Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8eb6f425-8ba0-4e39-9070-2e2df9797844/28ae2065649d14d56cea84fc4df7757f9856a330.roa
File:                     28ae2065649d14d56cea84fc4df7757f9856a330.roa (raw, json)
Hash identifier:          dSCcA2Ssue/Ug4L/qmHOFfozFIDQmSLxM9bpEXrq59A=
Subject key identifier:   91:F7:AB:22:2E:62:3E:6E:9F:CB:08:51:9C:E6:34:49:75:1C:59:CC
Certificate issuer:       /CN=27edb372e5160b5dca75f56c1d50a06ab4ac37b8
Certificate serial:       0CE6DE
Authority key identifier: 48:E5:CB:6A:F5:67:C9:A1:EC:EF:3D:88:97:4D:23:E8:C4:A7:79:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27edb372e5160b5dca75f56c1d50a06ab4ac37b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8eb6f425-8ba0-4e39-9070-2e2df9797844/28ae2065649d14d56cea84fc4df7757f9856a330.roa
Signing time:             Wed 24 Mar 2021 14:41:16 +0000
ROA not before:           Wed 24 Mar 2021 14:41:16 +0000
ROA not after:            Tue 24 Mar 2026 14:41:16 +0000
asID:                     269941
IP address blocks:        200.1.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 845534 (0xce6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27edb372e5160b5dca75f56c1d50a06ab4ac37b8
        Validity
            Not Before: Mar 24 14:41:16 2021 GMT
            Not After : Mar 24 14:41:16 2026 GMT
        Subject: CN=28ae2065649d14d56cea84fc4df7757f9856a330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:3b:73:a9:44:e1:61:39:54:fc:b4:09:fc:
                    e7:27:c2:a0:c8:7d:4f:5c:25:df:6a:93:dc:7b:ca:
                    ff:c8:c2:e4:d8:4a:de:91:e4:aa:6c:41:b8:86:c2:
                    df:10:63:ce:c2:19:c3:b8:5a:75:cc:b0:0a:21:ad:
                    bb:be:ae:1a:e0:0c:79:2e:55:10:ce:2f:44:88:67:
                    e6:57:88:d1:3a:ab:d3:b4:a9:71:61:ea:b0:60:4f:
                    3a:02:03:c4:02:58:24:36:4e:b8:7d:ce:b8:6f:1b:
                    c1:7b:e2:2b:d9:d2:21:93:46:76:ea:3b:38:a0:4e:
                    09:28:a4:f3:1e:a9:ae:d2:e4:c4:62:9a:cc:af:a6:
                    92:2e:d0:e2:44:5c:c2:ed:69:04:33:50:98:14:66:
                    cb:74:c5:d0:49:dd:be:05:5e:ce:0a:43:27:bb:be:
                    6a:12:3a:64:ac:78:d1:d6:4f:b7:25:11:6e:3e:0c:
                    cd:e8:d7:7a:c0:96:31:fa:2b:fb:68:aa:46:a4:3e:
                    0b:be:9b:d7:ae:bf:2a:71:47:35:12:18:b6:a4:8b:
                    87:13:cd:a5:2d:4e:91:17:49:cd:47:9b:cf:84:ea:
                    bf:cb:a0:7c:d4:e5:c2:94:ec:59:2c:76:00:be:70:
                    dc:9a:42:a7:0e:f7:57:2c:c2:05:7a:b0:e5:96:4e:
                    4d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F7:AB:22:2E:62:3E:6E:9F:CB:08:51:9C:E6:34:49:75:1C:59:CC
            X509v3 Authority Key Identifier:
