Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f5eca1c-1761-4358-9006-522498d5f858/9b1ae38f616f641cade6ef018576eb34b2fb4e1c.roa
File:                     9b1ae38f616f641cade6ef018576eb34b2fb4e1c.roa (raw, json)
Hash identifier:          HSKPy19zgii3kjmDvWwL6Ai0uc8wR+A88cyK+YwG/2o=
Subject key identifier:   EA:43:98:7D:C9:6A:4F:E6:68:AD:F0:FD:80:23:4F:C9:3C:A5:D6:B8
Certificate issuer:       /CN=ad7d6f790bf6867516dffd067b3a4d238010cdaf
Certificate serial:       06F7
Authority key identifier: 8A:0A:09:D1:77:1D:60:CF:DB:54:B9:83:4F:8C:BC:77:CE:2A:24:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad7d6f790bf6867516dffd067b3a4d238010cdaf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8f5eca1c-1761-4358-9006-522498d5f858/9b1ae38f616f641cade6ef018576eb34b2fb4e1c.roa
Signing time:             Mon 22 Nov 2021 13:57:03 +0000
ROA not before:           Mon 22 Nov 2021 03:00:00 +0000
ROA not after:            Wed 22 Nov 2023 03:00:00 +0000
asID:                     264723
IP address blocks:        170.231.124.0/22 maxlen: 22
                          170.244.184.0/22 maxlen: 22
                          170.231.124.0/24 maxlen: 24
                          170.231.125.0/24 maxlen: 24
                          170.231.126.0/24 maxlen: 24
                          170.231.127.0/24 maxlen: 24
                          170.244.184.0/24 maxlen: 24
                          170.244.185.0/24 maxlen: 24
                          170.244.186.0/24 maxlen: 24
                          170.244.187.0/24 maxlen: 24
                          2803:2740::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783 (0x6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad7d6f790bf6867516dffd067b3a4d238010cdaf
        Validity
            Not Before: Nov 22 03:00:00 2021 GMT
            Not After : Nov 22 03:00:00 2023 GMT
        Subject: CN=9b1ae38f616f641cade6ef018576eb34b2fb4e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3e:6a:e8:49:d0:22:20:e1:d6:43:4b:98:a2:
                    9e:8b:43:30:e3:2a:54:77:9b:a5:2f:1c:3c:58:1c:
                    59:e6:36:a2:b4:5e:2e:cc:e2:06:cb:17:42:cf:7a:
                    2e:7e:b8:7b:8e:80:6a:4f:87:a6:d1:43:fa:36:89:
                    2f:c4:2a:a7:49:0b:76:84:bd:6a:8a:e2:9e:d7:df:
                    3d:57:9e:df:98:55:04:ee:a2:c2:5f:ac:ed:4e:c1:
                    01:7e:14:e7:d5:e5:e3:ae:26:2a:76:d6:17:70:b5:
                    94:cb:f6:20:83:5b:df:93:0d:f3:ff:97:00:8d:a4:
                    45:7e:4b:eb:da:f2:02:44:46:76:41:7b:e9:25:58:
                    34:ae:31:b4:f4:83:90:cf:10:fd:91:7e:d3:b7:6f:
                    4e:f6:60:51:57:e0:0a:3a:62:3c:ca:52:6e:0d:63:
                    49:d8:fc:3c:cc:cb:39:8f:d5:50:ce:94:1b:c9:5c:
                    37:c0:ac:dc:e8:1f:03:92:6a:0d:39:27:04:b1:5d:
                    44:1e:43:01:e5:85:00:b7:82:a1:53:9c:e3:33:34:
                    f9:ab:3b:13:1d:c3:40:d9:c9:32:2e:ff:0d:8d:c6:
                    32:e4:a4:8d:93:4f:76:b4:07:10:52:24:ca:93:94:
                    a6:1a:91:08:01:14:5b:ee:bf:54:c7:4d:56:72:a2:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:43:98:7D:C9:6A:4F:E6:68:AD:F0:FD:80:23:4F:C9:3C:A5:D6:B8
            X509v3 Authority Key Identifier:
