Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72a95892-302f-44d3-98f4-248230ff0cb1/332f90de27d9ef60fc0c998bc32bb7fee239ecab.roa
File:                     332f90de27d9ef60fc0c998bc32bb7fee239ecab.roa (raw, json)
Hash identifier:          Lr3TfYFG7gnAjmyAsPyLTllYHAFeEkIdYiWTWDMXb0U=
Subject key identifier:   0A:8F:1B:61:95:9C:C1:47:21:35:49:50:3C:2D:C3:3D:51:4F:9D:91
Certificate issuer:       /CN=378180d0617ae17f92d5024e30a7921cd3f30206
Certificate serial:       06C424
Authority key identifier: B0:74:E8:62:2E:16:16:34:AC:45:92:66:31:85:A8:28:C0:E9:A0:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/378180d0617ae17f92d5024e30a7921cd3f30206.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72a95892-302f-44d3-98f4-248230ff0cb1/332f90de27d9ef60fc0c998bc32bb7fee239ecab.roa
Signing time:             Wed 24 Mar 2021 14:29:48 +0000
ROA not before:           Wed 24 Mar 2021 14:29:48 +0000
ROA not after:            Tue 24 Mar 2026 14:29:48 +0000
asID:                     270021
IP address blocks:        189.8.112.0/22 maxlen: 24
                          2803:59e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443428 (0x6c424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378180d0617ae17f92d5024e30a7921cd3f30206
        Validity
            Not Before: Mar 24 14:29:48 2021 GMT
            Not After : Mar 24 14:29:48 2026 GMT
        Subject: CN=332f90de27d9ef60fc0c998bc32bb7fee239ecab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:2a:d6:cc:e7:30:e9:70:b8:81:e1:24:23:
                    1c:dc:cb:c4:7c:72:e6:e2:16:b1:cb:5a:b8:11:09:
                    da:fb:91:95:20:f0:34:ea:e4:4b:ed:f5:29:6d:16:
                    1c:9e:a3:c8:5f:f1:e2:cb:6d:16:21:a1:7a:06:d3:
                    78:58:ea:46:25:9f:79:7e:35:1c:92:ab:dd:fb:33:
                    6a:d0:43:bf:b9:23:ba:6c:9a:5a:59:f3:a0:9e:0c:
                    51:c8:82:fa:f3:c3:40:5c:6d:27:6e:e6:c1:ab:7c:
                    d3:e1:45:53:65:d4:11:94:e2:4e:be:15:d9:60:eb:
                    da:02:49:d7:5e:e9:4e:2e:93:fd:ac:91:e3:55:e0:
                    e1:a8:cd:82:b1:84:e2:74:ba:6b:a4:66:35:d0:2d:
                    c7:8d:60:56:58:66:b1:77:5e:51:50:98:ba:46:52:
                    df:2f:09:a0:80:57:fc:38:fa:ca:17:28:d6:c4:e2:
                    b9:1c:f7:53:f8:a5:2d:28:5c:87:8a:b2:04:4e:14:
                    11:01:8c:20:51:df:93:c1:e8:aa:b6:48:5f:a9:05:
                    d4:05:fe:2d:9c:58:e9:e6:c4:8b:d7:94:21:5b:eb:
                    71:57:f1:73:99:a5:98:93:cb:f2:b9:13:32:2c:b5:
                    a8:e1:a6:71:8f:ca:6c:2a:09:0a:64:47:60:40:b2:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8F:1B:61:95:9C:C1:47:21:35:49:50:3C:2D:C3:3D:51:4F:9D:91
            X509v3 Authority Key Identifier:
