Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/ebbb19fc1970c2ebe5f12f8779372c3f8a1ce912.roa
File:                     ebbb19fc1970c2ebe5f12f8779372c3f8a1ce912.roa (raw, json)
Hash identifier:          jCTPk7MDkBbexT2I+n90GRuwI2d0arA8uBiEPomJ1LU=
Subject key identifier:   D8:18:CC:7D:D2:70:5E:B4:96:48:62:84:6A:35:6E:6B:A4:F3:AB:0D
Certificate issuer:       /CN=3fb30a4806bd1d5d30f7ac6f452dde37962b6694
Certificate serial:       0D977A
Authority key identifier: 5F:78:2A:6B:70:1D:85:9E:95:55:C7:19:DB:61:E7:13:8B:D9:58:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/ebbb19fc1970c2ebe5f12f8779372c3f8a1ce912.roa
Signing time:             Wed 24 Mar 2021 14:40:22 +0000
ROA not before:           Wed 24 Mar 2021 14:40:22 +0000
ROA not after:            Tue 24 Mar 2026 14:40:22 +0000
asID:                     266679
IP address blocks:        45.228.52.0/24 maxlen: 24
                          2803:f920::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890746 (0xd977a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fb30a4806bd1d5d30f7ac6f452dde37962b6694
        Validity
            Not Before: Mar 24 14:40:22 2021 GMT
            Not After : Mar 24 14:40:22 2026 GMT
        Subject: CN=ebbb19fc1970c2ebe5f12f8779372c3f8a1ce912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1c:a5:59:7d:c7:bd:b7:89:81:a2:12:4a:03:
                    cc:6e:0e:e1:70:27:42:d1:8b:0c:c9:48:c6:19:48:
                    f3:7e:07:1e:83:7c:e0:3c:57:4c:84:67:bd:11:ad:
                    1a:01:0b:6a:cd:0c:58:26:fd:17:af:1f:12:8d:cf:
                    70:58:f1:71:10:7c:0b:9c:03:40:58:dd:e4:2b:6a:
                    36:d5:28:40:69:9a:89:6e:1c:f4:13:d9:4f:4a:d0:
                    5a:2d:3d:61:31:a4:db:b4:f5:70:1b:36:fa:1d:66:
                    1f:3a:84:89:0b:cb:3c:ce:af:5d:b6:1d:82:f9:f1:
                    e6:04:be:44:dc:0e:c1:90:23:a8:de:90:bf:d3:6b:
                    51:8f:a2:c3:39:aa:c1:04:3c:6b:f2:e8:aa:95:34:
                    5f:4d:91:57:39:2c:f0:10:8f:cd:d5:64:64:62:aa:
                    89:24:68:ec:f6:d9:a6:c9:12:c2:20:1a:84:58:ba:
                    b9:09:8f:85:a8:18:e8:48:4a:be:2e:e4:34:0c:40:
                    d8:86:6a:13:d1:2f:7e:d6:66:9d:bd:27:6b:df:de:
                    cd:88:62:50:9a:f1:12:5e:89:d4:c7:1b:05:0e:13:
                    40:2a:e7:4d:54:f1:ac:af:6a:b0:7c:5d:22:5a:e4:
                    a2:54:ea:85:6c:b7:3a:94:0b:36:4f:e7:23:82:74:
                    8a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:18:CC:7D:D2:70:5E:B4:96:48:62:84:6A:35:6E:6B:A4:F3:AB:0D
            X509v3 Authority Key Identifier:
                keyid:5F:78:2A:6B:70:1D:85:9E:95:55:C7:19:DB:61:E7:13:8B:D9:58:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/ebbb19fc1970c2ebe5f12f8779372c3f8a1ce912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.52.0/24
