Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20c20ab5-9258-48f4-b922-f7ac2f2d6dd3/8eb3efa3575003cf2f37a07478d7394f00512c84.roa
File:                     8eb3efa3575003cf2f37a07478d7394f00512c84.roa (raw, json)
Hash identifier:          xJ0Rjz5rpk6p3xke3Vp5d6YL8XyH2OHu60hp/kHHj9k=
Subject key identifier:   F6:BA:86:AC:4C:CB:C9:9B:6D:62:81:6A:2D:F0:6A:D9:FA:25:AD:0B
Certificate issuer:       /CN=3297e1cfbd8d4713cf0fe59ab5a26d0e1c6e5ba1
Certificate serial:       0BEE35
Authority key identifier: 27:04:E5:EB:EC:9F:28:32:9C:CE:32:B2:30:A9:9B:EC:C7:F9:A5:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3297e1cfbd8d4713cf0fe59ab5a26d0e1c6e5ba1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20c20ab5-9258-48f4-b922-f7ac2f2d6dd3/8eb3efa3575003cf2f37a07478d7394f00512c84.roa
Signing time:             Wed 24 Mar 2021 14:33:40 +0000
ROA not before:           Wed 24 Mar 2021 14:33:40 +0000
ROA not after:            Tue 24 Mar 2026 14:33:40 +0000
asID:                     266835
IP address blocks:        45.237.136.0/22 maxlen: 22
                          2803:cca0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781877 (0xbee35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3297e1cfbd8d4713cf0fe59ab5a26d0e1c6e5ba1
        Validity
            Not Before: Mar 24 14:33:40 2021 GMT
            Not After : Mar 24 14:33:40 2026 GMT
        Subject: CN=8eb3efa3575003cf2f37a07478d7394f00512c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:75:73:53:f2:a1:50:c7:7a:b1:05:42:b2:d5:
                    23:46:60:fb:62:f4:77:cd:49:94:64:80:08:98:97:
                    d3:b1:d7:8c:4a:46:c7:69:62:3d:a4:b3:40:ed:3e:
                    0c:c8:61:93:b2:d5:37:d6:88:aa:28:64:cf:d7:77:
                    bf:a7:4e:e8:6f:78:c7:2f:87:d5:c8:f5:15:e9:62:
                    17:a2:93:90:f9:ac:17:af:69:77:41:56:44:b9:6a:
                    5f:ca:66:27:ce:e8:74:30:ea:9a:e2:45:2a:6f:b9:
                    41:fc:68:bc:7c:9f:24:26:8f:08:2d:f7:1b:ce:14:
                    e8:dc:0f:84:99:da:d5:8e:ab:f7:a3:f7:6b:ac:00:
                    73:c7:37:ff:1a:c0:e0:18:13:73:eb:b8:b7:97:ec:
                    82:5d:ff:44:74:67:28:f7:c9:4f:67:6c:a9:38:2d:
                    67:c3:3f:3a:dd:18:22:b6:99:8d:df:89:43:76:58:
                    cd:3c:3d:e1:88:bb:ca:1d:0f:87:80:e3:61:0a:b4:
                    db:ac:a2:7f:6f:c5:4f:b9:c2:69:96:db:0a:36:48:
                    30:c0:09:b1:4e:7e:7b:59:e9:8f:3c:87:9f:96:4a:
                    77:ab:f1:ee:a1:ce:c2:3a:1b:da:c0:e0:cb:50:4a:
                    9a:be:1c:c3:33:b7:8d:e6:5e:47:33:fe:2d:3d:19:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:86:AC:4C:CB:C9:9B:6D:62:81:6A:2D:F0:6A:D9:FA:25:AD:0B
            X509v3 Authority Key Identifier:
