Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d008c8-a975-4fa4-89b2-393f4285797f/48320fe88ddd7b92e61a657579964b309bcc2c33.roa
File:                     48320fe88ddd7b92e61a657579964b309bcc2c33.roa (raw, json)
Hash identifier:          rqusW84NzTkc1A+Z9F4EBtD4DMfI7bkLqsKCNoq+oMA=
Subject key identifier:   97:E5:D1:D2:BE:9B:0B:7E:1D:FB:F0:3C:10:08:A9:A9:6B:AC:20:F0
Certificate issuer:       /CN=2216f730dc559b8b90421f5cdb654392e386eba6
Certificate serial:       0D2EA1
Authority key identifier: AE:BC:B5:40:D1:C5:F4:BE:16:C1:8A:18:26:76:BA:46:E1:75:5A:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2216f730dc559b8b90421f5cdb654392e386eba6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d008c8-a975-4fa4-89b2-393f4285797f/48320fe88ddd7b92e61a657579964b309bcc2c33.roa
Signing time:             Wed 24 Mar 2021 14:37:20 +0000
ROA not before:           Wed 24 Mar 2021 14:37:18 +0000
ROA not after:            Tue 24 Mar 2026 14:37:18 +0000
asID:                     65104
IP address blocks:        179.0.21.128/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863905 (0xd2ea1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2216f730dc559b8b90421f5cdb654392e386eba6
        Validity
            Not Before: Mar 24 14:37:18 2021 GMT
            Not After : Mar 24 14:37:18 2026 GMT
        Subject: CN=48320fe88ddd7b92e61a657579964b309bcc2c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3a:65:6f:eb:0f:95:92:21:db:cf:82:4f:74:
                    49:eb:18:cc:69:32:d6:d4:05:45:26:79:2d:77:69:
                    4d:68:b2:1a:2a:cd:51:cd:26:24:8b:4f:36:8b:66:
                    bc:2d:b9:64:5f:5c:1a:d9:e8:f7:c9:e3:67:fb:ac:
                    86:e8:e6:00:e3:34:bf:c1:9c:97:dc:c8:bb:c1:28:
                    e6:91:8a:ef:8d:6d:30:7b:c7:1f:51:bb:2c:b2:7e:
                    d1:2f:92:2e:6e:95:fb:fc:84:6b:98:fc:cd:c2:64:
                    62:91:f4:79:d3:e5:84:ae:c8:2f:f2:92:a5:eb:03:
                    fc:01:2a:a9:2d:7a:18:7c:b1:af:a7:a6:f2:05:65:
                    9b:af:db:b7:45:14:70:6b:de:ce:f5:cc:07:5e:9a:
                    8f:b5:14:75:d8:a9:97:74:6d:96:a1:d8:95:27:84:
                    a6:61:00:eb:d2:99:22:ef:96:d5:2d:2b:5e:ec:c8:
                    c8:06:ac:d3:79:04:dd:48:67:ae:27:5d:51:26:84:
                    e0:7d:05:c2:e7:c6:78:1b:34:59:ed:2d:60:a0:ea:
                    51:7f:14:02:2a:a9:88:4a:c5:a2:27:0b:76:a1:9a:
                    a5:e9:64:6e:83:bc:d8:e3:f7:3b:8e:19:2c:f0:d0:
                    30:81:a2:1c:d1:e9:67:b0:fb:25:d5:9a:3f:8a:e5:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E5:D1:D2:BE:9B:0B:7E:1D:FB:F0:3C:10:08:A9:A9:6B:AC:20:F0
            X509v3 Authority Key Identifier:
