Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6de24cd-bcb0-42cf-a230-16478a4d1d89/ed8fb14679bc9c31a4766206ff0e7fdf92a223f8.roa
File:                     ed8fb14679bc9c31a4766206ff0e7fdf92a223f8.roa (raw, json)
Hash identifier:          uk88268SZ/MgBJjH1N14tVD8bwh1CGfam5TGWzEXadI=
Subject key identifier:   22:5A:DA:0E:45:9D:60:75:3D:B2:BB:CA:D8:CE:7B:11:11:28:7B:7D
Certificate issuer:       /CN=d6d77baa9937f62e953ae062b4a1e076cbffad05
Certificate serial:       093A99
Authority key identifier: B9:19:BF:8D:C2:74:37:95:DB:F8:5D:BB:1C:1C:C3:B0:24:F4:41:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6d77baa9937f62e953ae062b4a1e076cbffad05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6de24cd-bcb0-42cf-a230-16478a4d1d89/ed8fb14679bc9c31a4766206ff0e7fdf92a223f8.roa
Signing time:             Wed 24 Mar 2021 14:30:20 +0000
ROA not before:           Wed 24 Mar 2021 14:30:19 +0000
ROA not after:            Tue 24 Mar 2026 14:30:19 +0000
asID:                     263811
IP address blocks:        138.204.160.0/22 maxlen: 24
                          2803:d240::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604825 (0x93a99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d77baa9937f62e953ae062b4a1e076cbffad05
        Validity
            Not Before: Mar 24 14:30:19 2021 GMT
            Not After : Mar 24 14:30:19 2026 GMT
        Subject: CN=ed8fb14679bc9c31a4766206ff0e7fdf92a223f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:96:88:ac:d6:e0:f3:72:3a:d7:1f:94:65:
                    94:c0:bf:82:37:f7:c4:9a:82:a3:ad:a7:5d:46:c6:
                    69:17:86:6e:12:42:33:6a:a6:b0:f3:42:79:53:0f:
                    1f:34:4f:12:96:43:41:44:15:b2:e3:2a:16:54:76:
                    ad:b6:ff:52:c9:4d:44:00:3b:52:d2:4f:44:15:90:
                    b6:a3:03:ef:3f:8b:fb:a5:43:64:8d:b3:9a:0b:b6:
                    8c:8f:83:5d:3e:2f:6d:24:f4:58:fc:24:48:f8:d2:
                    c3:05:2c:48:28:16:36:76:0f:8b:5c:df:8a:dd:b2:
                    05:3a:79:68:fd:89:a0:c8:63:d6:0e:a4:f4:2a:c2:
                    85:ab:4b:90:48:93:24:21:59:cb:02:39:ec:01:b5:
                    04:81:45:69:d3:c0:ab:a8:d0:5c:43:de:62:7c:e1:
                    f3:49:a6:00:6c:56:27:cc:2c:1f:04:26:6e:7b:8b:
                    29:8c:c4:16:c2:09:d2:90:69:21:5a:22:b2:fa:f9:
                    33:bf:bf:cb:2d:aa:fb:32:19:56:0d:e8:f4:cd:14:
                    a5:44:df:80:3c:48:1b:63:ce:7a:6e:07:20:4c:b6:
                    20:7c:e0:e9:92:bb:5e:db:5e:38:5c:c1:b0:99:f8:
                    e8:31:8e:4d:00:d0:93:43:04:22:be:ec:93:a8:69:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5A:DA:0E:45:9D:60:75:3D:B2:BB:CA:D8:CE:7B:11:11:28:7B:7D
            X509v3 Authority Key Identifier:
