Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/81d6ec1554738afb39897869d2b253debb6a6970.roa
File:                     81d6ec1554738afb39897869d2b253debb6a6970.roa (raw, json)
Hash identifier:          Nde7Fhr8Zw5OqJ57MUfbA9w16w/bIKI/fGv420orNrs=
Subject key identifier:   73:F9:4A:D2:18:89:09:CF:00:49:A0:F8:E3:D2:DB:AD:3A:8E:09:1D
Certificate issuer:       /CN=4393f7432846896d18bc47956f7dce0ffc072b54
Certificate serial:       0C3B2A
Authority key identifier: C5:62:86:91:75:C8:DB:6E:23:A2:5E:89:B8:61:A8:76:6D:95:57:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4393f7432846896d18bc47956f7dce0ffc072b54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/81d6ec1554738afb39897869d2b253debb6a6970.roa
Signing time:             Wed 24 Mar 2021 14:45:30 +0000
ROA not before:           Wed 24 Mar 2021 14:45:29 +0000
ROA not after:            Tue 24 Mar 2026 14:45:29 +0000
asID:                     138609
IP address blocks:        131.221.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801578 (0xc3b2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4393f7432846896d18bc47956f7dce0ffc072b54
        Validity
            Not Before: Mar 24 14:45:29 2021 GMT
            Not After : Mar 24 14:45:29 2026 GMT
        Subject: CN=81d6ec1554738afb39897869d2b253debb6a6970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:5c:87:92:11:a8:38:8a:fd:ba:c2:18:cf:
                    27:20:cb:bd:7b:15:e5:25:0f:6b:c5:5f:b1:60:44:
                    37:fe:62:75:9b:ec:7b:d2:a3:34:8f:e2:5d:54:3e:
                    ce:22:03:bc:bc:dc:6d:17:74:12:b8:c0:ee:ac:36:
                    77:ce:66:0d:ba:71:d0:f4:9b:a2:94:93:e6:51:34:
                    d6:4e:c2:a4:62:35:9f:14:53:81:74:5e:01:b5:26:
                    d9:0b:b0:f6:33:49:93:b1:9f:eb:90:1f:0e:3d:cb:
                    3d:93:96:ec:69:76:d9:39:9b:f0:93:54:78:7f:1a:
                    84:7a:5d:97:ca:be:73:2d:c9:74:3c:08:13:f1:79:
                    3a:73:e8:48:b2:2d:66:39:3e:84:77:2c:f2:98:f3:
                    05:b5:d2:b6:26:72:b0:58:0e:e7:d4:11:9e:32:a5:
                    b9:d3:75:c0:52:7f:a9:6f:ad:5b:dc:54:c7:5f:34:
                    b0:9f:fd:e9:51:a7:29:9e:f8:11:35:a5:6b:8c:67:
                    79:ee:aa:19:b2:ac:cb:b5:8f:16:2a:21:af:de:ec:
                    c3:90:e3:08:c5:97:35:73:87:a2:25:6b:97:96:86:
                    0d:47:18:30:73:ca:84:ad:a4:2f:86:3a:17:e9:c0:
                    90:d9:09:dc:11:71:6c:84:1d:31:24:96:bc:1c:e7:
                    95:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F9:4A:D2:18:89:09:CF:00:49:A0:F8:E3:D2:DB:AD:3A:8E:09:1D
            X509v3 Authority Key Identifier:
                keyid:C5:62:86:91:75:C8:DB:6E:23:A2:5E:89:B8:61:A8:76:6D:95:57:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4393f7432846896d18bc47956f7dce0ffc072b54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/81d6ec1554738afb39897869d2b253debb6a6970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/4393f7432846896d18bc47956f7dce0ffc072b54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:32:e2:68:41:b7:92:8d:67:20:89:54:5e:86:42:bd:0b:c7:
         95:5e:5a:fc:8b:67:19:41:a2:97:cc:1d:c3:f8:b4:00:bb:9e:
         61:6e:af:54:1e:20:95:71:06:13:ef:c0:c9:16:87:a9:0c:6f:
         9e:aa:12:7d:ea:12:c0:a9:73:f3:d2:f7:d3:71:52:87:da:47:
         0e:23:65:c2:d2:de:97:c5:df:c3:cd:45:9d:2b:f2:60:97:54:
         18:45:86:c5:04:5b:47:d0:a2:84:16:de:89:9e:19:83:3a:98:
         00:d4:b7:e5:bc:3f:f3:9c:67:85:ec:a2:a7:06:ee:0d:d0:73:
         7e:35:fc:d3:b2:b1:6b:bb:ca:d1:a2:7e:ed:68:97:d7:42:25:
         fd:9f:a1:7e:97:fd:44:96:98:13:fd:18:dd:67:0a:aa:30:bf:
         f2:46:27:e9:d0:96:26:27:bd:6b:0c:32:fd:16:19:52:7d:38:
         7a:79:69:69:1e:18:c8:f3:db:f0:ac:c2:78:7d:ee:16:2a:83:
         0b:fd:30:f8:88:15:4d:90:8c:3d:dd:0a:c9:93:95:63:72:79:
         39:c2:92:be:c6:72:1c:fe:67:a8:25:8b:68:34:9a:c8:7e:83:
         3e:9d:a1:8e:60:7c:dc:b7:1a:fe:0a:8b:12:97:65:9a:cf:6b:
         bf:47:38:ef
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDDsqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
OTNmNzQzMjg0Njg5NmQxOGJjNDc5NTZmN2RjZTBmZmMwNzJiNTQwHhcNMjEwMzI0
MTQ0NTI5WhcNMjYwMzI0MTQ0NTI5WjAzMTEwLwYDVQQDEyg4MWQ2ZWMxNTU0NzM4
YWZiMzk4OTc4NjlkMmIyNTNkZWJiNmE2OTcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvSlch5IRqDiK/brCGM8nIMu9exXlJQ9rxV+xYEQ3/mJ1m+x7
0qM0j+JdVD7OIgO8vNxtF3QSuMDurDZ3zmYNunHQ9JuilJPmUTTWTsKkYjWfFFOB
dF4BtSbZC7D2M0mTsZ/rkB8OPcs9k5bsaXbZOZvwk1R4fxqEel2Xyr5zLcl0PAgT
8Xk6c+hIsi1mOT6EdyzymPMFtdK2JnKwWA7n1BGeMqW503XAUn+pb61b3FTHXzSw
n/3pUacpnvgRNaVrjGd57qoZsqzLtY8WKiGv3uzDkOMIxZc1c4eiJWuXloYNRxgw
c8qEraQvhjoX6cCQ2QncEXFshB0xJJa8HOeVgwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHP5StIYiQnPAEmg+OPS2606jgkdMB8GA1UdIwQYMBaAFMVihpF1yNtuI6Je
ibhhqHZtlVe5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDM5M2Y3
NDMyODQ2ODk2ZDE4YmM0Nzk1NmY3ZGNlMGZmYzA3MmI1NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWQ4MWY2Y2QtZmM4MS00OTFmLWJiOTItMzhkYjcw
ODZjMzIyLzgxZDZlYzE1NTQ3MzhhZmIzOTg5Nzg2OWQyYjI1M2RlYmI2YTY5NzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZDgxZjZjZC1mYzgxLTQ5MWYtYmI5Mi0zOGRi
NzA4NmMzMjIvNDM5M2Y3NDMyODQ2ODk2ZDE4YmM0Nzk1NmY3ZGNlMGZmYzA3MmI1
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIPdmzANBgkqhkiG9w0BAQsFAAOCAQEAKTLiaEG3ko1nIIlU
XoZCvQvHlV5a/ItnGUGil8wdw/i0ALueYW6vVB4glXEGE+/AyRaHqQxvnqoSfeoS
wKlz89L303FSh9pHDiNlwtLel8Xfw81FnSvyYJdUGEWGxQRbR9CihBbeiZ4ZgzqY
ANS35bw/85xnheyipwbuDdBzfjX807Kxa7vK0aJ+7WiX10Il/Z+hfpf9RJaYE/0Y
3WcKqjC/8kYn6dCWJie9awwy/RYZUn04enlpaR4YyPPb8KzCeH3uFiqDC/0w+IgV
TZCMPd0KyZOVY3J5OcKSvsZyHP5nqCWLaDSayH6DPp2hjmB83Lca/gqLEpdlms9r
v0c47w==
-----END CERTIFICATE-----