Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84ce9f8a-adcf-460c-ba47-216ed681c7a0/7ca6e9ed7efe39c1de590f5be6118b0e1c7a6d38.roa
File:                     7ca6e9ed7efe39c1de590f5be6118b0e1c7a6d38.roa (raw, json)
Hash identifier:          Sh0/d9cUTVZ55zm7EDfPW+HvjATjpRjhTPPQCwFlqK0=
Subject key identifier:   FF:D9:D5:29:85:75:09:C0:8E:4F:FB:4C:65:75:13:85:58:65:B2:FD
Certificate issuer:       /CN=dcd0175219ae8a3b799bba0a1007684da4802bbf
Certificate serial:       037769
Authority key identifier: 8C:AD:49:52:BF:91:FF:10:4A:1B:59:37:BF:BF:45:63:98:91:C2:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dcd0175219ae8a3b799bba0a1007684da4802bbf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84ce9f8a-adcf-460c-ba47-216ed681c7a0/7ca6e9ed7efe39c1de590f5be6118b0e1c7a6d38.roa
Signing time:             Wed 24 Mar 2021 14:47:03 +0000
ROA not before:           Wed 24 Mar 2021 14:47:03 +0000
ROA not after:            Tue 24 Mar 2026 14:47:03 +0000
asID:                     61502
IP address blocks:        201.131.110.0/23 maxlen: 23
                          2801:1e:e000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227177 (0x37769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcd0175219ae8a3b799bba0a1007684da4802bbf
        Validity
            Not Before: Mar 24 14:47:03 2021 GMT
            Not After : Mar 24 14:47:03 2026 GMT
        Subject: CN=7ca6e9ed7efe39c1de590f5be6118b0e1c7a6d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:9b:f5:c9:f0:e8:ef:84:42:fd:b0:b7:66:
                    48:dc:3e:a9:1c:20:37:78:87:14:1b:00:44:90:0b:
                    69:0a:cd:0e:82:d3:e7:bc:55:06:38:b1:47:5b:e4:
                    89:65:77:cb:d2:de:f5:0f:d3:6e:d0:7f:df:74:83:
                    d2:f2:89:48:d6:8c:75:38:d7:e1:0e:05:ef:b2:76:
                    c3:1f:9a:1e:d3:a2:66:93:e8:59:e0:6f:55:30:52:
                    ed:ee:b5:d9:53:18:1e:ef:6d:ad:4d:2c:ff:22:ab:
                    05:06:b8:2a:d9:e8:96:cd:6d:21:84:96:cd:86:b2:
                    07:2b:d7:a6:26:96:49:46:cd:db:e7:29:56:e7:69:
                    e1:10:90:70:28:bb:87:18:61:7b:92:da:dc:eb:79:
                    8d:bc:e2:09:53:ad:2d:ac:16:79:d2:c0:83:c0:45:
                    dd:f3:af:6a:85:bc:cb:15:d7:6c:2a:71:4e:f5:92:
                    06:eb:2c:83:d6:35:29:63:ca:76:09:8c:50:77:32:
                    db:66:3f:d9:ca:97:f6:eb:15:a8:b0:38:ec:62:0c:
                    12:fc:f0:9b:c8:de:e7:b2:a7:84:8c:a3:e9:48:03:
                    13:8d:3a:99:ba:41:7b:69:78:10:97:10:b4:f7:39:
                    14:dd:63:df:b7:fe:34:f9:45:7e:d1:e2:33:2a:3d:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D9:D5:29:85:75:09:C0:8E:4F:FB:4C:65:75:13:85:58:65:B2:FD
            X509v3 Authority Key Identifier:
