Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/79346ae78449ce7ca6bc98f664f0e68e2ca3196b.roa
File:                     79346ae78449ce7ca6bc98f664f0e68e2ca3196b.roa (raw, json)
Hash identifier:          abk/FQEZ7jXl+B/GV+CI7vCm1TqjwGQObUCygWmJoHQ=
Subject key identifier:   16:0A:3D:1B:75:CE:6D:8D:35:49:83:78:F6:E9:56:F3:25:43:29:82
Certificate issuer:       /CN=7e5ad0382aaf9a61199883acec8acb56379f4413
Certificate serial:       13D6AA
Authority key identifier: 13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/79346ae78449ce7ca6bc98f664f0e68e2ca3196b.roa
Signing time:             Sun 12 Dec 2021 04:39:50 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266776
IP address blocks:        170.78.112.0/22 maxlen: 24
                          2803:e8c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300138 (0x13d6aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5ad0382aaf9a61199883acec8acb56379f4413
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=79346ae78449ce7ca6bc98f664f0e68e2ca3196b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:f7:a6:fc:5b:8d:5e:3b:0f:f0:5e:e0:aa:
                    79:4a:63:23:bf:e9:24:84:87:a1:51:e6:2d:ed:90:
                    2d:ed:54:c1:9d:d5:c3:8c:47:f4:9b:6b:4e:75:2c:
                    26:26:2e:ad:de:e6:bf:78:6e:bf:6a:d7:7a:3c:3f:
                    e5:b2:4f:d1:b4:5e:74:29:91:61:58:72:5a:8c:56:
                    7c:98:0c:90:51:f5:ba:f1:e6:ff:dd:55:82:36:62:
                    06:53:20:f8:ab:04:8e:1f:3a:76:b3:28:99:1b:af:
                    b0:30:75:79:68:29:88:d0:e0:82:66:d6:5a:5e:b9:
                    9a:5a:71:40:d1:dd:28:3c:97:87:bc:e9:85:1c:a2:
                    e7:65:bc:55:dd:69:29:f4:9d:5d:39:d7:4c:99:44:
                    70:d5:88:02:81:7e:7a:f0:fa:2b:f4:77:28:47:b5:
                    a4:8f:b9:22:4b:97:7e:1f:13:22:be:3d:23:7c:9d:
                    d0:5e:d4:e3:d6:fb:62:88:39:3f:f3:74:c3:ed:05:
                    fb:60:94:15:68:6b:26:d7:47:de:9e:07:8d:6d:76:
                    9c:86:5f:75:95:d3:d7:2f:f9:e6:52:93:ac:ec:52:
                    31:84:a2:44:bb:bf:79:5e:0e:7c:65:26:32:b3:c1:
                    12:9b:fb:19:29:af:b5:5a:3e:6d:2c:f9:05:2b:f8:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0A:3D:1B:75:CE:6D:8D:35:49:83:78:F6:E9:56:F3:25:43:29:82
            X509v3 Authority Key Identifier:
                keyid:13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/79346ae78449ce7ca6bc98f664f0e68e2ca3196b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/7e5ad0382aaf9a61199883acec8acb56379f4413.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.112.0/22
                IPv6:
