Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/823cfe22-945e-4903-8b38-e566aa39a702/1e40c20bab48fb14759ea1e6dbda3eaa94c9f03a.roa
File:                     1e40c20bab48fb14759ea1e6dbda3eaa94c9f03a.roa (raw, json)
Hash identifier:          89QoRdTFfgL6hB2XbosaDeBlBMPPZJi/9IfQoPqRb8E=
Subject key identifier:   B1:5A:D8:B6:03:FA:75:13:14:93:E0:F6:FE:4F:91:0F:FD:B2:49:60
Certificate issuer:       /CN=dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2
Certificate serial:       0111B0
Authority key identifier: 09:24:7C:63:8E:C7:6E:41:FF:85:DB:B7:22:97:75:DD:B5:96:CC:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/823cfe22-945e-4903-8b38-e566aa39a702/1e40c20bab48fb14759ea1e6dbda3eaa94c9f03a.roa
Signing time:             Wed 24 Mar 2021 14:43:26 +0000
ROA not before:           Wed 24 Mar 2021 14:43:26 +0000
ROA not after:            Tue 24 Mar 2026 14:43:26 +0000
asID:                     265523
IP address blocks:        170.238.252.0/22 maxlen: 22
                          2806:285::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70064 (0x111b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2
        Validity
            Not Before: Mar 24 14:43:26 2021 GMT
            Not After : Mar 24 14:43:26 2026 GMT
        Subject: CN=1e40c20bab48fb14759ea1e6dbda3eaa94c9f03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:b6:ad:8e:05:76:ee:32:09:9c:c1:4d:0a:
                    78:48:89:31:44:68:c8:48:8c:0c:a9:7f:fe:16:16:
                    a6:00:18:64:c0:54:c0:cb:12:ea:0c:87:0d:a4:82:
                    16:10:2a:60:ec:6f:08:41:3e:14:17:bb:71:6b:0d:
                    a2:6e:32:14:0b:73:db:c0:6e:d9:09:21:5f:4f:bd:
                    f1:75:f1:d3:98:a1:0c:63:90:68:28:4c:05:69:0b:
                    18:64:9c:33:ac:80:18:e9:76:ca:c7:df:21:88:6e:
                    60:f2:97:74:5c:1f:c1:16:f4:89:98:fa:f0:63:36:
                    fb:10:a2:cb:82:86:32:23:27:96:83:bd:54:20:c2:
                    59:73:ad:12:eb:31:79:da:f3:05:17:b8:9c:bf:74:
                    0b:a9:b8:e2:81:3b:b0:2d:5b:8e:a6:03:be:55:4c:
                    78:b2:f9:a3:65:ad:c0:3c:45:20:4e:a3:70:50:7e:
                    20:c5:10:fb:61:b8:25:6b:4b:aa:91:bc:db:2b:ff:
                    e1:65:4a:46:6a:62:bf:81:a5:09:52:b5:bc:f4:d3:
                    c2:cb:2a:f3:c5:88:cc:b7:8e:fb:08:22:62:3a:57:
                    4a:82:5b:5e:97:47:0e:16:0e:1a:26:c8:31:24:e2:
                    f9:03:eb:aa:c3:d8:e1:c3:f9:a4:41:61:ff:4e:72:
                    b5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5A:D8:B6:03:FA:75:13:14:93:E0:F6:FE:4F:91:0F:FD:B2:49:60
            X509v3 Authority Key Identifier:
                keyid:09:24:7C:63:8E:C7:6E:41:FF:85:DB:B7:22:97:75:DD:B5:96:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/823cfe22-945e-4903-8b38-e566aa39a702/1e40c20bab48fb14759ea1e6dbda3eaa94c9f03a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/823cfe22-945e-4903-8b38-e566aa39a702/dafab1fe01cea5a2b53b1b14cb87ba4bef27d7c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.252.0/22