                keyid:48:E5:CB:6A:F5:67:C9:A1:EC:EF:3D:88:97:4D:23:E8:C4:A7:79:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27edb372e5160b5dca75f56c1d50a06ab4ac37b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8eb6f425-8ba0-4e39-9070-2e2df9797844/28ae2065649d14d56cea84fc4df7757f9856a330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8eb6f425-8ba0-4e39-9070-2e2df9797844/27edb372e5160b5dca75f56c1d50a06ab4ac37b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:6e:0c:4e:40:7c:d4:de:4e:6c:9e:57:25:1c:c9:df:5e:7c:
         ea:51:e0:90:f9:ea:70:26:83:52:8c:61:ef:56:32:61:59:1e:
         d8:58:94:4a:d5:84:37:f1:d5:5b:5c:0c:1e:7f:4d:9b:a8:e4:
         fc:b5:ec:56:99:d4:07:22:1b:cd:c6:96:3c:bf:06:16:b8:54:
         88:e4:19:e9:e2:4d:56:9f:40:7b:a7:f1:1d:2c:70:21:a4:a7:
         9f:04:f1:f9:8b:8d:48:12:a1:4e:32:c4:de:67:9e:72:b0:31:
         17:d6:d6:97:85:83:8e:7d:36:31:36:f9:8c:cc:3f:95:19:1b:
         b1:ab:08:bd:d1:35:e3:f2:55:6f:38:d5:0b:fd:06:12:30:bc:
         e7:0f:79:9e:df:5e:39:f6:ad:fa:24:93:e2:0f:6c:a5:99:3f:
         8a:b0:8c:26:b9:66:11:fe:02:f7:e3:4e:6c:1f:86:88:5a:43:
         95:48:11:28:53:0b:ed:b6:3a:4b:d5:0d:33:95:14:c8:3f:35:
         5d:bc:25:93:ae:9d:11:d7:60:12:48:0b:50:aa:76:e4:0b:c9:
         11:3d:5c:7c:35:47:03:4f:f9:59:e3:0a:9d:d9:7d:11:a5:2c:
         72:6d:5b:aa:c7:9e:4d:4c:47:07:c3:5f:94:f2:2b:e4:84:8c:
         e7:14:41:25
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDObeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI3
ZWRiMzcyZTUxNjBiNWRjYTc1ZjU2YzFkNTBhMDZhYjRhYzM3YjgwHhcNMjEwMzI0
MTQ0MTE2WhcNMjYwMzI0MTQ0MTE2WjAzMTEwLwYDVQQDEygyOGFlMjA2NTY0OWQx
NGQ1NmNlYTg0ZmM0ZGY3NzU3Zjk4NTZhMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl8g7c6lE4WE5VPy0CfznJ8KgyH1PXCXfapPce8r/yMLk2Ere
keSqbEG4hsLfEGPOwhnDuFp1zLAKIa27vq4a4Ax5LlUQzi9EiGfmV4jROqvTtKlx
YeqwYE86AgPEAlgkNk64fc64bxvBe+Ir2dIhk0Z26js4oE4JKKTzHqmu0uTEYprM
r6aSLtDiRFzC7WkEM1CYFGbLdMXQSd2+BV7OCkMnu75qEjpkrHjR1k+3JRFuPgzN
6Nd6wJYx+iv7aKpGpD4LvpvXrr8qcUc1Ehi2pIuHE82lLU6RF0nNR5vPhOq/y6B8
1OXClOxZLHYAvnDcmkKnDvdXLMIFerDllk5N+QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJH3qyIuYj5un8sIUZzmNEl1HFnMMB8GA1UdIwQYMBaAFEjly2r1Z8mh7O89
iJdNI+jEp3mlMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjdlZGIz
NzJlNTE2MGI1ZGNhNzVmNTZjMWQ1MGEwNmFiNGFjMzdiOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGViNmY0MjUtOGJhMC00ZTM5LTkwNzAtMmUyZGY5
Nzk3ODQ0LzI4YWUyMDY1NjQ5ZDE0ZDU2Y2VhODRmYzRkZjc3NTdmOTg1NmEzMzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZWI2ZjQyNS04YmEwLTRlMzktOTA3MC0yZTJk
Zjk3OTc4NDQvMjdlZGIzNzJlNTE2MGI1ZGNhNzVmNTZjMWQ1MGEwNmFiNGFjMzdi
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgBoTANBgkqhkiG9w0BAQsFAAOCAQEArm4MTkB81N5ObJ5X
JRzJ31586lHgkPnqcCaDUoxh71YyYVke2FiUStWEN/HVW1wMHn9Nm6jk/LXsVpnU
ByIbzcaWPL8GFrhUiOQZ6eJNVp9Ae6fxHSxwIaSnnwTx+YuNSBKhTjLE3meecrAx
F9bWl4WDjn02MTb5jMw/lRkbsasIvdE14/JVbzjVC/0GEjC85w95nt9eOfat+iST
4g9spZk/irCMJrlmEf4C9+NObB+GiFpDlUgRKFML7bY6S9UNM5UUyD81Xbwlk66d
EddgEkgLUKp25AvJET1cfDVHA0/5WeMKndl9EaUscm1bqseeTUxHB8NflPIr5ISM
5xRBJQ==
-----END CERTIFICATE-----