Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/0329020e9b3295448d1cf240081be374e6d34709.roa
File:                     0329020e9b3295448d1cf240081be374e6d34709.roa (raw, json)
Hash identifier:          21GT3zSCN9N5BpvlCeK85b93OhA+NLmkEFcpaTCepIc=
Subject key identifier:   8F:A2:B2:64:AD:76:50:EC:51:46:CE:E3:69:FC:8C:7A:AC:6B:8E:A4
Certificate issuer:       /CN=c1b10fed8d73bc6fca227c206b112f9a09361b3e
Certificate serial:       0DD5E6
Authority key identifier: DA:3C:C7:79:11:12:49:F0:4D:43:52:CB:60:BC:23:A4:4B:9F:76:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b10fed8d73bc6fca227c206b112f9a09361b3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/0329020e9b3295448d1cf240081be374e6d34709.roa
Signing time:             Wed 24 Mar 2021 14:39:00 +0000
ROA not before:           Wed 24 Mar 2021 14:39:00 +0000
ROA not after:            Tue 24 Mar 2026 14:39:00 +0000
asID:                     198949
IP address blocks:        179.0.204.0/24 maxlen: 24
                          200.0.63.0/24 maxlen: 24
                          200.10.209.0/24 maxlen: 24
                          2801:0:4d0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906726 (0xdd5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b10fed8d73bc6fca227c206b112f9a09361b3e
        Validity
            Not Before: Mar 24 14:39:00 2021 GMT
            Not After : Mar 24 14:39:00 2026 GMT
        Subject: CN=0329020e9b3295448d1cf240081be374e6d34709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:04:ff:c5:a6:41:b2:71:b2:ec:61:a4:16:1f:
                    ff:95:84:ee:ce:fa:7e:6b:79:da:d9:54:50:4d:e8:
                    b6:1e:4f:d9:b5:ed:94:67:c7:92:bb:cf:56:63:9c:
                    9b:2d:0f:80:1e:80:e4:57:ca:33:ac:4a:39:62:44:
                    66:2f:ce:a6:c0:08:58:d6:4c:9c:bc:56:0d:2c:60:
                    e3:08:de:8b:1f:ef:1a:f6:1c:45:44:e9:98:d0:e5:
                    fb:8d:86:f7:b7:7f:74:ec:32:e8:75:d4:87:9d:28:
                    a3:b6:ee:d2:9b:ab:9d:a5:e6:49:cf:03:90:5c:ab:
                    46:8f:f5:26:09:fb:bf:7b:3c:e0:85:62:d4:45:12:
                    42:8a:fd:e1:f0:75:50:5e:15:4e:93:61:bd:41:9f:
                    2c:e6:5c:3f:a8:da:4c:8b:b6:9c:d9:59:7d:ba:67:
                    8e:40:a9:1d:27:e9:01:71:ce:00:39:a6:67:18:e3:
                    1c:ae:73:dd:7f:35:a9:c1:26:c1:7a:46:2b:53:7d:
                    8b:24:dc:73:ed:cc:81:1d:dd:ca:fc:fc:cf:46:08:
                    42:e6:b5:05:0f:fe:9b:42:a3:d2:21:4a:75:83:21:
                    30:4d:e7:e6:b7:75:49:8b:15:74:14:d3:2b:ab:0e:
                    0d:e0:87:9a:59:74:38:e4:a8:eb:fa:d6:0c:76:49:
                    4a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A2:B2:64:AD:76:50:EC:51:46:CE:E3:69:FC:8C:7A:AC:6B:8E:A4
            X509v3 Authority Key Identifier:
                keyid:DA:3C:C7:79:11:12:49:F0:4D:43:52:CB:60:BC:23:A4:4B:9F:76:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b10fed8d73bc6fca227c206b112f9a09361b3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/0329020e9b3295448d1cf240081be374e6d34709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/c1b10fed8d73bc6fca227c206b112f9a09361b3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.204.0/24
