Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6dcc9eb9-4162-4fdc-a9db-eb44959572ef/301ee57156a28899f9e260401aa17f244931b4ab.roa
File:                     301ee57156a28899f9e260401aa17f244931b4ab.roa (raw, json)
Hash identifier:          DvvFcB1mqhSRMwFPkuA5/Pkk5wARze3lxpPq3zcAYG0=
Subject key identifier:   3C:4F:6B:57:04:8C:B4:4B:63:72:10:BF:42:FE:16:9B:20:DD:F8:34
Certificate issuer:       /CN=821e1ab92f08ac7402fec3c5b685dc43f4c2f28f
Certificate serial:       0BFF62
Authority key identifier: 45:20:96:A6:4C:F8:3A:BF:7A:BC:92:44:FE:61:23:92:1A:4D:67:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/821e1ab92f08ac7402fec3c5b685dc43f4c2f28f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6dcc9eb9-4162-4fdc-a9db-eb44959572ef/301ee57156a28899f9e260401aa17f244931b4ab.roa
Signing time:             Wed 24 Mar 2021 14:34:44 +0000
ROA not before:           Wed 24 Mar 2021 14:34:44 +0000
ROA not after:            Tue 24 Mar 2026 14:34:44 +0000
asID:                     264796
IP address blocks:        170.78.40.0/22 maxlen: 24
                          2803:24c0::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786274 (0xbff62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821e1ab92f08ac7402fec3c5b685dc43f4c2f28f
        Validity
            Not Before: Mar 24 14:34:44 2021 GMT
            Not After : Mar 24 14:34:44 2026 GMT
        Subject: CN=301ee57156a28899f9e260401aa17f244931b4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:20:2e:95:95:68:7a:13:3f:06:c0:6c:ef:
                    f6:4c:0c:74:52:38:ad:9b:2b:4e:f2:36:78:b3:f5:
                    8a:0a:24:25:dd:35:a6:a1:c9:3f:09:0f:44:23:33:
                    f0:95:00:31:86:14:4a:41:8c:7c:34:19:ff:4c:c4:
                    40:23:b7:cf:f0:ff:f2:bc:4e:0e:46:ed:64:e0:e7:
                    a2:58:ba:5a:4f:75:2c:a5:80:a8:a1:9e:1f:a0:ec:
                    b8:0c:c1:41:be:15:f2:0c:b1:dd:8b:54:65:4e:2b:
                    8e:16:70:1c:a7:ce:d0:c1:47:2c:62:0d:46:d5:a2:
                    f6:54:08:34:10:fb:ac:7e:af:1c:bd:7d:ae:f6:fa:
                    4d:e8:7b:3f:01:08:64:68:a8:ff:4a:31:95:b1:40:
                    f1:5a:55:5e:81:4a:a4:04:74:c4:e7:8f:b2:38:86:
                    cc:4a:2e:4a:cf:47:b4:94:61:c6:3c:ac:b5:12:bc:
                    7a:e6:fc:45:a5:17:8b:a5:3d:1f:26:9b:e1:fd:1f:
                    bb:64:2f:ee:2c:09:ee:a4:de:a0:75:15:65:e9:e1:
                    e0:4b:5a:bd:26:c4:42:1b:80:54:21:ab:d6:bc:13:
                    4f:86:87:f1:23:7f:68:3e:0e:a0:44:89:24:8e:ec:
                    63:07:67:d9:97:32:e4:ca:f9:ae:40:cb:ec:b7:41:
                    9f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4F:6B:57:04:8C:B4:4B:63:72:10:BF:42:FE:16:9B:20:DD:F8:34
            X509v3 Authority Key Identifier:
