Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/eca11232c5ebdee975cd2c36d75e7be9c6be39e1.roa
File:                     eca11232c5ebdee975cd2c36d75e7be9c6be39e1.roa (raw, json)
Hash identifier:          W7C+GM+B7Bo2GDyDnYmgjO2qTe5FCWieEpf+Z9pp8QQ=
Subject key identifier:   6A:F1:94:03:2B:32:0B:1E:2F:E8:1E:01:35:C9:29:4D:21:72:3B:7E
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       0E02C6
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/eca11232c5ebdee975cd2c36d75e7be9c6be39e1.roa
Signing time:             Wed 24 Mar 2021 14:47:15 +0000
ROA not before:           Wed 24 Mar 2021 14:47:14 +0000
ROA not after:            Tue 24 Mar 2026 14:47:14 +0000
asID:                     28001
IP address blocks:        200.3.12.0/22 maxlen: 24
                          200.7.86.0/24 maxlen: 24
                          200.10.60.0/23 maxlen: 24
                          2001:13c7:7002::/48 maxlen: 48
                          2001:13c7:7012::/47 maxlen: 48
                          2001:13c7:7010::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918214 (0xe02c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 14:47:14 2021 GMT
            Not After : Mar 24 14:47:14 2026 GMT
        Subject: CN=eca11232c5ebdee975cd2c36d75e7be9c6be39e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:39:3a:dc:5d:e5:b2:14:60:15:6e:34:7d:
                    6f:c4:5d:58:22:be:fa:bd:8e:68:3b:98:b5:8c:b8:
                    bc:d9:52:43:0e:72:22:1b:98:cb:0d:5a:6d:dd:8c:
                    f8:0d:0e:0b:59:75:25:84:ec:8b:8c:f5:17:f9:c2:
                    85:cf:c1:c3:24:6c:1a:82:33:d4:8a:1a:58:3a:41:
                    4e:f4:db:33:ad:87:76:23:b7:96:e7:8b:e7:55:66:
                    c6:27:20:60:ac:de:b4:8f:aa:25:3a:a6:d5:4b:c2:
                    c3:57:28:8a:7b:8c:50:47:70:7e:a8:26:e1:d9:da:
                    74:3e:11:95:10:23:a3:f7:f4:1f:fb:dc:60:66:c3:
                    dc:2f:63:00:d4:f3:90:49:48:9f:9e:fa:62:88:52:
                    13:57:ee:82:77:e0:3b:d7:21:3d:04:3a:21:1e:8f:
                    8b:a2:de:1c:b4:0c:cb:4d:b3:dd:6f:41:ee:8f:d0:
                    1e:45:d1:0e:0b:d7:ad:24:d3:ce:f9:af:a7:93:5e:
                    ea:a1:4b:fe:fc:16:ec:c6:b7:7e:b2:eb:83:66:3d:
                    a3:93:11:21:7c:99:fc:a1:4b:05:22:d7:e5:38:64:
                    c7:05:d9:7d:be:46:01:98:51:99:4c:2e:0b:df:b1:
                    4e:81:e6:63:bb:0c:1f:89:31:ad:96:85:64:19:78:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F1:94:03:2B:32:0B:1E:2F:E8:1E:01:35:C9:29:4D:21:72:3B:7E
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/eca11232c5ebdee975cd2c36d75e7be9c6be39e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.12.0/22
