Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4745272c-d32c-4f04-bf76-106733af5550/2a9f77a671362ea63343c317f98ee3a4f8108fd6.roa
File:                     2a9f77a671362ea63343c317f98ee3a4f8108fd6.roa (raw, json)
Hash identifier:          LXs/iafwGq1ssNGbWzS+/EVhMwVz/fbLgc0BRXDNBiw=
Subject key identifier:   90:A2:B0:63:8A:4C:04:B1:DA:8B:1F:E8:09:77:81:0A:7E:5E:5D:C4
Certificate issuer:       /CN=4b6e4511423735ba9580fccb3e95db51effb72c7
Certificate serial:       08947A
Authority key identifier: CA:78:6D:12:E9:8D:FD:82:B8:0A:AA:A1:37:79:7C:C4:BF:CA:7D:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b6e4511423735ba9580fccb3e95db51effb72c7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4745272c-d32c-4f04-bf76-106733af5550/2a9f77a671362ea63343c317f98ee3a4f8108fd6.roa
Signing time:             Thu 13 May 2021 15:12:06 +0000
ROA not before:           Thu 13 May 2021 03:00:00 +0000
ROA not after:            Sat 13 May 2023 03:00:00 +0000
asID:                     262231
IP address blocks:        143.0.80.0/22 maxlen: 24
                          170.245.168.0/22 maxlen: 24
                          190.52.80.0/20 maxlen: 24
                          2803:2c00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562298 (0x8947a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b6e4511423735ba9580fccb3e95db51effb72c7
        Validity
            Not Before: May 13 03:00:00 2021 GMT
            Not After : May 13 03:00:00 2023 GMT
        Subject: CN=2a9f77a671362ea63343c317f98ee3a4f8108fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a1:7e:f1:7e:27:d4:d2:2e:c6:8d:5b:98:0a:
                    26:4c:1e:03:d6:99:85:c7:ce:53:70:3d:51:28:90:
                    fc:5a:35:29:12:f7:59:95:26:b2:b1:2c:05:05:1d:
                    ab:e2:34:4c:7e:49:f2:b6:28:4b:0c:10:2e:1a:d8:
                    a2:b2:d1:c2:27:5e:96:a0:44:40:e5:f8:cc:f8:e0:
                    b7:9a:65:b0:3f:16:83:41:3f:dd:d4:9e:e1:af:87:
                    47:cd:cb:37:f5:6e:dd:d8:03:73:33:ef:5f:fb:18:
                    27:91:c2:47:d1:99:8b:3a:ad:88:25:c1:d5:7d:fc:
                    28:d3:f2:66:b9:ea:82:b6:56:a9:1a:c7:5a:45:84:
                    ef:5e:31:7a:8a:13:56:35:b3:19:d9:9f:9e:67:51:
                    73:04:52:bc:8d:43:b8:3b:fb:97:b0:2c:2d:7f:6a:
                    85:e7:af:39:e1:21:6b:18:2f:40:6c:55:29:76:b8:
                    8f:36:61:5c:ee:7c:ee:01:6e:4e:74:2a:de:3e:ab:
                    15:62:09:ac:d4:59:eb:c5:f0:da:ce:73:6a:b2:11:
                    92:18:8d:35:92:48:ac:42:c2:31:d6:dd:21:77:e0:
                    75:27:31:6c:cf:b1:05:e7:45:4b:07:f4:e9:19:e8:
                    33:13:50:5c:6f:e1:87:60:e9:fc:26:04:7d:55:4d:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A2:B0:63:8A:4C:04:B1:DA:8B:1F:E8:09:77:81:0A:7E:5E:5D:C4
            X509v3 Authority Key Identifier:
