Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/7fac3f1924b5450d36e6e7e54027afcb426c4cd5.roa
File:                     7fac3f1924b5450d36e6e7e54027afcb426c4cd5.roa (raw, json)
Hash identifier:          1L2On+QIYAWbt2l9JE2wPBmaxUpYctsoAHck4urmI4s=
Subject key identifier:   82:AD:73:84:FE:97:CC:04:EE:DC:3C:5E:03:FF:04:E8:5E:ED:73:34
Certificate issuer:       /CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
Certificate serial:       2E88
Authority key identifier: B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/7fac3f1924b5450d36e6e7e54027afcb426c4cd5.roa
Signing time:             Wed 24 Mar 2021 14:34:15 +0000
ROA not before:           Wed 24 Mar 2021 14:34:15 +0000
ROA not after:            Tue 24 Mar 2026 14:34:15 +0000
asID:                     64129
IP address blocks:        207.248.0.0/22 maxlen: 24
                          2803:3410::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11912 (0x2e88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
        Validity
            Not Before: Mar 24 14:34:15 2021 GMT
            Not After : Mar 24 14:34:15 2026 GMT
        Subject: CN=7fac3f1924b5450d36e6e7e54027afcb426c4cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:18:d6:8e:4c:2d:62:6c:71:88:5b:07:9e:2c:
                    4b:16:46:6c:f3:5b:ab:7b:4a:ee:6b:de:cd:22:0a:
                    ec:82:14:a4:8f:b8:8d:e8:e2:90:74:c9:1b:0d:38:
                    b8:ca:fe:a2:d6:58:52:f3:20:41:50:95:fb:9d:81:
                    7e:04:b9:dd:c9:6c:31:bd:a3:51:df:2a:8d:63:b9:
                    55:49:ef:8e:d5:1c:69:c5:84:90:ab:ab:a7:94:30:
                    35:e8:09:ee:f6:2d:18:11:c7:51:69:d8:b1:f5:e9:
                    bb:1d:ab:1f:43:11:e7:5c:d8:16:4c:2d:8f:bd:e1:
                    ed:d5:f0:5b:9e:7e:38:6b:51:74:43:73:17:eb:32:
                    e6:92:78:c6:eb:27:80:af:36:86:64:8b:44:58:1e:
                    1d:d5:dc:ff:8f:e7:be:36:4f:60:e8:04:35:57:7d:
                    eb:23:32:8d:63:fc:5b:d1:9a:41:0f:54:d8:26:49:
                    31:d0:ac:be:59:49:e2:f8:23:4a:07:74:a4:14:c7:
                    c4:f3:36:6b:40:2c:e9:86:e5:8f:2c:c8:9d:62:fd:
                    0c:24:d0:f5:aa:88:fc:99:c3:bd:9b:f7:5d:c4:82:
                    06:bb:8e:53:60:97:ec:72:15:08:ef:f6:cd:aa:b0:
                    16:b2:5f:be:7f:ee:5a:26:fc:6b:1f:a7:72:ba:74:
                    0d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AD:73:84:FE:97:CC:04:EE:DC:3C:5E:03:FF:04:E8:5E:ED:73:34
            X509v3 Authority Key Identifier:
                keyid:B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/7fac3f1924b5450d36e6e7e54027afcb426c4cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.0.0/22
                IPv6:
                  2803:3410::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:f2:93:a2:9b:b6:41:b1:19:94:79:9a:e2:ff:e4:dc:09:
         4f:c1:95:d2:86:26:0a:bd:1e:5e:6a:7b:b6:1a:ba:e2:20:3c:
         58:60:41:9c:81:17:27:ec:54:c6:c9:5e:da:8b:64:f8:5b:95:
         c7:8c:72:e7:b4:3d:a0:16:e5:84:ea:fb:3f:88:f7:82:1b:b3:
         55:49:69:05:5e:44:81:46:02:5e:e4:50:8e:4a:de:ef:28:0d:
         1d:54:19:9d:5b:1e:d5:14:f3:3d:97:c0:06:28:bf:59:9c:b4:
         1c:00:4c:7d:80:c5:ae:4b:eb:5d:2d:8e:a3:fd:ae:8e:2b:7b:
         98:38:4d:dc:50:66:d6:b8:2a:4b:01:2a:a9:5c:b7:8b:60:08:
         d7:9c:9f:a4:44:73:e7:86:f1:3a:bf:e5:01:0d:bc:46:77:45:
         f3:24:a0:8f:ba:8f:54:24:72:80:88:75:b9:9b:f4:b5:99:43:
         bf:46:5d:fc:9d:ce:1e:fd:c3:38:9b:4f:20:6c:25:f6:6e:a9:
         63:57:b0:f6:36:9d:73:57:e1:e9:3b:27:a8:d8:9c:90:f9:92:
         2c:9e:f6:bc:f9:4f:98:d4:07:54:8e:ab:aa:e9:94:83:be:08:
         8a:3a:a6:b8:40:98:ad:e7:db:1d:63:fa:3f:49:08:29:a6:4f:
         ea:29:b7:a2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICLogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYmIy
MGRjNDgyZTdiMTNjYzY3ZGRkZjFhOTJkZTdjYzIwMTY2ZDRhNTAeFw0yMTAzMjQx
NDM0MTVaFw0yNjAzMjQxNDM0MTVaMDMxMTAvBgNVBAMTKDdmYWMzZjE5MjRiNTQ1
MGQzNmU2ZTdlNTQwMjdhZmNiNDI2YzRjZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCHGNaOTC1ibHGIWweeLEsWRmzzW6t7Su5r3s0iCuyCFKSPuI3o
4pB0yRsNOLjK/qLWWFLzIEFQlfudgX4Eud3JbDG9o1HfKo1juVVJ747VHGnFhJCr
q6eUMDXoCe72LRgRx1Fp2LH16bsdqx9DEedc2BZMLY+94e3V8FuefjhrUXRDcxfr
MuaSeMbrJ4CvNoZki0RYHh3V3P+P5742T2DoBDVXfesjMo1j/FvRmkEPVNgmSTHQ
rL5ZSeL4I0oHdKQUx8TzNmtALOmG5Y8syJ1i/Qwk0PWqiPyZw72b913Egga7jlNg
l+xyFQjv9s2qsBayX75/7lom/Gsfp3K6dA0HAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUgq1zhP6XzATu3DxeA/8E6F7tczQwHwYDVR0jBBgwFoAUt6AxtquWuiY2SNbh
GZPpLCfAg+IwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iYjIwZGM0
ODJlN2IxM2NjNjdkZGRmMWE5MmRlN2NjMjAxNjZkNGE1LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8yNmE4OWMwMi1lOTBmLTQxY2YtYmNlYS0zZmQ1Zjg1
NTk4YmYvN2ZhYzNmMTkyNGI1NDUwZDM2ZTZlN2U1NDAyN2FmY2I0MjZjNGNkNS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzI2YTg5YzAyLWU5MGYtNDFjZi1iY2VhLTNmZDVm
ODU1OThiZi9iYjIwZGM0ODJlN2IxM2NjNjdkZGRmMWE5MmRlN2NjMjAxNjZkNGE1
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCz/gAMA0EAgACMAcDBQAoAzQQMA0GCSqGSIb3DQEBCwUAA4IB
AQAuHPKTopu2QbEZlHma4v/k3AlPwZXShiYKvR5eanu2GrriIDxYYEGcgRcn7FTG
yV7ai2T4W5XHjHLntD2gFuWE6vs/iPeCG7NVSWkFXkSBRgJe5FCOSt7vKA0dVBmd
Wx7VFPM9l8AGKL9ZnLQcAEx9gMWuS+tdLY6j/a6OK3uYOE3cUGbWuCpLASqpXLeL
YAjXnJ+kRHPnhvE6v+UBDbxGd0XzJKCPuo9UJHKAiHW5m/S1mUO/Rl38nc4e/cM4
m08gbCX2bqljV7D2Np1zV+HpOyeo2JyQ+ZIsnva8+U+Y1AdUjquq6ZSDvgiKOqa4
QJit59sdY/o/SQgppk/qKbei
-----END CERTIFICATE-----