Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/a05ad19c364cb76ec18d7ad4670fedfc680503b3.roa
File:                     a05ad19c364cb76ec18d7ad4670fedfc680503b3.roa (raw, json)
Hash identifier:          78SrvjZ6uRPLUGjx6Q1CdnkfQRSueankMxNlmvw8TSw=
Subject key identifier:   5D:9C:64:00:10:30:29:DA:5C:E8:A4:11:94:BF:21:81:9F:91:EF:12
Certificate issuer:       /CN=d150a188184eb3e194f963dfc48dfa17a2509aa8
Certificate serial:       0D97DB
Authority key identifier: 21:20:91:3C:94:CA:E1:FF:C4:4E:C9:5A:B1:74:28:10:39:8E:02:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d150a188184eb3e194f963dfc48dfa17a2509aa8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/a05ad19c364cb76ec18d7ad4670fedfc680503b3.roa
Signing time:             Wed 24 Mar 2021 14:38:50 +0000
ROA not before:           Wed 24 Mar 2021 14:38:49 +0000
ROA not after:            Tue 24 Mar 2026 14:38:49 +0000
asID:                     264801
IP address blocks:        170.238.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890843 (0xd97db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d150a188184eb3e194f963dfc48dfa17a2509aa8
        Validity
            Not Before: Mar 24 14:38:49 2021 GMT
            Not After : Mar 24 14:38:49 2026 GMT
        Subject: CN=a05ad19c364cb76ec18d7ad4670fedfc680503b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4f:5f:36:6b:a0:28:25:c4:e9:57:dc:44:80:
                    7a:78:42:70:7c:5c:3c:7f:f1:7d:ab:7a:c0:db:bc:
                    20:25:18:dc:f4:ec:1a:ba:b3:7e:11:8f:57:81:f6:
                    69:47:e7:3a:e2:12:2b:c1:af:e7:e6:52:ea:73:d0:
                    62:91:1e:4b:74:7f:a0:74:91:67:db:b3:d0:8b:de:
                    28:33:37:12:18:a0:b0:29:d8:a3:dc:93:c4:a3:d9:
                    93:38:db:07:99:bd:a1:51:ac:e4:92:29:26:d9:a2:
                    2c:94:49:a6:be:5c:6b:24:08:7f:3a:4b:7f:e8:cd:
                    f4:9b:c4:b4:07:36:fd:c0:3a:31:d4:69:5f:89:51:
                    1f:28:e0:61:00:c0:76:20:94:c0:94:81:ab:5f:93:
                    f4:95:85:52:38:7d:ec:af:f5:18:90:05:d1:53:0d:
                    96:3a:cd:de:bd:ed:f7:4d:8b:86:19:e9:da:33:1a:
                    d1:aa:63:23:13:dd:ee:9b:c3:8d:e4:3a:6e:27:b7:
                    6f:b5:c4:d5:cc:5a:a4:ff:65:4c:b8:e5:4a:5d:be:
                    c2:68:69:d8:4b:8a:7d:19:74:6e:1a:15:d5:62:5f:
                    98:86:05:25:41:78:52:f4:24:51:89:9c:0a:16:d5:
                    a5:d3:23:2e:27:e0:33:09:fe:b9:8e:45:f1:78:06:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9C:64:00:10:30:29:DA:5C:E8:A4:11:94:BF:21:81:9F:91:EF:12
            X509v3 Authority Key Identifier:
                keyid:21:20:91:3C:94:CA:E1:FF:C4:4E:C9:5A:B1:74:28:10:39:8E:02:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d150a188184eb3e194f963dfc48dfa17a2509aa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/a05ad19c364cb76ec18d7ad4670fedfc680503b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/d150a188184eb3e194f963dfc48dfa17a2509aa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:e7:41:83:ac:50:48:2b:50:ec:1f:31:c6:81:61:3f:c0:
         ae:fd:92:2e:db:d7:e7:ea:fe:ef:a8:7b:8d:3c:90:2e:6f:11:
         2b:5c:04:6a:9b:49:b1:76:f9:4d:47:4c:40:10:ac:32:3c:43:
         5a:fd:ec:b0:49:33:5f:c5:d9:87:94:b5:69:08:43:13:c0:d8:
         bd:56:27:4c:7b:88:e8:dd:5a:ab:fe:c4:59:22:84:b7:15:e3:
         7d:00:e7:91:26:72:38:81:1d:28:86:83:db:e7:30:ee:12:09:
         62:d2:e8:ff:8e:be:54:7e:3a:39:00:d5:61:ec:28:76:e5:91:
         70:a9:1b:53:aa:f5:5e:07:fc:a3:83:07:d0:0f:7b:c9:b0:7d:
         c5:de:2e:82:dc:a9:1b:a6:2a:52:2a:cf:d8:17:d0:08:34:18:
         19:a8:86:3d:e7:14:1f:35:26:0d:36:b7:0b:5e:cb:3a:04:df:
         1d:57:ac:4c:f4:ba:e1:6f:88:f2:e3:40:84:57:69:b9:34:76:
         e5:12:96:82:4f:96:26:8a:82:ed:88:be:77:d4:0d:a2:4c:c6:
         85:1c:a7:0b:d0:31:71:bd:60:6b:39:d7:a2:ab:7e:eb:92:1d:
         7d:1b:e3:be:c5:ef:e4:61:18:63:29:40:2b:8b:32:bf:4b:da:
         8d:02:d3:b3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDZfbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQx
NTBhMTg4MTg0ZWIzZTE5NGY5NjNkZmM0OGRmYTE3YTI1MDlhYTgwHhcNMjEwMzI0
MTQzODQ5WhcNMjYwMzI0MTQzODQ5WjAzMTEwLwYDVQQDEyhhMDVhZDE5YzM2NGNi
NzZlYzE4ZDdhZDQ2NzBmZWRmYzY4MDUwM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi09fNmugKCXE6VfcRIB6eEJwfFw8f/F9q3rA27wgJRjc9Owa
urN+EY9XgfZpR+c64hIrwa/n5lLqc9BikR5LdH+gdJFn27PQi94oMzcSGKCwKdij
3JPEo9mTONsHmb2hUazkkikm2aIslEmmvlxrJAh/Okt/6M30m8S0Bzb9wDox1Glf
iVEfKOBhAMB2IJTAlIGrX5P0lYVSOH3sr/UYkAXRUw2WOs3eve33TYuGGenaMxrR
qmMjE93um8ON5DpuJ7dvtcTVzFqk/2VMuOVKXb7CaGnYS4p9GXRuGhXVYl+YhgUl
QXhS9CRRiZwKFtWl0yMuJ+AzCf65jkXxeAbXbQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFF2cZAAQMCnaXOikEZS/IYGfke8SMB8GA1UdIwQYMBaAFCEgkTyUyuH/xE7J
WrF0KBA5jgJ5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDE1MGEx
ODgxODRlYjNlMTk0Zjk2M2RmYzQ4ZGZhMTdhMjUwOWFhOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGEwZTg0MzEtODU0Ni00MDhiLWI4MjMtZDgyNGQ2
NzY4ZjQxL2EwNWFkMTljMzY0Y2I3NmVjMThkN2FkNDY3MGZlZGZjNjgwNTAzYjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYTBlODQzMS04NTQ2LTQwOGItYjgyMy1kODI0
ZDY3NjhmNDEvZDE1MGExODgxODRlYjNlMTk0Zjk2M2RmYzQ4ZGZhMTdhMjUwOWFh
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaruqjANBgkqhkiG9w0BAQsFAAOCAQEAG7LnQYOsUEgrUOwf
McaBYT/Arv2SLtvX5+r+76h7jTyQLm8RK1wEaptJsXb5TUdMQBCsMjxDWv3ssEkz
X8XZh5S1aQhDE8DYvVYnTHuI6N1aq/7EWSKEtxXjfQDnkSZyOIEdKIaD2+cw7hIJ
YtLo/46+VH46OQDVYewoduWRcKkbU6r1Xgf8o4MH0A97ybB9xd4ugtypG6YqUirP
2BfQCDQYGaiGPecUHzUmDTa3C17LOgTfHVesTPS64W+I8uNAhFdpuTR25RKWgk+W
JoqC7Yi+d9QNokzGhRynC9Axcb1gaznXoqt+65IdfRvjvsXv5GEYYylAK4syv0va
jQLTsw==
-----END CERTIFICATE-----