                  200.0.63.0/24
                  200.10.209.0/24
                IPv6:
                  2801:0:4d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:17:77:89:e5:2f:8f:18:9e:41:a9:6e:5b:23:d6:62:f9:ac:
         26:39:8c:a6:70:1c:6e:94:50:cc:47:0a:e5:61:87:8f:c9:fc:
         f6:78:48:3f:28:fa:48:01:1d:91:56:15:d9:a6:ec:19:f5:b0:
         52:08:75:fb:94:0d:4b:bb:ac:b2:0e:72:55:21:82:e6:d3:91:
         da:6e:53:f3:19:87:61:f1:f7:9d:90:63:fc:cb:04:2c:fa:99:
         33:5a:5e:89:b4:62:ad:df:78:a2:28:aa:ff:01:fb:df:86:c1:
         57:84:2a:ec:30:c6:6b:7b:26:a1:c3:27:fb:82:4a:3f:e9:20:
         ed:dc:ed:4b:1f:cd:34:3a:7b:45:1d:fa:ba:18:47:5c:25:ee:
         d8:44:47:f5:b7:ff:ee:63:90:86:fa:d5:c9:f3:08:d9:34:b4:
         2f:81:c7:99:09:2b:4e:90:13:cf:c3:be:4b:33:fb:04:8d:93:
         36:87:ee:47:af:d5:38:b3:d8:79:5b:bb:1c:2c:9c:1e:d1:c8:
         82:aa:9b:bd:8c:ca:fc:f4:ec:59:7c:12:97:aa:fe:49:2e:76:
         c2:45:7b:ec:31:28:46:52:59:53:f5:43:01:f4:cc:12:fe:e5:
         bd:62:73:ff:de:c2:4d:ed:fd:fd:46:ad:0e:04:b8:d2:43:b6:
         9d:80:ee:78
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIDDdXmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
YjEwZmVkOGQ3M2JjNmZjYTIyN2MyMDZiMTEyZjlhMDkzNjFiM2UwHhcNMjEwMzI0
MTQzOTAwWhcNMjYwMzI0MTQzOTAwWjAzMTEwLwYDVQQDEygwMzI5MDIwZTliMzI5
NTQ0OGQxY2YyNDAwODFiZTM3NGU2ZDM0NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhwT/xaZBsnGy7GGkFh//lYTuzvp+a3na2VRQTei2Hk/Zte2U
Z8eSu89WY5ybLQ+AHoDkV8ozrEo5YkRmL86mwAhY1kycvFYNLGDjCN6LH+8a9hxF
ROmY0OX7jYb3t3907DLoddSHnSijtu7Sm6udpeZJzwOQXKtGj/UmCfu/ezzghWLU
RRJCiv3h8HVQXhVOk2G9QZ8s5lw/qNpMi7ac2Vl9umeOQKkdJ+kBcc4AOaZnGOMc
rnPdfzWpwSbBekYrU32LJNxz7cyBHd3K/PzPRghC5rUFD/6bQqPSIUp1gyEwTefm
t3VJixV0FNMrqw4N4IeaWXQ45Kjr+tYMdklK0QIDAQABo4ICeDCCAnQwHQYDVR0O
BBYEFI+ismStdlDsUUbO42n8jHqsa46kMB8GA1UdIwQYMBaAFNo8x3kREknwTUNS
y2C8I6RLn3a5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFiMTBm
ZWQ4ZDczYmM2ZmNhMjI3YzIwNmIxMTJmOWEwOTM2MWIzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmM4ZWE3YWUtNmIyMy00Yjc5LWFkNzgtYjYxOTI0
NzUwNjZmLzAzMjkwMjBlOWIzMjk1NDQ4ZDFjZjI0MDA4MWJlMzc0ZTZkMzQ3MDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzhlYTdhZS02YjIzLTRiNzktYWQ3OC1iNjE5
MjQ3NTA2NmYvYzFiMTBmZWQ4ZDczYmM2ZmNhMjI3YzIwNmIxMTJmOWEwOTM2MWIz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQt
MCswGAQCAAEwEgMEALMAzAMEAMgAPwMEAMgK0TAPBAIAAjAJAwcAKAEAAATQMA0G
CSqGSIb3DQEBCwUAA4IBAQBrF3eJ5S+PGJ5BqW5bI9Zi+awmOYymcBxulFDMRwrl
YYePyfz2eEg/KPpIAR2RVhXZpuwZ9bBSCHX7lA1Lu6yyDnJVIYLm05HablPzGYdh
8fedkGP8ywQs+pkzWl6JtGKt33iiKKr/AfvfhsFXhCrsMMZreyahwyf7gko/6SDt
3O1LH800OntFHfq6GEdcJe7YREf1t//uY5CG+tXJ8wjZNLQvgceZCStOkBPPw75L
M/sEjZM2h+5Hr9U4s9h5W7scLJwe0ciCqpu9jMr89OxZfBKXqv5JLnbCRXvsMShG
UllT9UMB9MwS/uW9YnP/3sJN7f39Rq0OBLjSQ7adgO54
-----END CERTIFICATE-----