                keyid:AE:BC:B5:40:D1:C5:F4:BE:16:C1:8A:18:26:76:BA:46:E1:75:5A:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2216f730dc559b8b90421f5cdb654392e386eba6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d008c8-a975-4fa4-89b2-393f4285797f/48320fe88ddd7b92e61a657579964b309bcc2c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d008c8-a975-4fa4-89b2-393f4285797f/2216f730dc559b8b90421f5cdb654392e386eba6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.21.128/26

    Signature Algorithm: sha256WithRSAEncryption
         0a:9b:3a:c2:56:a9:db:48:ea:ea:cb:1b:93:72:d2:bf:2e:99:
         3b:c7:df:ad:65:db:4e:1c:47:38:02:f2:73:54:a9:4f:1e:34:
         c7:5c:43:32:5c:37:82:f7:4f:45:e1:2e:4f:93:7a:26:95:38:
         49:af:71:92:d7:b7:eb:03:7e:8d:3c:ad:8a:91:5a:77:74:a6:
         3c:d9:3a:22:c0:41:44:fe:c3:41:ff:e9:be:f8:ff:e7:2e:fd:
         4b:fe:b4:31:ee:54:da:aa:ff:b8:39:df:20:10:fb:f9:11:71:
         b9:06:62:9c:c2:0d:15:fc:d7:fa:a2:31:b2:49:a7:64:af:42:
         3f:4b:32:43:f5:9f:f5:2d:19:4e:9e:bf:21:2c:72:e8:3c:ea:
         5e:d1:d5:a4:94:c5:83:68:fc:7c:73:07:b4:ce:72:c4:a0:f5:
         a0:01:6d:84:4a:33:42:5a:95:b2:ee:95:86:e2:74:c6:8e:1d:
         62:d9:de:a0:dc:8b:88:d3:c3:03:95:14:df:e8:77:b9:81:cf:
         48:5b:d6:eb:c3:eb:10:b0:0d:ce:3a:a2:57:f0:cc:b3:24:d0:
         13:0f:56:ab:2a:c2:19:77:01:fd:41:b6:93:8f:ff:51:9f:13:
         73:7f:ac:7f:f8:fd:41:b1:dd:6c:e3:b1:89:eb:35:35:a9:3e:
         4e:b2:90:58
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDS6hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIy
MTZmNzMwZGM1NTliOGI5MDQyMWY1Y2RiNjU0MzkyZTM4NmViYTYwHhcNMjEwMzI0
MTQzNzE4WhcNMjYwMzI0MTQzNzE4WjAzMTEwLwYDVQQDEyg0ODMyMGZlODhkZGQ3
YjkyZTYxYTY1NzU3OTk2NGIzMDliY2MyYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgDplb+sPlZIh28+CT3RJ6xjMaTLW1AVFJnktd2lNaLIaKs1R
zSYki082i2a8LblkX1wa2ej3yeNn+6yG6OYA4zS/wZyX3Mi7wSjmkYrvjW0we8cf
Ubsssn7RL5IubpX7/IRrmPzNwmRikfR50+WErsgv8pKl6wP8ASqpLXoYfLGvp6by
BWWbr9u3RRRwa97O9cwHXpqPtRR12KmXdG2WodiVJ4SmYQDr0pki75bVLSte7MjI
BqzTeQTdSGeuJ11RJoTgfQXC58Z4GzRZ7S1goOpRfxQCKqmISsWiJwt2oZql6WRu
g7zY4/c7jhks8NAwgaIc0elnsPsl1Zo/iuXx+wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJfl0dK+mwt+HfvwPBAIqalrrCDwMB8GA1UdIwQYMBaAFK68tUDRxfS+FsGK
GCZ2ukbhdVoMMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjIxNmY3
MzBkYzU1OWI4YjkwNDIxZjVjZGI2NTQzOTJlMzg2ZWJhNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDJkMDA4YzgtYTk3NS00ZmE0LTg5YjItMzkzZjQy
ODU3OTdmLzQ4MzIwZmU4OGRkZDdiOTJlNjFhNjU3NTc5OTY0YjMwOWJjYzJjMzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMmQwMDhjOC1hOTc1LTRmYTQtODliMi0zOTNm
NDI4NTc5N2YvMjIxNmY3MzBkYzU1OWI4YjkwNDIxZjVjZGI2NTQzOTJlMzg2ZWJh
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAEwBwMFBrMAFYAwDQYJKoZIhvcNAQELBQADggEBAAqbOsJWqdtI6urL
G5Ny0r8umTvH361l204cRzgC8nNUqU8eNMdcQzJcN4L3T0XhLk+TeiaVOEmvcZLX
t+sDfo08rYqRWnd0pjzZOiLAQUT+w0H/6b74/+cu/Uv+tDHuVNqq/7g53yAQ+/kR
cbkGYpzCDRX81/qiMbJJp2SvQj9LMkP1n/UtGU6evyEscug86l7R1aSUxYNo/Hxz
B7TOcsSg9aABbYRKM0JalbLulYbidMaOHWLZ3qDci4jTwwOVFN/od7mBz0hb1uvD
6xCwDc46olfwzLMk0BMPVqsqwhl3Af1BtpOP/1GfE3N/rH/4/UGx3WzjsYnrNTWp
Pk6ykFg=
-----END CERTIFICATE-----