Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/5b5ab43fd28eadbbb6928616b86359fbf5b0a43d.roa
File:                     5b5ab43fd28eadbbb6928616b86359fbf5b0a43d.roa (raw, json)
Hash identifier:          ooIi4rd/4fo4ogHBU6hj5Z/+m7aDfh+coEVBTscuEU0=
Subject key identifier:   54:3D:82:C4:94:6B:77:34:51:83:97:2E:13:04:51:8D:AB:6B:86:E9
Certificate issuer:       /CN=53a84133ecea8791e075c28348a5c7805616cc52
Certificate serial:       09ABA5
Authority key identifier: F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/5b5ab43fd28eadbbb6928616b86359fbf5b0a43d.roa
Signing time:             Tue 25 Apr 2023 21:44:47 +0000
ROA not before:           Mon 24 Apr 2023 21:44:46 +0000
ROA not after:            Fri 25 Apr 2025 21:44:46 +0000
asID:                     272043
IP address blocks:        131.72.136.0/22 maxlen: 22
                          2803:6d10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633765 (0x9aba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a84133ecea8791e075c28348a5c7805616cc52
        Validity
            Not Before: Apr 24 21:44:46 2023 GMT
            Not After : Apr 25 21:44:46 2025 GMT
        Subject: CN=5b5ab43fd28eadbbb6928616b86359fbf5b0a43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:8e:89:5d:10:c6:fb:ae:8e:f1:20:50:f7:
                    b4:fe:59:fc:bd:2f:c4:e2:bc:b7:b8:42:5f:3c:a4:
                    d5:60:49:8f:6a:6a:35:13:a2:2f:52:65:5c:52:df:
                    84:5a:93:b1:2a:26:5e:af:19:4f:e0:2a:0b:ab:a2:
                    29:38:50:cd:d1:52:18:6c:c9:99:47:fb:31:01:4c:
                    93:dc:a7:af:fc:48:47:3b:a7:6d:10:29:dc:38:a9:
                    6f:a2:e9:60:20:70:e1:07:80:9e:f2:d8:6e:d4:ae:
                    62:44:ee:ac:b3:f3:7d:8f:24:15:23:cd:cd:3e:26:
                    b0:75:42:c0:5f:e3:14:c8:cf:4b:ea:8d:f5:15:e1:
                    20:f2:c7:2d:16:d6:ec:39:b2:d7:af:25:0b:10:39:
                    ec:aa:8a:2a:7f:61:24:8d:79:4a:06:f3:72:43:0a:
                    c2:af:5b:e6:d3:50:bb:23:b0:4f:4d:61:3c:15:da:
                    27:c0:66:38:f9:65:34:fb:d7:a9:4e:dd:07:88:fa:
                    36:02:35:41:3d:42:99:ac:bb:fb:f6:77:3d:b8:ff:
                    cd:74:20:85:e9:45:6d:94:fc:a1:d3:3b:85:9c:ed:
                    7a:4e:f8:de:b6:a8:2a:95:7a:a6:ea:5e:02:80:b3:
                    a4:ae:b7:d7:36:49:8d:73:e6:60:1f:0f:58:95:95:
                    97:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3D:82:C4:94:6B:77:34:51:83:97:2E:13:04:51:8D:AB:6B:86:E9
            X509v3 Authority Key Identifier:
                keyid:F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/5b5ab43fd28eadbbb6928616b86359fbf5b0a43d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/53a84133ecea8791e075c28348a5c7805616cc52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.136.0/22
