Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/37da4a23da38e93dcdc128091943bf3d205edeb1.roa
File:                     37da4a23da38e93dcdc128091943bf3d205edeb1.roa (raw, json)
Hash identifier:          XLZPW1Olj08TAdZifgU3xuVcz3mf8SnaBxjq9L6yKb0=
Subject key identifier:   95:8A:A5:14:98:E7:E5:99:0C:DB:6C:53:55:7E:17:71:84:02:FA:BD
Certificate issuer:       /CN=c1b10fed8d73bc6fca227c206b112f9a09361b3e
Certificate serial:       0DDC06
Authority key identifier: DA:3C:C7:79:11:12:49:F0:4D:43:52:CB:60:BC:23:A4:4B:9F:76:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b10fed8d73bc6fca227c206b112f9a09361b3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/37da4a23da38e93dcdc128091943bf3d205edeb1.roa
Signing time:             Wed 24 Mar 2021 14:39:01 +0000
ROA not before:           Wed 24 Mar 2021 14:39:00 +0000
ROA not after:            Tue 24 Mar 2026 14:39:00 +0000
asID:                     27947
IP address blocks:        200.10.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908294 (0xddc06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b10fed8d73bc6fca227c206b112f9a09361b3e
        Validity
            Not Before: Mar 24 14:39:00 2021 GMT
            Not After : Mar 24 14:39:00 2026 GMT
        Subject: CN=37da4a23da38e93dcdc128091943bf3d205edeb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:41:45:c0:5d:52:60:a4:ed:00:9f:c1:70:80:
                    1c:75:ef:bb:17:10:84:15:86:eb:60:83:c6:1d:27:
                    a2:45:9d:a9:03:bf:ab:3a:af:3d:0e:2d:40:2f:f2:
                    7d:cd:40:e3:90:84:fa:68:4a:81:e5:ef:99:3c:80:
                    eb:6a:26:c9:0f:b9:69:10:fb:cc:90:23:f9:62:d2:
                    74:fc:27:09:5c:d1:7a:7f:49:47:90:9b:be:6e:8e:
                    38:be:e0:40:a5:67:31:74:88:0f:d2:35:12:89:fa:
                    c2:f5:23:0c:4a:e4:be:e7:c7:43:ec:81:c7:ec:3c:
                    29:07:f7:4e:56:df:71:d8:d0:82:43:ff:84:62:99:
                    7c:00:5b:38:0f:93:dc:5a:87:4b:fb:4d:99:19:94:
                    53:57:28:90:b5:2b:08:21:fd:94:e1:b9:13:45:db:
                    e1:64:7e:da:b7:8b:46:9c:04:86:9d:b2:3a:02:00:
                    2a:3b:b8:dd:b6:2e:9d:6d:03:b5:44:e4:e7:50:5a:
                    7d:09:42:bf:67:71:f2:b2:91:00:7d:11:fe:84:28:
                    2a:d0:df:96:46:8f:ab:d2:41:dc:fe:7b:5d:b8:81:
                    47:84:90:51:4f:98:17:93:61:6c:d0:f2:51:7e:02:
                    f2:7b:0b:ab:1e:aa:46:66:2e:4c:69:53:eb:93:ab:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8A:A5:14:98:E7:E5:99:0C:DB:6C:53:55:7E:17:71:84:02:FA:BD
            X509v3 Authority Key Identifier:
                keyid:DA:3C:C7:79:11:12:49:F0:4D:43:52:CB:60:BC:23:A4:4B:9F:76:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b10fed8d73bc6fca227c206b112f9a09361b3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/37da4a23da38e93dcdc128091943bf3d205edeb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c8ea7ae-6b23-4b79-ad78-b6192475066f/c1b10fed8d73bc6fca227c206b112f9a09361b3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:36:5b:fc:1c:4d:3d:cd:bb:1a:de:b7:12:9a:f6:22:03:16:
         be:34:4a:20:9a:d8:ca:90:77:d0:4e:a9:84:17:4d:8b:6c:fd:
         d5:7f:29:95:2e:1b:fc:d0:d6:90:11:c3:0b:b4:c9:21:24:a4:
         40:f3:b2:6c:a6:8d:d0:65:1b:8c:65:f5:77:1d:5a:46:c1:2c:
         9e:50:bd:da:e8:2a:e0:8e:98:2f:41:69:f5:a7:03:9d:6f:64:
         30:7a:ae:f4:2a:a9:76:b2:7b:87:71:72:e7:8b:80:60:4d:dc:
         4b:8b:28:6a:e6:d0:49:75:f4:26:6c:4b:93:4d:61:70:2a:74:
         32:1d:46:9d:f7:c0:81:6f:dc:87:ee:07:68:0c:d3:f6:f6:bb:
         f0:81:e3:62:02:44:ec:58:77:12:9d:9a:36:65:fe:ed:9b:78:
         c2:8f:3b:29:88:1d:70:c7:c4:89:3c:41:dc:25:f8:b7:d8:32:
         99:9a:99:93:bb:a6:0b:2f:4a:dd:f7:ff:d6:4f:72:fc:6d:55:
         e6:b1:15:dc:4d:cd:76:6d:ce:9e:26:7d:f6:b2:66:15:ed:14:
         f3:1f:a8:7f:a1:12:35:c6:88:95:29:c0:d9:b0:d7:7a:b8:5c:
         6f:14:b1:ca:f6:63:cd:3f:9b:7c:04:56:f7:43:15:a9:2f:4c:
         b7:26:86:09
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDdwGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
YjEwZmVkOGQ3M2JjNmZjYTIyN2MyMDZiMTEyZjlhMDkzNjFiM2UwHhcNMjEwMzI0
MTQzOTAwWhcNMjYwMzI0MTQzOTAwWjAzMTEwLwYDVQQDEygzN2RhNGEyM2RhMzhl
OTNkY2RjMTI4MDkxOTQzYmYzZDIwNWVkZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhkFFwF1SYKTtAJ/BcIAcde+7FxCEFYbrYIPGHSeiRZ2pA7+r
Oq89Di1AL/J9zUDjkIT6aEqB5e+ZPIDraibJD7lpEPvMkCP5YtJ0/CcJXNF6f0lH
kJu+bo44vuBApWcxdIgP0jUSifrC9SMMSuS+58dD7IHH7DwpB/dOVt9x2NCCQ/+E
Ypl8AFs4D5PcWodL+02ZGZRTVyiQtSsIIf2U4bkTRdvhZH7at4tGnASGnbI6AgAq
O7jdti6dbQO1ROTnUFp9CUK/Z3HyspEAfRH+hCgq0N+WRo+r0kHc/ntduIFHhJBR
T5gXk2Fs0PJRfgLyewurHqpGZi5MaVPrk6sn0wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJWKpRSY5+WZDNtsU1V+F3GEAvq9MB8GA1UdIwQYMBaAFNo8x3kREknwTUNS
y2C8I6RLn3a5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFiMTBm
ZWQ4ZDczYmM2ZmNhMjI3YzIwNmIxMTJmOWEwOTM2MWIzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmM4ZWE3YWUtNmIyMy00Yjc5LWFkNzgtYjYxOTI0
NzUwNjZmLzM3ZGE0YTIzZGEzOGU5M2RjZGMxMjgwOTE5NDNiZjNkMjA1ZWRlYjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzhlYTdhZS02YjIzLTRiNzktYWQ3OC1iNjE5
MjQ3NTA2NmYvYzFiMTBmZWQ4ZDczYmM2ZmNhMjI3YzIwNmIxMTJmOWEwOTM2MWIz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgK0TANBgkqhkiG9w0BAQsFAAOCAQEArDZb/BxNPc27Gt63
Epr2IgMWvjRKIJrYypB30E6phBdNi2z91X8plS4b/NDWkBHDC7TJISSkQPOybKaN
0GUbjGX1dx1aRsEsnlC92ugq4I6YL0Fp9acDnW9kMHqu9CqpdrJ7h3Fy54uAYE3c
S4soaubQSXX0JmxLk01hcCp0Mh1GnffAgW/ch+4HaAzT9va78IHjYgJE7Fh3Ep2a
NmX+7Zt4wo87KYgdcMfEiTxB3CX4t9gymZqZk7umCy9K3ff/1k9y/G1V5rEV3E3N
dm3OniZ99rJmFe0U8x+of6ESNcaIlSnA2bDXerhcbxSxyvZjzT+bfARW90MVqS9M
tyaGCQ==
-----END CERTIFICATE-----