Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/8a2a790b9b0f64ae36ba9e38a79dbba7db348bdb.roa
File:                     8a2a790b9b0f64ae36ba9e38a79dbba7db348bdb.roa (raw, json)
Hash identifier:          dm7dMDlWZVD1YT8NxI0mx+vNgOgS24cBuJ1eTQTPass=
Subject key identifier:   83:AC:75:63:16:2A:AE:0E:60:48:AF:2B:99:AF:C7:12:52:2C:92:12
Certificate issuer:       /CN=e5402bfe1ad870c061abac12431f9dd6da475fb9
Certificate serial:       0D3241
Authority key identifier: 7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5402bfe1ad870c061abac12431f9dd6da475fb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/8a2a790b9b0f64ae36ba9e38a79dbba7db348bdb.roa
Signing time:             Wed 24 Mar 2021 14:37:10 +0000
ROA not before:           Wed 24 Mar 2021 14:37:09 +0000
ROA not after:            Tue 24 Mar 2026 14:37:09 +0000
asID:                     28050
IP address blocks:        200.74.248.0/24 maxlen: 24
                          2803:2040::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864833 (0xd3241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5402bfe1ad870c061abac12431f9dd6da475fb9
        Validity
            Not Before: Mar 24 14:37:09 2021 GMT
            Not After : Mar 24 14:37:09 2026 GMT
        Subject: CN=8a2a790b9b0f64ae36ba9e38a79dbba7db348bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cd:17:61:91:17:b9:8c:a2:ef:4b:58:8a:6f:
                    33:b5:9c:9d:95:e2:d9:9b:a6:3d:8b:81:c4:34:07:
                    04:6f:0a:6f:4e:fd:f2:0b:71:7e:2b:e9:0d:5a:fa:
                    e7:87:c4:5f:46:d1:dd:ba:f0:42:bc:b0:8b:57:da:
                    cd:e4:7b:b8:74:bd:0b:b9:67:b4:f7:db:a9:3f:9b:
                    56:11:91:08:40:97:d1:74:6b:24:66:2f:2d:21:48:
                    cc:34:56:64:17:16:1f:e0:c9:13:c2:4b:ef:5e:48:
                    71:76:13:be:76:39:2a:52:b3:ff:37:18:7e:58:af:
                    6b:d8:d5:a3:24:e0:49:2a:2e:5b:3e:42:34:98:66:
                    ed:d6:e5:fc:a9:34:e4:b3:62:d0:af:4b:00:96:6a:
                    83:b6:4b:7e:b9:fb:82:05:ad:b3:83:7a:05:80:dd:
                    a5:40:9f:33:02:67:71:d3:65:21:ed:08:06:43:0b:
                    0a:d0:da:04:f5:ff:4f:d3:86:44:48:e3:49:e7:a3:
                    f0:74:0e:96:ac:27:b2:f8:00:d9:20:b2:d6:27:0e:
                    fa:46:ba:85:90:86:3d:25:9c:c5:30:49:ae:3d:07:
                    eb:a2:6b:02:68:31:27:77:d6:96:71:44:a6:c0:ee:
                    70:45:50:65:d4:2e:11:82:c8:d3:4b:1c:61:7a:d7:
                    3a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AC:75:63:16:2A:AE:0E:60:48:AF:2B:99:AF:C7:12:52:2C:92:12
            X509v3 Authority Key Identifier:
                keyid:7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5402bfe1ad870c061abac12431f9dd6da475fb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/8a2a790b9b0f64ae36ba9e38a79dbba7db348bdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/e5402bfe1ad870c061abac12431f9dd6da475fb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.248.0/24