                keyid:8A:0A:09:D1:77:1D:60:CF:DB:54:B9:83:4F:8C:BC:77:CE:2A:24:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad7d6f790bf6867516dffd067b3a4d238010cdaf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f5eca1c-1761-4358-9006-522498d5f858/9b1ae38f616f641cade6ef018576eb34b2fb4e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8f5eca1c-1761-4358-9006-522498d5f858/ad7d6f790bf6867516dffd067b3a4d238010cdaf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.124.0/22
                  170.244.184.0/22
                IPv6:
                  2803:2740::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:6b:a9:39:b1:c2:47:8b:c5:dd:13:b5:f5:95:63:08:ef:16:
         ac:6e:93:26:be:c0:cc:1b:5e:c9:2d:b5:1b:d6:33:fe:89:02:
         d5:be:1f:3b:cf:16:a1:64:d2:49:e9:0d:5a:ac:5e:cc:29:41:
         20:fd:0a:7f:a7:02:25:5d:cf:b6:7c:bb:19:61:35:7f:22:42:
         28:43:69:64:48:1c:c4:be:da:a4:ac:e5:2f:4b:43:d9:2e:1b:
         68:16:c0:3e:91:c9:ed:66:2f:3f:f5:72:35:9b:43:90:74:34:
         2d:c8:f5:c7:e0:0a:b0:a8:90:b1:ff:84:84:e4:ba:e1:df:8a:
         e9:c1:2b:44:fb:39:a6:e7:4f:89:8e:f5:4c:4d:e3:e4:f5:db:
         e2:e6:c5:51:b9:5a:21:ec:ca:ff:1c:e2:f9:6a:87:2c:ef:ae:
         a4:ef:26:eb:ec:a2:b5:a1:4a:9b:d8:9e:17:b4:bc:9b:cf:e5:
         c7:15:6b:3b:52:90:ea:0d:f9:59:de:dd:81:f2:48:ff:5d:d3:
         df:99:92:91:3f:ee:c9:65:f6:b8:08:ce:53:a8:f5:43:08:07:
         a0:ed:ec:40:8f:1e:5f:94:1d:d6:ba:4d:1c:7a:f8:17:90:0b:
         5a:c1:3d:1e:57:24:83:db:11:10:d4:72:ed:6e:94:f1:4f:76:
         c5:4a:46:75
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYWQ3
ZDZmNzkwYmY2ODY3NTE2ZGZmZDA2N2IzYTRkMjM4MDEwY2RhZjAeFw0yMTExMjIw
MzAwMDBaFw0yMzExMjIwMzAwMDBaMDMxMTAvBgNVBAMTKDliMWFlMzhmNjE2ZjY0
MWNhZGU2ZWYwMTg1NzZlYjM0YjJmYjRlMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCDPmroSdAiIOHWQ0uYop6LQzDjKlR3m6UvHDxYHFnmNqK0Xi7M
4gbLF0LPei5+uHuOgGpPh6bRQ/o2iS/EKqdJC3aEvWqK4p7X3z1Xnt+YVQTuosJf
rO1OwQF+FOfV5eOuJip21hdwtZTL9iCDW9+TDfP/lwCNpEV+S+va8gJERnZBe+kl
WDSuMbT0g5DPEP2RftO3b072YFFX4Ao6YjzKUm4NY0nY/DzMyzmP1VDOlBvJXDfA
rNzoHwOSag05JwSxXUQeQwHlhQC3gqFTnOMzNPmrOxMdw0DZyTIu/w2NxjLkpI2T
T3a0BxBSJMqTlKYakQgBFFvuv1THTVZyouyDAgMBAAGjggJwMIICbDAdBgNVHQ4E
FgQU6kOYfclqT+ZorfD9gCNPyTyl1rgwHwYDVR0jBBgwFoAUigoJ0XcdYM/bVLmD
T4y8d84qJOQwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9hZDdkNmY3
OTBiZjY4Njc1MTZkZmZkMDY3YjNhNGQyMzgwMTBjZGFmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy84ZjVlY2ExYy0xNzYxLTQzNTgtOTAwNi01MjI0OThk
NWY4NTgvOWIxYWUzOGY2MTZmNjQxY2FkZTZlZjAxODU3NmViMzRiMmZiNGUxYy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzhmNWVjYTFjLTE3NjEtNDM1OC05MDA2LTUyMjQ5
OGQ1Zjg1OC9hZDdkNmY3OTBiZjY4Njc1MTZkZmZkMDY3YjNhNGQyMzgwMTBjZGFm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUw
IzASBAIAATAMAwQCqud8AwQCqvS4MA0EAgACMAcDBQAoAydAMA0GCSqGSIb3DQEB
CwUAA4IBAQAra6k5scJHi8XdE7X1lWMI7xasbpMmvsDMG17JLbUb1jP+iQLVvh87
zxahZNJJ6Q1arF7MKUEg/Qp/pwIlXc+2fLsZYTV/IkIoQ2lkSBzEvtqkrOUvS0PZ
LhtoFsA+kcntZi8/9XI1m0OQdDQtyPXH4AqwqJCx/4SE5Lrh34rpwStE+zmm50+J
jvVMTePk9dvi5sVRuVoh7Mr/HOL5aocs766k7ybr7KK1oUqb2J4XtLybz+XHFWs7
UpDqDflZ3t2B8kj/XdPfmZKRP+7JZfa4CM5TqPVDCAeg7exAjx5flB3Wuk0cevgX
kAtawT0eVySD2xEQ1HLtbpTxT3bFSkZ1
-----END CERTIFICATE-----