                keyid:B0:74:E8:62:2E:16:16:34:AC:45:92:66:31:85:A8:28:C0:E9:A0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/378180d0617ae17f92d5024e30a7921cd3f30206.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72a95892-302f-44d3-98f4-248230ff0cb1/332f90de27d9ef60fc0c998bc32bb7fee239ecab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72a95892-302f-44d3-98f4-248230ff0cb1/378180d0617ae17f92d5024e30a7921cd3f30206.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.8.112.0/22
                IPv6:
                  2803:59e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:63:18:82:63:56:ef:97:3a:32:8f:63:87:67:2f:3b:32:
         4f:a8:68:e4:a3:6f:12:66:ee:2b:eb:7d:a9:1d:e6:9c:17:22:
         dd:6c:7c:a5:e0:7c:67:a4:65:59:cf:45:ea:38:b0:96:e7:7e:
         84:96:ae:6d:15:8c:6b:58:7d:3f:ef:61:1d:6d:64:d8:af:6f:
         eb:06:14:83:1c:95:3c:eb:54:95:ed:68:97:02:49:e8:a0:c3:
         99:e7:87:cb:f7:7e:98:4a:a7:33:6a:78:dc:17:3b:8f:04:49:
         14:e7:04:fc:3f:22:05:d9:75:c9:24:14:c5:de:ae:02:67:da:
         d0:58:a1:ca:27:ef:b0:48:1d:49:1d:4a:cc:7c:0c:7b:e2:05:
         26:57:1f:7c:ea:7b:d0:9b:ef:a3:47:b4:eb:6f:54:d3:82:7d:
         33:68:a9:a1:25:bd:09:1e:22:64:4c:a6:0e:70:e0:37:24:9f:
         d3:2f:8d:5f:b9:4f:60:ad:72:06:2c:75:8f:03:71:65:47:45:
         3b:5e:b4:55:02:2a:89:ed:20:13:32:1c:fe:0f:2b:4c:3c:73:
         29:ca:f7:90:a9:01:6e:ff:fc:98:a0:ae:ce:06:f2:fc:4b:bc:
         2b:85:2a:ec:d8:07:c0:7a:45:b2:e3:f7:91:b1:3d:ea:fd:ef:
         b0:15:66:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBsQkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM3
ODE4MGQwNjE3YWUxN2Y5MmQ1MDI0ZTMwYTc5MjFjZDNmMzAyMDYwHhcNMjEwMzI0
MTQyOTQ4WhcNMjYwMzI0MTQyOTQ4WjAzMTEwLwYDVQQDEygzMzJmOTBkZTI3ZDll
ZjYwZmMwYzk5OGJjMzJiYjdmZWUyMzllY2FiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp00q1sznMOlwuIHhJCMc3MvEfHLm4haxy1q4EQna+5GVIPA0
6uRL7fUpbRYcnqPIX/Hiy20WIaF6BtN4WOpGJZ95fjUckqvd+zNq0EO/uSO6bJpa
WfOgngxRyIL688NAXG0nbubBq3zT4UVTZdQRlOJOvhXZYOvaAknXXulOLpP9rJHj
VeDhqM2CsYTidLprpGY10C3HjWBWWGaxd15RUJi6RlLfLwmggFf8OPrKFyjWxOK5
HPdT+KUtKFyHirIEThQRAYwgUd+TweiqtkhfqQXUBf4tnFjp5sSL15QhW+txV/Fz
maWYk8vyuRMyLLWo4aZxj8psKgkKZEdgQLJjwwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAqPG2GVnMFHITVJUDwtwz1RT52RMB8GA1UdIwQYMBaAFLB06GIuFhY0rEWS
ZjGFqCjA6aBFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzc4MTgw
ZDA2MTdhZTE3ZjkyZDUwMjRlMzBhNzkyMWNkM2YzMDIwNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzJhOTU4OTItMzAyZi00NGQzLTk4ZjQtMjQ4MjMw
ZmYwY2IxLzMzMmY5MGRlMjdkOWVmNjBmYzBjOTk4YmMzMmJiN2ZlZTIzOWVjYWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MmE5NTg5Mi0zMDJmLTQ0ZDMtOThmNC0yNDgy
MzBmZjBjYjEvMzc4MTgwZDA2MTdhZTE3ZjkyZDUwMjRlMzBhNzkyMWNkM2YzMDIw
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr0IcDANBAIAAjAHAwUAKANZ4DANBgkqhkiG9w0BAQsFAAOC
AQEAJP5jGIJjVu+XOjKPY4dnLzsyT6ho5KNvEmbuK+t9qR3mnBci3Wx8peB8Z6Rl
Wc9F6jiwlud+hJaubRWMa1h9P+9hHW1k2K9v6wYUgxyVPOtUle1olwJJ6KDDmeeH
y/d+mEqnM2p43Bc7jwRJFOcE/D8iBdl1ySQUxd6uAmfa0FihyifvsEgdSR1KzHwM
e+IFJlcffOp70Jvvo0e0629U04J9M2ipoSW9CR4iZEymDnDgNySf0y+NX7lPYK1y
Bix1jwNxZUdFO160VQIqie0gEzIc/g8rTDxzKcr3kKkBbv/8mKCuzgby/Eu8K4Uq
7NgHwHpFsuP3kbE96v3vsBVm5w==
-----END CERTIFICATE-----