                keyid:CA:78:6D:12:E9:8D:FD:82:B8:0A:AA:A1:37:79:7C:C4:BF:CA:7D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b6e4511423735ba9580fccb3e95db51effb72c7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4745272c-d32c-4f04-bf76-106733af5550/2a9f77a671362ea63343c317f98ee3a4f8108fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4745272c-d32c-4f04-bf76-106733af5550/4b6e4511423735ba9580fccb3e95db51effb72c7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.80.0/22
                  170.245.168.0/22
                  190.52.80.0/20
                IPv6:
                  2803:2c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:70:77:3d:80:77:f5:00:c9:c7:63:c4:cf:64:db:4c:de:ba:
         8d:38:b9:84:62:4e:68:22:37:92:1a:77:8f:69:25:d2:3e:ee:
         b7:13:12:59:89:df:35:f3:23:a3:eb:65:20:b8:ec:16:69:a6:
         19:9c:dc:c2:f4:48:94:c6:dd:21:af:2a:2c:74:8c:08:ec:8e:
         b6:51:14:7c:ca:1f:23:55:6f:e9:2b:c3:bc:c0:0f:b7:3c:e1:
         dd:9a:19:aa:77:ba:b4:46:6a:62:c8:71:4c:b9:7e:88:c0:3f:
         e6:30:aa:60:26:f9:4e:d2:54:e6:9e:d7:0c:88:4d:ad:a9:49:
         2c:b4:dd:55:53:27:8e:9a:4f:61:51:f1:4d:2b:ad:a8:04:07:
         c7:5b:d9:0a:69:06:51:49:78:a5:80:e3:75:f7:62:2d:48:24:
         15:30:5a:2e:4a:80:8d:1f:0a:5b:d7:44:c8:43:b3:5d:11:42:
         c7:7a:40:cb:6d:d2:43:5d:86:af:36:53:8f:d9:8d:14:c1:d2:
         8d:d0:94:49:a3:ac:99:a6:da:df:5a:2d:5e:a3:57:e4:9f:d1:
         43:21:2d:27:2f:24:57:e2:e2:eb:94:fa:f7:f0:31:3f:f7:fb:
         77:1f:14:07:e4:d9:6f:89:a7:a1:83:19:36:2c:1e:b8:73:95:
         6b:ba:aa:5b
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIDCJR6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
NmU0NTExNDIzNzM1YmE5NTgwZmNjYjNlOTVkYjUxZWZmYjcyYzcwHhcNMjEwNTEz
MDMwMDAwWhcNMjMwNTEzMDMwMDAwWjAzMTEwLwYDVQQDEygyYTlmNzdhNjcxMzYy
ZWE2MzM0M2MzMTdmOThlZTNhNGY4MTA4ZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm6F+8X4n1NIuxo1bmAomTB4D1pmFx85TcD1RKJD8WjUpEvdZ
lSaysSwFBR2r4jRMfknytihLDBAuGtiistHCJ16WoERA5fjM+OC3mmWwPxaDQT/d
1J7hr4dHzcs39W7d2ANzM+9f+xgnkcJH0ZmLOq2IJcHVffwo0/JmueqCtlapGsda
RYTvXjF6ihNWNbMZ2Z+eZ1FzBFK8jUO4O/uXsCwtf2qF56854SFrGC9AbFUpdriP
NmFc7nzuAW5OdCrePqsVYgms1FnrxfDaznNqshGSGI01kkisQsIx1t0hd+B1JzFs
z7EF50VLB/TpGegzE1Bcb+GHYOn8JgR9VU0CYQIDAQABo4ICdjCCAnIwHQYDVR0O
BBYEFJCisGOKTASx2osf6Al3gQp+Xl3EMB8GA1UdIwQYMBaAFMp4bRLpjf2CuAqq
oTd5fMS/yn1qMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGI2ZTQ1
MTE0MjM3MzViYTk1ODBmY2NiM2U5NWRiNTFlZmZiNzJjNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDc0NTI3MmMtZDMyYy00ZjA0LWJmNzYtMTA2NzMz
YWY1NTUwLzJhOWY3N2E2NzEzNjJlYTYzMzQzYzMxN2Y5OGVlM2E0ZjgxMDhmZDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NzQ1MjcyYy1kMzJjLTRmMDQtYmY3Ni0xMDY3
MzNhZjU1NTAvNGI2ZTQ1MTE0MjM3MzViYTk1ODBmY2NiM2U5NWRiNTFlZmZiNzJj
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQr
MCkwGAQCAAEwEgMEAo8AUAMEAqr1qAMEBL40UDANBAIAAjAHAwUAKAMsADANBgkq
hkiG9w0BAQsFAAOCAQEAMnB3PYB39QDJx2PEz2TbTN66jTi5hGJOaCI3khp3j2kl
0j7utxMSWYnfNfMjo+tlILjsFmmmGZzcwvRIlMbdIa8qLHSMCOyOtlEUfMofI1Vv
6SvDvMAPtzzh3ZoZqne6tEZqYshxTLl+iMA/5jCqYCb5TtJU5p7XDIhNralJLLTd
VVMnjppPYVHxTSutqAQHx1vZCmkGUUl4pYDjdfdiLUgkFTBaLkqAjR8KW9dEyEOz
XRFCx3pAy23SQ12GrzZTj9mNFMHSjdCUSaOsmaba31otXqNX5J/RQyEtJy8kV+Li
65T69/AxP/f7dx8UB+TZb4mnoYMZNiweuHOVa7qqWw==
-----END CERTIFICATE-----