                IPv6:
                  2803:6d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:46:00:a6:29:bc:44:d9:57:89:fb:29:07:5f:ed:1a:2d:
         cb:e7:a9:82:6c:22:e5:b7:f0:db:57:bf:95:54:fc:cb:c6:ca:
         dc:56:9f:7e:34:32:d6:17:83:4f:50:98:bc:d2:dd:29:c6:12:
         c9:e5:83:e3:a1:65:7d:f8:3a:15:9d:11:ff:ba:fa:8d:e5:83:
         54:37:6c:33:b2:8c:63:e8:3c:70:0e:31:fc:60:ee:84:fd:8c:
         a0:62:7a:d1:1d:47:0f:92:95:ca:dd:05:71:7c:48:bd:a8:40:
         4e:3a:02:2c:13:03:bc:10:11:9b:94:48:de:b6:83:ed:63:ed:
         4b:c2:3e:66:2a:f5:4c:82:b5:23:f4:b4:d1:1d:99:cb:0e:13:
         53:d6:37:3b:e3:1f:e3:0b:9d:df:a5:c8:e4:2c:69:b9:fb:e5:
         de:80:0a:b6:f9:2b:08:65:6d:59:69:db:35:f7:87:c4:f0:6b:
         a1:b5:ae:9f:45:66:4e:d2:00:c2:20:a6:33:7a:14:b1:a9:75:
         93:cd:19:3d:35:b4:3e:d2:64:cd:a8:05:8c:a6:bb:3d:63:5a:
         19:8e:d2:cb:68:cf:d4:5e:3c:d0:db:f3:84:81:cd:30:b2:72:
         d2:37:16:7b:73:b6:89:92:a4:cf:af:16:0c:f8:53:17:d2:cc:
         21:7c:9b:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDCaulMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUz
YTg0MTMzZWNlYTg3OTFlMDc1YzI4MzQ4YTVjNzgwNTYxNmNjNTIwHhcNMjMwNDI0
MjE0NDQ2WhcNMjUwNDI1MjE0NDQ2WjAzMTEwLwYDVQQDEyg1YjVhYjQzZmQyOGVh
ZGJiYjY5Mjg2MTZiODYzNTlmYmY1YjBhNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmWaOiV0QxvuujvEgUPe0/ln8vS/E4ry3uEJfPKTVYEmPamo1
E6IvUmVcUt+EWpOxKiZerxlP4CoLq6IpOFDN0VIYbMmZR/sxAUyT3Kev/EhHO6dt
ECncOKlvoulgIHDhB4Ce8thu1K5iRO6ss/N9jyQVI83NPiawdULAX+MUyM9L6o31
FeEg8sctFtbsObLXryULEDnsqooqf2EkjXlKBvNyQwrCr1vm01C7I7BPTWE8Fdon
wGY4+WU0+9epTt0HiPo2AjVBPUKZrLv79nc9uP/NdCCF6UVtlPyh0zuFnO16Tvje
tqgqlXqm6l4CgLOkrrfXNkmNc+ZgHw9YlZWXyQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFFQ9gsSUa3c0UYOXLhMEUY2ra4bpMB8GA1UdIwQYMBaAFPDOJQheC3d0fFSp
w3dZT0zXraxSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTNhODQx
MzNlY2VhODc5MWUwNzVjMjgzNDhhNWM3ODA1NjE2Y2M1Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDNiM2QyMjQtOGM1MC00N2E0LTg4NmEtMDEzODA5
ZmY3MTRjLzViNWFiNDNmZDI4ZWFkYmJiNjkyODYxNmI4NjM1OWZiZjViMGE0M2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kM2IzZDIyNC04YzUwLTQ3YTQtODg2YS0wMTM4
MDlmZjcxNGMvNTNhODQxMzNlY2VhODc5MWUwNzVjMjgzNDhhNWM3ODA1NjE2Y2M1
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAoNIiDANBAIAAjAHAwUAKANtEDANBgkqhkiG9w0BAQsFAAOC
AQEAADpGAKYpvETZV4n7KQdf7Roty+epgmwi5bfw21e/lVT8y8bK3FaffjQy1heD
T1CYvNLdKcYSyeWD46Flffg6FZ0R/7r6jeWDVDdsM7KMY+g8cA4x/GDuhP2MoGJ6
0R1HD5KVyt0FcXxIvahATjoCLBMDvBARm5RI3raD7WPtS8I+Zir1TIK1I/S00R2Z
yw4TU9Y3O+Mf4wud36XI5Cxpufvl3oAKtvkrCGVtWWnbNfeHxPBrobWun0VmTtIA
wiCmM3oUsal1k80ZPTW0PtJkzagFjKa7PWNaGY7Sy2jP1F480NvzhIHNMLJy0jcW
e3O2iZKkz68WDPhTF9LMIXybGA==
-----END CERTIFICATE-----