                keyid:8C:AD:49:52:BF:91:FF:10:4A:1B:59:37:BF:BF:45:63:98:91:C2:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dcd0175219ae8a3b799bba0a1007684da4802bbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84ce9f8a-adcf-460c-ba47-216ed681c7a0/7ca6e9ed7efe39c1de590f5be6118b0e1c7a6d38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84ce9f8a-adcf-460c-ba47-216ed681c7a0/dcd0175219ae8a3b799bba0a1007684da4802bbf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.110.0/23
                IPv6:
                  2801:1e:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:c8:c5:8d:99:a5:ed:c9:16:de:89:e2:7a:14:79:a0:5b:db:
         0d:98:64:aa:63:92:50:9b:2e:eb:76:ab:3e:07:3a:d9:26:6e:
         44:56:65:1b:4b:c5:5e:f6:c7:42:e7:31:35:af:93:af:13:8c:
         64:31:99:28:bd:f6:c5:a6:70:7d:66:fb:be:3e:de:af:f3:53:
         19:c1:2e:44:04:28:89:1a:70:14:70:fc:cd:1f:66:0f:50:40:
         02:e3:66:7a:a5:08:4d:02:2e:8b:bd:ad:3d:ae:51:44:96:25:
         c0:1d:a8:6e:ec:0a:66:b1:b3:c5:f6:03:98:de:29:8b:80:89:
         be:a2:ac:fa:b1:8b:c7:63:35:11:cf:b4:57:1e:6b:b5:dd:2a:
         77:d4:67:3d:ca:cb:2f:d1:b9:9e:2e:5b:1b:9b:83:c3:79:4d:
         38:dd:ce:59:fe:bb:fe:d2:e3:57:52:df:89:f7:de:69:9b:d3:
         5b:96:2d:9d:84:5f:8e:82:44:7d:4d:19:67:47:38:64:27:08:
         9b:64:32:9a:3e:fd:c2:50:bc:e1:56:8f:6b:51:e5:25:ae:45:
         66:9c:f6:5e:ec:de:64:99:7e:71:e5:49:c7:fc:67:94:0f:4b:
         b2:43:8f:59:7f:92:59:66:a5:10:96:c8:df:e2:29:b7:2b:ac:
         db:21:6f:40
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDA3dpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRj
ZDAxNzUyMTlhZThhM2I3OTliYmEwYTEwMDc2ODRkYTQ4MDJiYmYwHhcNMjEwMzI0
MTQ0NzAzWhcNMjYwMzI0MTQ0NzAzWjAzMTEwLwYDVQQDEyg3Y2E2ZTllZDdlZmUz
OWMxZGU1OTBmNWJlNjExOGIwZTFjN2E2ZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkqqb9cnw6O+EQv2wt2ZI3D6pHCA3eIcUGwBEkAtpCs0OgtPn
vFUGOLFHW+SJZXfL0t71D9Nu0H/fdIPS8olI1ox1ONfhDgXvsnbDH5oe06Jmk+hZ
4G9VMFLt7rXZUxge722tTSz/IqsFBrgq2eiWzW0hhJbNhrIHK9emJpZJRs3b5ylW
52nhEJBwKLuHGGF7ktrc63mNvOIJU60trBZ50sCDwEXd869qhbzLFddsKnFO9ZIG
6yyD1jUpY8p2CYxQdzLbZj/Zypf26xWosDjsYgwS/PCbyN7nsqeEjKPpSAMTjTqZ
ukF7aXgQlxC09zkU3WPft/40+UV+0eIzKj3qwwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFP/Z1SmFdQnAjk/7TGV1E4VYZbL9MB8GA1UdIwQYMBaAFIytSVK/kf8QShtZ
N7+/RWOYkcLqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGNkMDE3
NTIxOWFlOGEzYjc5OWJiYTBhMTAwNzY4NGRhNDgwMmJiZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODRjZTlmOGEtYWRjZi00NjBjLWJhNDctMjE2ZWQ2
ODFjN2EwLzdjYTZlOWVkN2VmZTM5YzFkZTU5MGY1YmU2MTE4YjBlMWM3YTZkMzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NGNlOWY4YS1hZGNmLTQ2MGMtYmE0Ny0yMTZl
ZDY4MWM3YTAvZGNkMDE3NTIxOWFlOGEzYjc5OWJiYTBhMTAwNzY4NGRhNDgwMmJi
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAcmDbjAPBAIAAjAJAwcAKAEAHuAAMA0GCSqGSIb3DQEBCwUA
A4IBAQCRyMWNmaXtyRbeieJ6FHmgW9sNmGSqY5JQmy7rdqs+BzrZJm5EVmUbS8Ve
9sdC5zE1r5OvE4xkMZkovfbFpnB9Zvu+Pt6v81MZwS5EBCiJGnAUcPzNH2YPUEAC
42Z6pQhNAi6Lva09rlFEliXAHahu7ApmsbPF9gOY3imLgIm+oqz6sYvHYzURz7RX
Hmu13Sp31Gc9yssv0bmeLlsbm4PDeU043c5Z/rv+0uNXUt+J995pm9Nbli2dhF+O
gkR9TRlnRzhkJwibZDKaPv3CULzhVo9rUeUlrkVmnPZe7N5kmX5x5UnH/GeUD0uy
Q49Zf5JZZqUQlsjf4im3K6zbIW9A
-----END CERTIFICATE-----