Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/a88328cf697b78feb842aceea7e9b1c9f70f4832.roa
File:                     a88328cf697b78feb842aceea7e9b1c9f70f4832.roa (raw, json)
Hash identifier:          9Iin9x6A0p8hmAen3TzEhoZGm1X/DlUeQEYASeY6WrI=
Subject key identifier:   D6:6D:AC:EB:75:A0:FA:BE:FB:7E:01:0B:85:49:63:58:53:19:4B:10
Certificate issuer:       /CN=fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10
Certificate serial:       0C2604
Authority key identifier: 78:76:9D:A7:C7:99:59:9E:F4:6F:DD:79:75:96:43:C3:76:83:7E:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/a88328cf697b78feb842aceea7e9b1c9f70f4832.roa
Signing time:             Wed 24 Mar 2021 14:31:21 +0000
ROA not before:           Wed 24 Mar 2021 14:31:21 +0000
ROA not after:            Tue 24 Mar 2026 14:31:21 +0000
asID:                     264712
IP address blocks:        170.150.8.0/22 maxlen: 22
                          2803:eb40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796164 (0xc2604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10
        Validity
            Not Before: Mar 24 14:31:21 2021 GMT
            Not After : Mar 24 14:31:21 2026 GMT
        Subject: CN=a88328cf697b78feb842aceea7e9b1c9f70f4832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:25:78:2b:a0:f6:cf:7c:22:ac:6e:dc:8b:
                    b0:57:f0:e4:2f:3f:68:04:cf:13:1a:0c:ce:db:f2:
                    f1:d8:9c:22:6e:df:38:e4:32:6d:81:eb:86:5d:60:
                    f3:b0:ed:5f:7e:0b:6c:d7:ff:e8:6e:fa:63:88:1c:
                    8a:06:32:35:a5:4f:9a:5a:e7:98:8c:98:5b:46:73:
                    64:c3:ec:4c:96:b2:78:fd:28:b2:1e:7f:9a:e8:6a:
                    83:2f:28:d1:8d:9d:16:69:ce:f5:39:ae:2f:57:7c:
                    e7:49:43:e7:7f:14:13:01:b0:02:c6:8d:b7:e5:46:
                    9b:dd:ca:2b:eb:0e:62:76:1f:bd:2b:ff:63:a5:31:
                    3c:c5:7e:2e:48:1f:11:8e:82:ef:4c:d3:eb:52:f5:
                    54:58:ef:e1:12:99:d4:ae:eb:bc:ce:3c:92:98:6d:
                    f1:15:07:52:ea:d7:f4:39:86:ef:33:0d:0b:4d:8d:
                    68:f2:0a:02:93:ad:95:da:ba:ab:52:72:71:bd:49:
                    58:26:c2:d7:58:be:f0:45:a5:8b:de:7d:1f:6d:76:
                    81:6d:9f:01:a8:94:e9:98:6c:de:3d:8b:0a:2d:b1:
                    dd:77:26:b9:85:6d:40:b6:ec:e6:fe:24:59:80:19:
                    07:5b:13:1c:4c:d6:7b:14:88:01:3f:e9:55:e0:14:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6D:AC:EB:75:A0:FA:BE:FB:7E:01:0B:85:49:63:58:53:19:4B:10
            X509v3 Authority Key Identifier:
                keyid:78:76:9D:A7:C7:99:59:9E:F4:6F:DD:79:75:96:43:C3:76:83:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/a88328cf697b78feb842aceea7e9b1c9f70f4832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22f5880e-8064-481c-a14b-118dd439a8ca/fdfa2f7c4a303dc3bdc0422cc6b8bdc234ea5d10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.8.0/22