                keyid:45:20:96:A6:4C:F8:3A:BF:7A:BC:92:44:FE:61:23:92:1A:4D:67:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/821e1ab92f08ac7402fec3c5b685dc43f4c2f28f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6dcc9eb9-4162-4fdc-a9db-eb44959572ef/301ee57156a28899f9e260401aa17f244931b4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6dcc9eb9-4162-4fdc-a9db-eb44959572ef/821e1ab92f08ac7402fec3c5b685dc43f4c2f28f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.40.0/22
                IPv6:
                  2803:24c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:7e:22:82:f1:6f:dc:6b:38:03:5c:74:5b:66:7c:74:39:3e:
         2f:9a:8e:75:1d:fb:b5:08:69:dd:e8:f7:f2:2a:1c:f0:57:6a:
         c5:38:61:1c:0c:28:0d:75:35:3f:9b:2f:51:be:32:7c:bc:aa:
         f7:a5:c0:ec:b4:e5:6e:43:9a:44:ca:d3:08:0e:70:f1:88:b6:
         b0:d1:6b:f5:7a:58:93:3c:35:18:9a:11:c1:b2:d8:03:e1:37:
         c0:e2:f0:5f:b4:c9:c5:62:7d:c3:12:ed:56:27:ad:48:8c:99:
         89:13:3a:80:6a:e4:bd:e2:b8:a1:44:92:b8:3b:c0:ce:cc:cb:
         7f:90:8a:45:d1:ef:98:06:6f:3f:d3:74:83:8a:73:1e:94:97:
         5d:0c:1e:14:3c:7f:f8:97:c3:ee:72:ca:d6:f9:50:4d:b4:36:
         32:14:f6:79:40:4e:7d:e9:14:5b:78:e6:4e:c9:3c:65:c6:f6:
         88:d9:75:b9:01:f9:53:ca:11:c3:a8:b7:64:8d:66:7b:e5:82:
         13:c3:79:6f:b2:1f:7b:96:a6:97:82:bd:75:5d:4f:c6:31:a3:
         02:d1:b8:c5:f1:10:43:50:67:c1:9e:e5:31:4a:a4:19:de:90:
         e9:6e:fd:e7:79:ff:da:a4:ec:ae:55:66:8d:b0:49:d3:6b:d5:
         dd:1e:6e:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDC/9iMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgy
MWUxYWI5MmYwOGFjNzQwMmZlYzNjNWI2ODVkYzQzZjRjMmYyOGYwHhcNMjEwMzI0
MTQzNDQ0WhcNMjYwMzI0MTQzNDQ0WjAzMTEwLwYDVQQDEygzMDFlZTU3MTU2YTI4
ODk5ZjllMjYwNDAxYWExN2YyNDQ5MzFiNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlQsgLpWVaHoTPwbAbO/2TAx0UjitmytO8jZ4s/WKCiQl3TWm
ock/CQ9EIzPwlQAxhhRKQYx8NBn/TMRAI7fP8P/yvE4ORu1k4OeiWLpaT3UspYCo
oZ4foOy4DMFBvhXyDLHdi1RlTiuOFnAcp87QwUcsYg1G1aL2VAg0EPusfq8cvX2u
9vpN6Hs/AQhkaKj/SjGVsUDxWlVegUqkBHTE54+yOIbMSi5Kz0e0lGHGPKy1Erx6
5vxFpReLpT0fJpvh/R+7ZC/uLAnupN6gdRVl6eHgS1q9JsRCG4BUIavWvBNPhofx
I39oPg6gRIkkjuxjB2fZlzLkyvmuQMvst0Gf4wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFDxPa1cEjLRLY3IQv0L+Fpsg3fg0MB8GA1UdIwQYMBaAFEUglqZM+Dq/eryS
RP5hI5IaTWfEMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODIxZTFh
YjkyZjA4YWM3NDAyZmVjM2M1YjY4NWRjNDNmNGMyZjI4Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmRjYzllYjktNDE2Mi00ZmRjLWE5ZGItZWI0NDk1
OTU3MmVmLzMwMWVlNTcxNTZhMjg4OTlmOWUyNjA0MDFhYTE3ZjI0NDkzMWI0YWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZGNjOWViOS00MTYyLTRmZGMtYTlkYi1lYjQ0
OTU5NTcyZWYvODIxZTFhYjkyZjA4YWM3NDAyZmVjM2M1YjY4NWRjNDNmNGMyZjI4
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqpOKDANBAIAAjAHAwUAKAMkwDANBgkqhkiG9w0BAQsFAAOC
AQEADH4igvFv3Gs4A1x0W2Z8dDk+L5qOdR37tQhp3ej38ioc8FdqxThhHAwoDXU1
P5svUb4yfLyq96XA7LTlbkOaRMrTCA5w8Yi2sNFr9XpYkzw1GJoRwbLYA+E3wOLw
X7TJxWJ9wxLtVietSIyZiRM6gGrkveK4oUSSuDvAzszLf5CKRdHvmAZvP9N0g4pz
HpSXXQweFDx/+JfD7nLK1vlQTbQ2MhT2eUBOfekUW3jmTsk8Zcb2iNl1uQH5U8oR
w6i3ZI1me+WCE8N5b7Ife5aml4K9dV1PxjGjAtG4xfEQQ1BnwZ7lMUqkGd6Q6W79
53n/2qTsrlVmjbBJ02vV3R5u+A==
-----END CERTIFICATE-----