                  2803:e8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:f8:35:37:16:d1:ad:1d:81:65:e6:13:38:3f:38:ea:4d:bd:
         d5:b9:11:a7:f6:aa:10:17:14:f4:e2:52:84:9a:99:43:05:cb:
         d3:6d:57:11:21:fd:32:94:a2:c0:34:32:a4:3a:17:9d:55:ff:
         0a:f4:e2:74:6d:78:c1:47:f4:61:39:a8:18:e7:3c:d4:09:e8:
         0b:c5:b1:fa:95:10:f2:6e:a6:19:63:96:63:b1:8f:1a:55:f7:
         1b:d9:37:3b:fb:6d:ba:ee:33:9d:cd:37:8f:ca:b1:14:85:34:
         a2:f0:32:cf:5e:6a:cc:90:c4:f1:3c:e5:7c:9c:2a:86:60:da:
         98:7e:f1:4f:4c:61:24:c1:25:b8:17:5b:f2:28:ea:0e:e7:a2:
         dd:be:55:6e:d1:6f:b6:9d:5e:4b:06:a8:78:6d:e6:6d:7c:ff:
         1e:24:35:b7:63:1b:71:5a:ee:df:17:7b:2b:41:cc:31:8f:f1:
         80:d9:2e:e0:86:69:f0:4f:39:c7:6a:ed:68:e5:8a:47:9d:0e:
         77:a5:2b:69:b4:13:50:14:dd:ba:c4:0a:1a:6d:79:b5:b3:43:
         35:8d:26:77:08:b7:59:37:ba:ed:96:d0:86:89:52:79:c4:2f:
         6a:b7:9f:44:7a:d6:05:3f:d9:11:0b:54:79:aa:1d:ca:81:8f:
         61:e0:db:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDE9aqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdl
NWFkMDM4MmFhZjlhNjExOTk4ODNhY2VjOGFjYjU2Mzc5ZjQ0MTMwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg3OTM0NmFlNzg0NDlj
ZTdjYTZiYzk4ZjY2NGYwZTY4ZTJjYTMxOTZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoKz3pvxbjV47D/Be4Kp5SmMjv+kkhIehUeYt7ZAt7VTBndXD
jEf0m2tOdSwmJi6t3ua/eG6/atd6PD/lsk/RtF50KZFhWHJajFZ8mAyQUfW68eb/
3VWCNmIGUyD4qwSOHzp2syiZG6+wMHV5aCmI0OCCZtZaXrmaWnFA0d0oPJeHvOmF
HKLnZbxV3Wkp9J1dOddMmURw1YgCgX568Por9HcoR7Wkj7kiS5d+HxMivj0jfJ3Q
XtTj1vtiiDk/83TD7QX7YJQVaGsm10fengeNbXachl91ldPXL/nmUpOs7FIxhKJE
u795Xg58ZSYys8ESm/sZKa+1Wj5tLPkFK/hMnwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBYKPRt1zm2NNUmDePbpVvMlQymCMB8GA1UdIwQYMBaAFBP+QV/cIiMSa0kG
BMgPfh7ufz0GMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2U1YWQw
MzgyYWFmOWE2MTE5OTg4M2FjZWM4YWNiNTYzNzlmNDQxMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGUxNzFkNGMtMmE5OC00OTg3LTg5MDMtMzA5NjE4
ODgwN2YwLzc5MzQ2YWU3ODQ0OWNlN2NhNmJjOThmNjY0ZjBlNjhlMmNhMzE5NmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZTE3MWQ0Yy0yYTk4LTQ5ODctODkwMy0zMDk2
MTg4ODA3ZjAvN2U1YWQwMzgyYWFmOWE2MTE5OTg4M2FjZWM4YWNiNTYzNzlmNDQx
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqpOcDANBAIAAjAHAwUAKAPowDANBgkqhkiG9w0BAQsFAAOC
AQEAAfg1NxbRrR2BZeYTOD846k291bkRp/aqEBcU9OJShJqZQwXL021XESH9MpSi
wDQypDoXnVX/CvTidG14wUf0YTmoGOc81AnoC8Wx+pUQ8m6mGWOWY7GPGlX3G9k3
O/ttuu4znc03j8qxFIU0ovAyz15qzJDE8TzlfJwqhmDamH7xT0xhJMEluBdb8ijq
Duei3b5VbtFvtp1eSwaoeG3mbXz/HiQ1t2MbcVru3xd7K0HMMY/xgNku4IZp8E85
x2rtaOWKR50Od6UrabQTUBTdusQKGm15tbNDNY0mdwi3WTe67ZbQholSecQvaref
RHrWBT/ZEQtUeaodyoGPYeDbiA==
-----END CERTIFICATE-----