                  200.7.86.0/24
                  200.10.60.0/23
                IPv6:
                  2001:13c7:7002::/48
                  2001:13c7:7010::/46

    Signature Algorithm: sha256WithRSAEncryption
         2d:75:80:9d:64:75:26:a9:f0:58:af:bf:e0:a4:46:84:9e:9c:
         0e:86:5c:06:31:d5:2a:aa:31:b7:be:4d:70:31:96:2d:34:59:
         12:93:93:dd:2e:3b:8d:23:d6:27:18:67:77:e3:3c:84:52:d9:
         3e:25:f2:c1:68:0b:50:dd:a0:2a:21:cb:fe:55:8f:5f:5f:a2:
         a3:10:cc:80:51:f1:62:5d:76:eb:54:9c:de:46:3d:88:7e:d6:
         aa:75:6d:a1:37:6a:47:ae:49:38:1c:3d:7d:6b:f1:bb:f9:d1:
         68:c3:8b:d8:8c:88:ee:ab:26:9a:fc:7f:be:7e:0d:25:26:78:
         30:43:66:97:6a:41:27:5d:5a:87:8d:ac:7c:68:19:41:73:71:
         e4:74:ee:30:1c:ec:f2:7c:d7:d6:6a:1d:e1:2c:3b:c6:b5:b8:
         d2:00:a3:88:d4:01:68:47:15:4b:a7:69:7b:05:1e:2b:b8:b2:
         ea:ae:36:a1:a2:fb:c3:ad:d8:a9:1b:a8:da:67:9c:42:ec:2e:
         1c:15:2c:bf:43:82:f5:14:02:0a:e5:d2:5e:32:3d:a0:e7:89:
         6c:8f:f1:46:b7:05:7e:a9:35:80:8a:d3:07:82:4d:36:81:76:
         74:24:37:fe:25:93:e3:54:82:1a:7f:a9:c3:ed:dd:9a:59:f3:
         9f:19:32:bf
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIDDgLGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjEwMzI0
MTQ0NzE0WhcNMjYwMzI0MTQ0NzE0WjAzMTEwLwYDVQQDEyhlY2ExMTIzMmM1ZWJk
ZWU5NzVjZDJjMzZkNzVlN2JlOWM2YmUzOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl0w5Otxd5bIUYBVuNH1vxF1YIr76vY5oO5i1jLi82VJDDnIi
G5jLDVpt3Yz4DQ4LWXUlhOyLjPUX+cKFz8HDJGwagjPUihpYOkFO9NszrYd2I7eW
54vnVWbGJyBgrN60j6olOqbVS8LDVyiKe4xQR3B+qCbh2dp0PhGVECOj9/Qf+9xg
ZsPcL2MA1POQSUifnvpiiFITV+6Cd+A71yE9BDohHo+Lot4ctAzLTbPdb0Huj9Ae
RdEOC9etJNPO+a+nk17qoUv+/Bbsxrd+suuDZj2jkxEhfJn8oUsFItflOGTHBdl9
vkYBmFGZTC4L37FOgeZjuwwfiTGtloVkGXjQAQIDAQABo4ICgTCCAn0wHQYDVR0O
BBYEFGrxlAMrMgseL+geATXJKU0hcjt+MB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M
m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2
MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5L2VjYTExMjMyYzVlYmRlZTk3NWNkMmMzNmQ3NWU3YmU5YzZiZTM5ZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBFBggrBgEFBQcBBwEB/wQ2
MDQwGAQCAAEwEgMEAsgDDAMEAMgHVgMEAcgKPDAYBAIAAjASAwcAIAETx3ACAwcC
IAETx3AQMA0GCSqGSIb3DQEBCwUAA4IBAQAtdYCdZHUmqfBYr7/gpEaEnpwOhlwG
MdUqqjG3vk1wMZYtNFkSk5PdLjuNI9YnGGd34zyEUtk+JfLBaAtQ3aAqIcv+VY9f
X6KjEMyAUfFiXXbrVJzeRj2IftaqdW2hN2pHrkk4HD19a/G7+dFow4vYjIjuqyaa
/H++fg0lJngwQ2aXakEnXVqHjax8aBlBc3HkdO4wHOzyfNfWah3hLDvGtbjSAKOI
1AFoRxVLp2l7BR4ruLLqrjahovvDrdipG6jaZ5xC7C4cFSy/Q4L1FAIK5dJeMj2g
54lsj/FGtwV+qTWAitMHgk02gXZ0JDf+JZPjVIIaf6nD7d2aWfOfGTK/
-----END CERTIFICATE-----