:13:56:dd:c3:95:6a:27:b5:
                    f4:98:81:5d:a9:17:f5:ce:70:4c:f8:a5:cd:ae:f6:
                    18:be:6d:43:c6:d9:e5:88:38:13:c2:34:47:dc:86:
                    17:4f:5e:57:f6:e6:64:b8:cf:81:2c:b6:a8:8a:27:
                    0a:fa:b8:bc:88:cf:d7:63:04:69:bf:81:c1:a4:2b:
                    55:70:5a:00:58:21:8f:0e:14:04:aa:3c:c3:eb:95:
                    37:b4:f3:af:ee:c5:60:76:29:af:af:2e:94:f0:ac:
                    dc:9e:6c:03:bc:6d:ec:3d:82:03:1d:4c:23:8b:72:
                    cf:a3:1e:6d:70:ae:95:e5:12:bc:54:5c:1e:5b:38:
                    e2:98:c4:01:be:5d:53:15:f7:5c:e3:c6:8d:4b:f0:
                    84:58:ad:a3:d8:5a:db:48:75:6c:d4:8d:e5:fd:db:
                    46:75:aa:13:29:e9:0f:ff:b2:70:06:c8:bd:43:3b:
                    5d:ca:2e:78:bf:87:e2:52:26:a8:f0:69:c8:d6:0b:
                    1a:0b:7d:90:15:e5:4f:59:dd:77:36:d5:f0:97:a9:
                    cd:a0:98:b5:1f:32:c7:82:16:65:0f:38:b5:26:7e:
                    18:e6:f1:4d:c1:ef:44:f1:3d:9c:78:ab:36:5e:af:
                    2d:90:3b:bb:23:f6:4f:bc:58:3a:37:50:94:77:68:
                    70:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AA:85:1D:9C:FD:2E:5F:8D:F6:F5:CF:85:18:D1:7C:74:17:4D:3F
            X509v3 Authority Key Identifier:
                keyid:75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/cf88ed1aac943ac16942fcf96710314393df1f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/415bbdadc090f33ec878e16eb6264e70c552a90c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.160.0/19
                IPv6:
                  2800:bf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:ec:a9:8b:6d:23:bb:0f:fa:f8:57:c5:d4:51:a7:b8:07:ab:
         4e:95:27:d7:40:4b:c9:eb:44:2c:cf:c1:73:79:1f:eb:6f:b0:
         59:83:88:ba:de:73:27:d3:55:c8:d3:7c:34:d9:35:02:10:4e:
         c6:68:6d:48:8c:23:fe:8b:67:91:f0:49:93:51:43:12:ec:c7:
         82:3a:42:aa:2d:2d:24:5b:f6:28:ce:94:e2:0e:91:21:f7:64:
         f4:08:37:c5:ac:a2:2f:b4:77:05:5f:ed:3c:67:cf:81:d8:20:
         eb:c8:ba:4b:62:0e:60:19:99:81:0b:17:49:0b:29:69:b4:7d:
         be:29:62:f9:c4:e9:d0:09:e1:01:f1:3a:de:ee:68:7c:02:0a:
         de:7a:6b:08:4c:ad:77:5d:44:c5:d5:b5:d0:a6:0f:3f:33:9b:
         24:da:9d:1e:e9:49:a1:ff:7c:11:ae:b2:9c:9a:5e:77:8f:b7:
         5b:02:34:0c:f6:b5:d5:7a:a9:50:1d:f2:d4:ab:b8:02:d4:f3:
         0c:db:ba:19:b5:1a:bb:b4:f2:55:c0:60:0f:34:a0:76:3d:45:
         ab:b3:e4:ab:ae:73:08:cc:ec:e3:66:25:ca:1c:81:fb:f2:5e:
         0a:3c:dc:09:7d:a5:f7:89:0c:31:3c:e0:b8:20:fa:19:40:19:
         01:52:3b:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDasFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
NWJiZGFkYzA5MGYzM2VjODc4ZTE2ZWI2MjY0ZTcwYzU1MmE5MGMwHhcNMjEwMzI0
MTQ0MTEzWhcNMjYwMzI0MTQ0MTEzWjAzMTEwLwYDVQQDEyhjZjg4ZWQxYWFjOTQz
YWMxNjk0MmZjZjk2NzEwMzE0MzkzZGYxZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlsFQW5owE1bdw5VqJ7X0mIFdqRf1znBM+KXNrvYYvm1Dxtnl
iDgTwjRH3IYXT15X9uZkuM+BLLaoiicK+ri8iM/XYwRpv4HBpCtVcFoAWCGPDhQE
qjzD65U3tPOv7sVgdimvry6U8KzcnmwDvG3sPYIDHUwji3LPox5tcK6V5RK8VFwe
WzjimMQBvl1TFfdc48aNS/CEWK2j2FrbSHVs1I3l/dtGdaoTKekP/7JwBsi9Qztd
yi54v4fiUiao8GnI1gsaC32QFeVPWd13NtXwl6nNoJi1HzLHghZlDzi1Jn4Y5vFN
we9E8T2ceKs2Xq8tkDu7I/ZPvFg6N1CUd2hwrwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFOyqhR2c/S5fjfb1z4UY0Xx0F00/MB8GA1UdIwQYMBaAFHVmYqoKn5xFmZMp
ZZLDH2pvI8sDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDE1YmJk
YWRjMDkwZjMzZWM4NzhlMTZlYjYyNjRlNzBjNTUyYTkwYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzM1YTZjN2YtNmIxNy00MzE3LTkxZTUtYmQ4NzJm
YjBjMTlhL2NmODhlZDFhYWM5NDNhYzE2OTQyZmNmOTY3MTAzMTQzOTNkZjFmMGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMzVhNmM3Zi02YjE3LTQzMTctOTFlNS1iZDg3
MmZiMGMxOWEvNDE1YmJkYWRjMDkwZjMzZWM4NzhlMTZlYjYyNjRlNzBjNTUyYTkw
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEBbohoDANBAIAAjAHAwUAKAAL8DANBgkqhkiG9w0BAQsFAAOC
AQEAd+ypi20juw/6+FfF1FGnuAerTpUn10BLyetELM/Bc3kf62+wWYOIut5zJ9NV
yNN8NNk1AhBOxmhtSIwj/otnkfBJk1FDEuzHgjpCqi0tJFv2KM6U4g6RIfdk9Ag3
xayiL7R3BV/tPGfPgdgg68i6S2IOYBmZgQsXSQspabR9vili+cTp0AnhAfE63u5o
fAIK3nprCEytd11ExdW10KYPPzObJNqdHulJof98Ea6ynJped4+3WwI0DPa11Xqp
UB3y1Ku4AtTzDNu6GbUau7TyVcBgDzSgdj1Fq7Pkq65zCMzs42YlyhyB+/JeCjzc
CX2l94kMMTzguCD6GUAZAVI7cg==
-----END CERTIFICATE-----