                IPv6:
                  2806:285::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:bb:3b:92:c2:d8:52:c4:a4:b0:18:e9:ea:e8:06:0b:0a:be:
         22:07:20:f9:c0:b9:2e:10:0a:71:db:40:50:98:3f:41:84:6a:
         6e:71:e4:fd:63:fe:e8:dc:13:7a:37:20:d9:3c:8f:b3:87:ce:
         70:f8:8a:d0:8a:97:96:ba:54:0a:f3:71:f9:34:1c:5b:56:b3:
         bd:be:3e:b7:7d:b4:05:7a:6f:c9:07:30:ea:6a:44:a0:1e:bc:
         6e:34:48:3f:0a:ed:60:6d:9d:81:1d:e1:10:b6:e3:a3:e3:f8:
         53:50:b2:01:81:c8:ae:45:48:32:00:ee:5e:ee:2e:b2:25:64:
         3d:19:97:8f:cb:40:45:3c:3c:ac:3a:0a:59:61:8b:cd:00:11:
         4a:87:4c:20:54:3d:95:51:13:4b:f9:d4:0c:5e:fb:17:eb:1d:
         fc:66:90:7b:6f:8d:94:16:0d:b4:13:77:33:ef:71:38:ee:f9:
         e0:34:8b:05:80:87:29:d5:82:bc:bb:c2:d4:8c:0c:7b:c4:1e:
         51:36:bc:9b:0e:2d:4e:11:c8:a9:a5:d0:2c:43:00:a2:ed:82:
         d8:5c:a0:14:93:51:5a:36:49:60:d5:84:bb:af:54:46:44:c2:
         b9:73:20:b6:73:b5:a4:f5:05:81:76:21:f0:f6:27:00:0f:cf:
         78:7d:11:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDARGwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRh
ZmFiMWZlMDFjZWE1YTJiNTNiMWIxNGNiODdiYTRiZWYyN2Q3YzIwHhcNMjEwMzI0
MTQ0MzI2WhcNMjYwMzI0MTQ0MzI2WjAzMTEwLwYDVQQDEygxZTQwYzIwYmFiNDhm
YjE0NzU5ZWExZTZkYmRhM2VhYTk0YzlmMDNhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwoC2rY4Fdu4yCZzBTQp4SIkxRGjISIwMqX/+FhamABhkwFTA
yxLqDIcNpIIWECpg7G8IQT4UF7txaw2ibjIUC3PbwG7ZCSFfT73xdfHTmKEMY5Bo
KEwFaQsYZJwzrIAY6XbKx98hiG5g8pd0XB/BFvSJmPrwYzb7EKLLgoYyIyeWg71U
IMJZc60S6zF52vMFF7icv3QLqbjigTuwLVuOpgO+VUx4svmjZa3APEUgTqNwUH4g
xRD7Ybgla0uqkbzbK//hZUpGamK/gaUJUrW89NPCyyrzxYjMt477CCJiOldKglte
l0cOFg4aJsgxJOL5A+uqw9jhw/mkQWH/TnK1EQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFLFa2LYD+nUTFJPg9v5PkQ/9sklgMB8GA1UdIwQYMBaAFAkkfGOOx25B/4Xb
tyKXdd21lsyOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGFmYWIx
ZmUwMWNlYTVhMmI1M2IxYjE0Y2I4N2JhNGJlZjI3ZDdjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODIzY2ZlMjItOTQ1ZS00OTAzLThiMzgtZTU2NmFh
MzlhNzAyLzFlNDBjMjBiYWI0OGZiMTQ3NTllYTFlNmRiZGEzZWFhOTRjOWYwM2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MjNjZmUyMi05NDVlLTQ5MDMtOGIzOC1lNTY2
YWEzOWE3MDIvZGFmYWIxZmUwMWNlYTVhMmI1M2IxYjE0Y2I4N2JhNGJlZjI3ZDdj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqru/DANBAIAAjAHAwUAKAYChTANBgkqhkiG9w0BAQsFAAOC
AQEAeLs7ksLYUsSksBjp6ugGCwq+Igcg+cC5LhAKcdtAUJg/QYRqbnHk/WP+6NwT
ejcg2TyPs4fOcPiK0IqXlrpUCvNx+TQcW1azvb4+t320BXpvyQcw6mpEoB68bjRI
PwrtYG2dgR3hELbjo+P4U1CyAYHIrkVIMgDuXu4usiVkPRmXj8tARTw8rDoKWWGL
zQARSodMIFQ9lVETS/nUDF77F+sd/GaQe2+NlBYNtBN3M+9xOO754DSLBYCHKdWC
vLvC1IwMe8QeUTa8mw4tThHIqaXQLEMAou2C2FygFJNRWjZJYNWEu69URkTCuXMg
tnO1pPUFgXYh8PYnAA/PeH0RaA==
-----END CERTIFICATE-----