                keyid:27:04:E5:EB:EC:9F:28:32:9C:CE:32:B2:30:A9:9B:EC:C7:F9:A5:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3297e1cfbd8d4713cf0fe59ab5a26d0e1c6e5ba1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20c20ab5-9258-48f4-b922-f7ac2f2d6dd3/8eb3efa3575003cf2f37a07478d7394f00512c84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20c20ab5-9258-48f4-b922-f7ac2f2d6dd3/3297e1cfbd8d4713cf0fe59ab5a26d0e1c6e5ba1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.136.0/22
                IPv6:
                  2803:cca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:d8:7a:4b:48:14:8b:17:a8:fc:55:81:04:2b:63:3f:a0:97:
         44:09:55:9d:f4:0d:dc:15:cb:cf:8c:1d:ee:0d:df:19:9a:25:
         e3:00:76:8e:cc:bc:35:7a:b6:c9:96:57:26:ce:9d:a3:0e:9e:
         a2:81:4d:d9:1e:03:d6:74:01:cc:9b:3a:4a:7c:81:22:26:b7:
         75:cd:57:2f:41:42:97:90:ed:50:8c:23:6e:0e:be:44:d5:d0:
         d0:a1:10:4f:dd:23:ec:68:fa:18:59:c7:65:ec:d9:5d:a8:3c:
         5d:2b:dc:ef:5c:bf:eb:50:f3:4a:c3:b0:4a:c3:c8:d2:f0:08:
         66:3f:ef:fc:20:ce:05:b3:f8:a8:28:c3:86:cb:ea:a9:80:1f:
         9e:ee:1e:40:a6:27:0d:43:80:e2:89:65:42:3d:d7:f7:0a:87:
         d5:7e:63:f4:9d:2e:92:4e:c0:c1:28:03:5f:da:44:41:36:a8:
         68:6e:83:c6:9b:d4:05:dd:41:0f:45:11:48:e7:89:7b:ad:08:
         3c:19:fc:81:2d:de:af:18:8f:ea:31:76:4e:5a:3f:6b:bd:f0:
         e2:25:c6:6f:57:5e:65:f7:ba:a3:9a:d9:8a:11:ab:04:0c:e6:
         74:fc:2c:15:59:66:e9:d9:b6:29:84:9d:76:0e:f0:8f:7f:9e:
         d4:2c:73:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDC+41MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMy
OTdlMWNmYmQ4ZDQ3MTNjZjBmZTU5YWI1YTI2ZDBlMWM2ZTViYTEwHhcNMjEwMzI0
MTQzMzQwWhcNMjYwMzI0MTQzMzQwWjAzMTEwLwYDVQQDEyg4ZWIzZWZhMzU3NTAw
M2NmMmYzN2EwNzQ3OGQ3Mzk0ZjAwNTEyYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhXVzU/KhUMd6sQVCstUjRmD7YvR3zUmUZIAImJfTsdeMSkbH
aWI9pLNA7T4MyGGTstU31oiqKGTP13e/p07ob3jHL4fVyPUV6WIXopOQ+awXr2l3
QVZEuWpfymYnzuh0MOqa4kUqb7lB/Gi8fJ8kJo8ILfcbzhTo3A+EmdrVjqv3o/dr
rABzxzf/GsDgGBNz67i3l+yCXf9EdGco98lPZ2ypOC1nwz863RgitpmN34lDdljN
PD3hiLvKHQ+HgONhCrTbrKJ/b8VPucJpltsKNkgwwAmxTn57WemPPIeflkp3q/Hu
oc7COhvawODLUEqavhzDM7eN5l5HM/4tPRkBbQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFPa6hqxMy8mbbWKBai3watn6Ja0LMB8GA1UdIwQYMBaAFCcE5evsnygynM4y
sjCpm+zH+aUSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzI5N2Ux
Y2ZiZDhkNDcxM2NmMGZlNTlhYjVhMjZkMGUxYzZlNWJhMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjBjMjBhYjUtOTI1OC00OGY0LWI5MjItZjdhYzJm
MmQ2ZGQzLzhlYjNlZmEzNTc1MDAzY2YyZjM3YTA3NDc4ZDczOTRmMDA1MTJjODQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMGMyMGFiNS05MjU4LTQ4ZjQtYjkyMi1mN2Fj
MmYyZDZkZDMvMzI5N2UxY2ZiZDhkNDcxM2NmMGZlNTlhYjVhMjZkMGUxYzZlNWJh
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3tiDANBAIAAjAHAwUAKAPMoDANBgkqhkiG9w0BAQsFAAOC
AQEARNh6S0gUixeo/FWBBCtjP6CXRAlVnfQN3BXLz4wd7g3fGZol4wB2jsy8NXq2
yZZXJs6dow6eooFN2R4D1nQBzJs6SnyBIia3dc1XL0FCl5DtUIwjbg6+RNXQ0KEQ
T90j7Gj6GFnHZezZXag8XSvc71y/61DzSsOwSsPI0vAIZj/v/CDOBbP4qCjDhsvq
qYAfnu4eQKYnDUOA4ollQj3X9wqH1X5j9J0ukk7AwSgDX9pEQTaoaG6DxpvUBd1B
D0URSOeJe60IPBn8gS3erxiP6jF2Tlo/a73w4iXGb1deZfe6o5rZihGrBAzmdPws
FVlm6dm2KYSddg7wj3+e1Cxz1w==
-----END CERTIFICATE-----