                IPv6:
                  2803:f920::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:20:66:2e:22:6f:72:09:68:0e:b9:95:a0:b8:53:52:c7:e1:
         43:a2:1a:0f:db:c0:64:9a:7c:d5:c7:25:f8:cf:b4:8e:35:88:
         4a:8e:85:6e:89:ba:ca:c4:41:46:c2:35:65:25:45:0f:12:67:
         f5:84:43:9a:cb:bd:d0:c8:f3:70:12:1d:e1:0b:3b:4f:cb:22:
         be:d0:fd:21:80:a9:38:b3:37:36:d8:c8:e5:0f:fe:ad:f4:79:
         0e:29:a1:31:fa:e3:49:be:34:b8:ab:a2:09:92:5b:6d:96:e8:
         d5:38:2b:eb:5c:37:50:b8:75:23:84:f9:8e:69:41:cd:ff:5e:
         a7:bd:4e:08:6d:79:e6:7e:45:12:aa:91:58:1f:d7:76:39:ab:
         55:56:52:8b:20:1d:a9:54:c8:d7:84:cb:2f:51:b4:7e:70:63:
         69:5a:ad:b9:a6:82:d3:2b:2c:fa:34:f2:48:3c:ba:28:10:af:
         94:82:7d:25:c6:34:10:79:e1:89:95:cf:a5:68:a6:95:1b:eb:
         e0:8a:81:b3:79:9b:48:5b:00:39:a7:80:69:52:67:9f:98:fd:
         48:f6:80:6f:ae:cc:e7:01:44:d6:b0:19:47:1f:00:b3:39:d3:
         c1:e6:32:19:a8:84:d0:7c:4b:b6:56:6b:8c:22:d8:bd:58:94:
         ff:fc:d8:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDZd6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNm
YjMwYTQ4MDZiZDFkNWQzMGY3YWM2ZjQ1MmRkZTM3OTYyYjY2OTQwHhcNMjEwMzI0
MTQ0MDIyWhcNMjYwMzI0MTQ0MDIyWjAzMTEwLwYDVQQDEyhlYmJiMTlmYzE5NzBj
MmViZTVmMTJmODc3OTM3MmMzZjhhMWNlOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2hylWX3HvbeJgaISSgPMbg7hcCdC0YsMyUjGGUjzfgceg3zg
PFdMhGe9Ea0aAQtqzQxYJv0Xrx8Sjc9wWPFxEHwLnANAWN3kK2o21ShAaZqJbhz0
E9lPStBaLT1hMaTbtPVwGzb6HWYfOoSJC8s8zq9dth2C+fHmBL5E3A7BkCOo3pC/
02tRj6LDOarBBDxr8uiqlTRfTZFXOSzwEI/N1WRkYqqJJGjs9tmmyRLCIBqEWLq5
CY+FqBjoSEq+LuQ0DEDYhmoT0S9+1madvSdr397NiGJQmvESXonUxxsFDhNAKudN
VPGsr2qwfF0iWuSiVOqFbLc6lAs2T+cjgnSK9wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNgYzH3ScF60lkhihGo1bmuk86sNMB8GA1UdIwQYMBaAFF94KmtwHYWelVXH
Gdth5xOL2Vg6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2ZiMzBh
NDgwNmJkMWQ1ZDMwZjdhYzZmNDUyZGRlMzc5NjJiNjY5NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDA2YThmOGEtZDNjZC00MTI2LWIxODItMmNhNmUx
ZjQ4MjE4L2ViYmIxOWZjMTk3MGMyZWJlNWYxMmY4Nzc5MzcyYzNmOGExY2U5MTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMDZhOGY4YS1kM2NkLTQxMjYtYjE4Mi0yY2E2
ZTFmNDgyMTgvM2ZiMzBhNDgwNmJkMWQ1ZDMwZjdhYzZmNDUyZGRlMzc5NjJiNjY5
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAC3kNDANBAIAAjAHAwUAKAP5IDANBgkqhkiG9w0BAQsFAAOC
AQEAfiBmLiJvcgloDrmVoLhTUsfhQ6IaD9vAZJp81ccl+M+0jjWISo6Fbom6ysRB
RsI1ZSVFDxJn9YRDmsu90MjzcBId4Qs7T8sivtD9IYCpOLM3NtjI5Q/+rfR5Dimh
MfrjSb40uKuiCZJbbZbo1Tgr61w3ULh1I4T5jmlBzf9ep71OCG155n5FEqqRWB/X
djmrVVZSiyAdqVTI14TLL1G0fnBjaVqtuaaC0yss+jTySDy6KBCvlIJ9JcY0EHnh
iZXPpWimlRvr4IqBs3mbSFsAOaeAaVJnn5j9SPaAb67M5wFE1rAZRx8AsznTweYy
GaiE0HxLtlZrjCLYvViU//zYvA==
-----END CERTIFICATE-----