                IPv6:
                  2803:eb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:c7:3c:a7:74:d3:af:77:94:73:2b:b5:11:7d:54:82:e6:a3:
         db:63:00:b6:41:40:28:b0:85:01:c6:f4:36:5f:3d:4e:cc:c2:
         96:20:0d:f1:9e:19:5e:a4:ea:8d:b4:46:f7:8b:05:aa:c9:a0:
         74:0d:09:62:e5:fe:f0:3c:61:b4:fc:0d:5e:4d:2c:11:7e:eb:
         ae:51:6d:2f:e8:6f:df:ff:58:9f:38:96:48:c7:86:de:63:9e:
         af:a7:6f:f3:84:da:d0:37:76:1c:96:54:ef:83:ce:17:aa:8b:
         d9:1d:47:d9:75:0a:37:d8:ff:d5:92:d7:79:7d:83:73:24:4c:
         df:a8:74:1d:38:23:5d:54:67:d1:b0:f7:cc:12:77:b4:ac:09:
         e9:53:5a:e5:58:ef:af:53:5b:54:39:74:64:ce:5e:65:e7:a8:
         49:f2:9f:41:4a:fe:ed:c8:84:f8:12:04:8f:58:b8:6d:3b:bc:
         65:28:26:8f:c1:c0:4d:d7:e3:ce:8e:7c:82:ea:e7:d7:24:5a:
         37:cf:4c:c9:a0:01:86:03:c7:5e:f0:9a:40:94:9b:4a:cc:49:
         26:54:c2:63:51:4e:93:6f:50:33:de:29:ab:7c:7c:0f:f3:23:
         1c:22:fd:50:c5:a7:19:84:55:a7:21:95:41:9e:23:7f:91:02:
         f9:22:98:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDCYEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk
ZmEyZjdjNGEzMDNkYzNiZGMwNDIyY2M2YjhiZGMyMzRlYTVkMTAwHhcNMjEwMzI0
MTQzMTIxWhcNMjYwMzI0MTQzMTIxWjAzMTEwLwYDVQQDEyhhODgzMjhjZjY5N2I3
OGZlYjg0MmFjZWVhN2U5YjFjOWY3MGY0ODMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsPoleCug9s98Iqxu3IuwV/DkLz9oBM8TGgzO2/Lx2Jwibt84
5DJtgeuGXWDzsO1ffgts1//obvpjiByKBjI1pU+aWueYjJhbRnNkw+xMlrJ4/Siy
Hn+a6GqDLyjRjZ0Wac71Oa4vV3znSUPnfxQTAbACxo235Uab3cor6w5idh+9K/9j
pTE8xX4uSB8RjoLvTNPrUvVUWO/hEpnUruu8zjySmG3xFQdS6tf0OYbvMw0LTY1o
8goCk62V2rqrUnJxvUlYJsLXWL7wRaWL3n0fbXaBbZ8BqJTpmGzePYsKLbHddya5
hW1Atuzm/iRZgBkHWxMcTNZ7FIgBP+lV4BSh0wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNZtrOt1oPq++34BC4VJY1hTGUsQMB8GA1UdIwQYMBaAFHh2nafHmVme9G/d
eXWWQ8N2g36/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmRmYTJm
N2M0YTMwM2RjM2JkYzA0MjJjYzZiOGJkYzIzNGVhNWQxMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjJmNTg4MGUtODA2NC00ODFjLWExNGItMTE4ZGQ0
MzlhOGNhL2E4ODMyOGNmNjk3Yjc4ZmViODQyYWNlZWE3ZTliMWM5ZjcwZjQ4MzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMmY1ODgwZS04MDY0LTQ4MWMtYTE0Yi0xMThk
ZDQzOWE4Y2EvZmRmYTJmN2M0YTMwM2RjM2JkYzA0MjJjYzZiOGJkYzIzNGVhNWQx
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqqWCDANBAIAAjAHAwUAKAPrQDANBgkqhkiG9w0BAQsFAAOC
AQEAHcc8p3TTr3eUcyu1EX1Uguaj22MAtkFAKLCFAcb0Nl89TszCliAN8Z4ZXqTq
jbRG94sFqsmgdA0JYuX+8DxhtPwNXk0sEX7rrlFtL+hv3/9YnziWSMeG3mOer6dv
84Ta0Dd2HJZU74POF6qL2R1H2XUKN9j/1ZLXeX2DcyRM36h0HTgjXVRn0bD3zBJ3
tKwJ6VNa5Vjvr1NbVDl0ZM5eZeeoSfKfQUr+7ciE+BIEj1i4bTu8ZSgmj8HATdfj
zo58gurn1yRaN89MyaABhgPHXvCaQJSbSsxJJlTCY1FOk29QM94pq3x8D/MjHCL9
UMWnGYRVpyGVQZ4jf5EC+SKY7w==
-----END CERTIFICATE-----