                keyid:B9:19:BF:8D:C2:74:37:95:DB:F8:5D:BB:1C:1C:C3:B0:24:F4:41:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6d77baa9937f62e953ae062b4a1e076cbffad05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6de24cd-bcb0-42cf-a230-16478a4d1d89/ed8fb14679bc9c31a4766206ff0e7fdf92a223f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6de24cd-bcb0-42cf-a230-16478a4d1d89/d6d77baa9937f62e953ae062b4a1e076cbffad05.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.160.0/22
                IPv6:
                  2803:d240::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:2d:54:47:26:cc:b9:78:dc:68:18:42:e2:f4:df:14:03:08:
         9f:cc:ef:31:e6:84:27:8a:06:26:e0:7f:43:c3:ed:ba:2b:38:
         4f:d8:d2:76:8c:b5:19:09:8e:d5:27:aa:52:a7:1a:8f:1f:aa:
         0e:66:a2:a4:a6:92:36:19:69:f5:68:aa:a7:56:cd:e3:c7:e5:
         4b:cc:61:71:01:61:b2:cd:54:57:be:1f:5f:76:10:52:14:18:
         4f:3e:05:93:a4:77:ee:c6:ad:da:ad:c8:f5:33:48:c0:ec:5a:
         2d:7e:2e:af:63:f7:6d:84:58:38:f7:d3:62:a0:ee:f2:4e:84:
         59:71:33:c8:78:d9:8c:b7:7a:2e:6b:6e:e7:16:30:63:c9:42:
         e7:fd:e5:3c:01:7c:48:bc:32:a3:79:d2:8b:eb:e7:e8:bc:63:
         6b:26:ce:7d:bd:a9:15:f5:86:f8:63:89:a9:e6:50:55:71:6a:
         d5:d1:61:09:f8:aa:94:48:70:ed:61:c0:52:21:ed:a2:3c:46:
         3a:09:a0:8f:17:b2:72:94:18:c3:7a:5a:b0:1b:47:78:11:dc:
         49:75:41:16:50:55:fc:2e:84:38:d8:82:23:ce:dc:0f:7d:a7:
         bf:37:ff:94:29:83:be:66:0e:26:a2:13:a9:fb:10:29:08:ce:
         8b:f9:11:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDCTqZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2
ZDc3YmFhOTkzN2Y2MmU5NTNhZTA2MmI0YTFlMDc2Y2JmZmFkMDUwHhcNMjEwMzI0
MTQzMDE5WhcNMjYwMzI0MTQzMDE5WjAzMTEwLwYDVQQDEyhlZDhmYjE0Njc5YmM5
YzMxYTQ3NjYyMDZmZjBlN2ZkZjkyYTIyM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqeuWiKzW4PNyOtcflGWUwL+CN/fEmoKjraddRsZpF4ZuEkIz
aqaw80J5Uw8fNE8SlkNBRBWy4yoWVHattv9SyU1EADtS0k9EFZC2owPvP4v7pUNk
jbOaC7aMj4NdPi9tJPRY/CRI+NLDBSxIKBY2dg+LXN+K3bIFOnlo/YmgyGPWDqT0
KsKFq0uQSJMkIVnLAjnsAbUEgUVp08CrqNBcQ95ifOHzSaYAbFYnzCwfBCZue4sp
jMQWwgnSkGkhWiKy+vkzv7/LLar7MhlWDej0zRSlRN+APEgbY856bgcgTLYgfODp
krte2144XMGwmfjoMY5NANCTQwQivuyTqGmjoQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFCJa2g5FnWB1PbK7ytjOexERKHt9MB8GA1UdIwQYMBaAFLkZv43CdDeV2/hd
uxwcw7Ak9EFcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDZkNzdi
YWE5OTM3ZjYyZTk1M2FlMDYyYjRhMWUwNzZjYmZmYWQwNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTZkZTI0Y2QtYmNiMC00MmNmLWEyMzAtMTY0Nzhh
NGQxZDg5L2VkOGZiMTQ2NzliYzljMzFhNDc2NjIwNmZmMGU3ZmRmOTJhMjIzZjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNmRlMjRjZC1iY2IwLTQyY2YtYTIzMC0xNjQ3
OGE0ZDFkODkvZDZkNzdiYWE5OTM3ZjYyZTk1M2FlMDYyYjRhMWUwNzZjYmZmYWQw
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAorMoDANBAIAAjAHAwUAKAPSQDANBgkqhkiG9w0BAQsFAAOC
AQEAey1URybMuXjcaBhC4vTfFAMIn8zvMeaEJ4oGJuB/Q8Ptuis4T9jSdoy1GQmO
1SeqUqcajx+qDmaipKaSNhlp9Wiqp1bN48flS8xhcQFhss1UV74fX3YQUhQYTz4F
k6R37sat2q3I9TNIwOxaLX4ur2P3bYRYOPfTYqDu8k6EWXEzyHjZjLd6Lmtu5xYw
Y8lC5/3lPAF8SLwyo3nSi+vn6LxjaybOfb2pFfWG+GOJqeZQVXFq1dFhCfiqlEhw
7WHAUiHtojxGOgmgjxeycpQYw3pasBtHeBHcSXVBFlBV/C6EONiCI87cD32nvzf/
lCmDvmYOJqITqfsQKQjOi/kRrA==
-----END CERTIFICATE-----