                IPv6:
                  2803:2040::/32

    Signature Algorithm: sha256WithRSAEncryption
         e5:5d:c6:19:9d:90:b9:c1:01:05:b0:31:2c:88:94:02:1a:b1:
         aa:6f:d0:e7:60:ea:eb:44:e3:ae:f8:fd:f4:fa:a4:02:d1:89:
         b1:72:4b:09:df:36:53:69:47:ed:b6:97:63:14:bf:ae:0e:af:
         48:30:cd:e9:35:a3:ef:e2:dd:9b:93:17:7d:97:74:79:e4:15:
         04:89:f2:4e:d9:49:14:09:e2:92:88:c1:2a:6f:95:96:af:0e:
         e8:ea:3d:4a:27:3b:e4:a9:a1:1d:09:d5:48:90:06:e6:2e:21:
         7c:e3:4b:c4:85:bc:db:27:fe:a9:63:00:ea:5b:98:39:09:7c:
         bd:0f:32:65:19:e7:aa:6c:7b:81:94:b5:af:ef:98:83:c3:cd:
         4e:84:01:8e:e1:4c:6a:b5:35:32:2c:db:53:90:93:a8:4c:7e:
         68:32:39:0e:03:07:bc:c8:2b:fa:d0:9f:40:f7:8e:07:71:d2:
         19:54:67:e7:88:74:c3:4a:32:4d:8f:e7:e0:3d:16:6a:ed:43:
         26:7b:58:4d:f2:b1:e0:44:16:9c:a7:fb:5a:49:27:67:3e:8c:
         2d:57:f2:16:c6:80:42:5f:1a:8f:5e:f0:ae:f0:a0:78:7c:76:
         d0:22:f6:9c:79:e9:aa:7d:dd:9e:1f:f2:e1:bc:2f:78:bd:4c:
         34:41:6f:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDTJBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
NDAyYmZlMWFkODcwYzA2MWFiYWMxMjQzMWY5ZGQ2ZGE0NzVmYjkwHhcNMjEwMzI0
MTQzNzA5WhcNMjYwMzI0MTQzNzA5WjAzMTEwLwYDVQQDEyg4YTJhNzkwYjliMGY2
NGFlMzZiYTllMzhhNzlkYmJhN2RiMzQ4YmRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlc0XYZEXuYyi70tYim8ztZydleLZm6Y9i4HENAcEbwpvTv3y
C3F+K+kNWvrnh8RfRtHduvBCvLCLV9rN5Hu4dL0LuWe099upP5tWEZEIQJfRdGsk
Zi8tIUjMNFZkFxYf4MkTwkvvXkhxdhO+djkqUrP/Nxh+WK9r2NWjJOBJKi5bPkI0
mGbt1uX8qTTks2LQr0sAlmqDtkt+ufuCBa2zg3oFgN2lQJ8zAmdx02Uh7QgGQwsK
0NoE9f9P04ZESONJ56PwdA6WrCey+ADZILLWJw76RrqFkIY9JZzFMEmuPQfromsC
aDEnd9aWcUSmwO5wRVBl1C4RgsjTSxxhetc6JQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFIOsdWMWKq4OYEivK5mvxxJSLJISMB8GA1UdIwQYMBaAFHy57jsV7LuqvmWj
TTZuzPtJ/8/1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTU0MDJi
ZmUxYWQ4NzBjMDYxYWJhYzEyNDMxZjlkZDZkYTQ3NWZiOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2JjMzJmNGQtYWRkNi00NTY5LWJiOTUtNTIxYzgx
MjRiYzc0LzhhMmE3OTBiOWIwZjY0YWUzNmJhOWUzOGE3OWRiYmE3ZGIzNDhiZGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YmMzMmY0ZC1hZGQ2LTQ1NjktYmI5NS01MjFj
ODEyNGJjNzQvZTU0MDJiZmUxYWQ4NzBjMDYxYWJhYzEyNDMxZjlkZDZkYTQ3NWZi
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAMhK+DANBAIAAjAHAwUAKAMgQDANBgkqhkiG9w0BAQsFAAOC
AQEA5V3GGZ2QucEBBbAxLIiUAhqxqm/Q52Dq60Tjrvj99PqkAtGJsXJLCd82U2lH
7baXYxS/rg6vSDDN6TWj7+Ldm5MXfZd0eeQVBInyTtlJFAnikojBKm+Vlq8O6Oo9
Sic75KmhHQnVSJAG5i4hfONLxIW82yf+qWMA6luYOQl8vQ8yZRnnqmx7gZS1r++Y
g8PNToQBjuFMarU1MizbU5CTqEx+aDI5DgMHvMgr+tCfQPeOB3HSGVRn54h0w0oy
TY/n4D0Wau1DJntYTfKx4EQWnKf7WkknZz6MLVfyFsaAQl8aj17wrvCgeHx20CL2
nHnpqn3dnh/y4bwveL1MNEFvTg==
-----END CERTIFICATE-----