Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a428779c-c004-417f-bd63-1d8b23515880/c833440e70797d8f8e3e904249ef7eddaddac67c.roa
File:                     c833440e70797d8f8e3e904249ef7eddaddac67c.roa (raw, json)
Hash identifier:          efy5bDgDf8k8+FWRkK7QEvp9aeY6EjLduj+Jaa21dnw=
Subject key identifier:   79:66:FA:13:E6:35:FB:05:38:03:1A:2F:42:86:79:5C:19:6A:D7:97
Certificate issuer:       /CN=55a61a96d322f92afcbb5f8d95d08c51f95c6d5e
Certificate serial:       0C318E
Authority key identifier: AB:F1:69:6F:2A:66:86:A7:FA:9F:C5:91:6A:7E:2B:C1:9B:B6:B3:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55a61a96d322f92afcbb5f8d95d08c51f95c6d5e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a428779c-c004-417f-bd63-1d8b23515880/c833440e70797d8f8e3e904249ef7eddaddac67c.roa
Signing time:             Wed 24 Mar 2021 14:33:04 +0000
ROA not before:           Wed 24 Mar 2021 14:33:04 +0000
ROA not after:            Tue 24 Mar 2026 14:33:04 +0000
asID:                     9009
IP address blocks:        190.14.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799118 (0xc318e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a61a96d322f92afcbb5f8d95d08c51f95c6d5e
        Validity
            Not Before: Mar 24 14:33:04 2021 GMT
            Not After : Mar 24 14:33:04 2026 GMT
        Subject: CN=c833440e70797d8f8e3e904249ef7eddaddac67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6c:d9:68:f9:b2:0e:bd:db:09:83:a1:0a:d8:
                    90:99:ab:e5:7a:3c:1d:f0:05:98:24:7d:29:1a:72:
                    38:fe:da:fb:22:e3:b4:e0:cf:64:cb:a2:3b:af:f3:
                    bb:3a:86:80:92:ee:0f:35:ab:1e:27:09:d8:07:d9:
                    fb:39:b4:e4:49:a2:8d:4a:0c:35:2e:8c:d5:0e:05:
                    1b:25:63:5a:94:bd:65:1e:c8:64:11:7d:16:ec:69:
                    3c:a5:c3:c6:12:e4:2f:c0:6d:df:da:a8:70:dc:1d:
                    cd:ce:54:14:61:60:6a:34:75:9d:0a:73:81:b6:8c:
                    23:51:22:87:99:1d:94:e7:bf:46:06:95:7b:d7:72:
                    75:47:20:6d:26:92:e3:59:7d:9a:18:68:d7:35:40:
                    47:95:d2:46:7c:a5:d1:8f:cc:b0:e0:19:af:8a:22:
                    f9:b1:5a:b9:6f:00:ef:d3:3a:03:24:78:20:8e:91:
                    e6:7e:47:21:e2:65:e8:1c:fd:28:e5:d5:2c:a3:84:
                    96:13:a4:68:c7:93:be:85:35:00:02:0d:b3:15:b3:
                    c3:ff:a6:5a:31:b6:c9:a4:6d:91:bc:82:29:d3:30:
                    0b:da:6f:5a:4b:a1:a0:1a:4d:92:48:49:8a:78:e2:
                    26:65:cf:3f:01:63:ec:44:96:bd:0e:63:0a:59:df:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:66:FA:13:E6:35:FB:05:38:03:1A:2F:42:86:79:5C:19:6A:D7:97
            X509v3 Authority Key Identifier:
                keyid:AB:F1:69:6F:2A:66:86:A7:FA:9F:C5:91:6A:7E:2B:C1:9B:B6:B3:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55a61a96d322f92afcbb5f8d95d08c51f95c6d5e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a428779c-c004-417f-bd63-1d8b23515880/c833440e70797d8f8e3e904249ef7eddaddac67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a428779c-c004-417f-bd63-1d8b23515880/55a61a96d322f92afcbb5f8d95d08c51f95c6d5e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:fe:9c:e8:a5:4b:9b:0e:3a:90:92:2f:cd:0d:18:c5:0f:44:
         49:45:43:6e:9c:b4:eb:14:9f:ba:d2:c9:7f:a6:23:8f:65:22:
         21:55:01:73:38:42:45:41:c2:9c:e6:aa:3b:7d:aa:50:67:21:
         0c:a3:fc:ae:ca:74:42:b1:7f:1b:9e:a2:b2:a0:cd:ea:ab:2b:
         04:88:93:ab:a1:55:80:a8:b7:a5:06:91:eb:0e:69:2a:b9:bc:
         e8:1e:89:cd:fa:0e:dc:b8:17:52:fb:18:a9:9a:c5:c5:44:b8:
         4d:6a:f2:1f:73:8d:49:e1:88:49:e7:42:b1:a7:d2:52:e6:28:
         da:3a:c9:6b:8b:d9:dd:94:49:7d:76:cd:50:f1:9e:1e:a8:37:
         ab:23:92:a8:f8:1e:b5:9f:34:2a:97:28:d1:58:f3:a8:24:d2:
         d9:c8:d5:65:96:ce:e8:a2:c8:96:69:c8:b4:a1:ee:b2:b6:c3:
         9e:34:a7:e2:f6:0c:38:40:3b:6a:14:e1:17:56:cb:31:6e:9f:
         f1:26:85:77:58:07:2d:32:67:e2:3a:78:60:59:65:36:01:39:
         e8:6c:d6:29:ed:5c:0a:15:01:87:38:32:31:39:75:66:d0:a8:
         8c:44:5d:49:ac:f3:8c:ed:c3:9c:68:21:b9:28:db:98:43:8d:
         83:79:ff:81
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDDGOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU1
YTYxYTk2ZDMyMmY5MmFmY2JiNWY4ZDk1ZDA4YzUxZjk1YzZkNWUwHhcNMjEwMzI0
MTQzMzA0WhcNMjYwMzI0MTQzMzA0WjAzMTEwLwYDVQQDEyhjODMzNDQwZTcwNzk3
ZDhmOGUzZTkwNDI0OWVmN2VkZGFkZGFjNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAimzZaPmyDr3bCYOhCtiQmavlejwd8AWYJH0pGnI4/tr7IuO0
4M9ky6I7r/O7OoaAku4PNaseJwnYB9n7ObTkSaKNSgw1LozVDgUbJWNalL1lHshk
EX0W7Gk8pcPGEuQvwG3f2qhw3B3NzlQUYWBqNHWdCnOBtowjUSKHmR2U579GBpV7
13J1RyBtJpLjWX2aGGjXNUBHldJGfKXRj8yw4BmviiL5sVq5bwDv0zoDJHggjpHm
fkch4mXoHP0o5dUso4SWE6Rox5O+hTUAAg2zFbPD/6ZaMbbJpG2RvIIp0zAL2m9a
S6GgGk2SSEmKeOImZc8/AWPsRJa9DmMKWd9P1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHlm+hPmNfsFOAMaL0KGeVwZateXMB8GA1UdIwQYMBaAFKvxaW8qZoan+p/F
kWp+K8GbtrO9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTVhNjFh
OTZkMzIyZjkyYWZjYmI1ZjhkOTVkMDhjNTFmOTVjNmQ1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTQyODc3OWMtYzAwNC00MTdmLWJkNjMtMWQ4YjIz
NTE1ODgwL2M4MzM0NDBlNzA3OTdkOGY4ZTNlOTA0MjQ5ZWY3ZWRkYWRkYWM2N2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNDI4Nzc5Yy1jMDA0LTQxN2YtYmQ2My0xZDhi
MjM1MTU4ODAvNTVhNjFhOTZkMzIyZjkyYWZjYmI1ZjhkOTVkMDhjNTFmOTVjNmQ1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL4OATANBgkqhkiG9w0BAQsFAAOCAQEAlv6c6KVLmw46kJIv
zQ0YxQ9ESUVDbpy06xSfutLJf6Yjj2UiIVUBczhCRUHCnOaqO32qUGchDKP8rsp0
QrF/G56isqDN6qsrBIiTq6FVgKi3pQaR6w5pKrm86B6JzfoO3LgXUvsYqZrFxUS4
TWryH3ONSeGISedCsafSUuYo2jrJa4vZ3ZRJfXbNUPGeHqg3qyOSqPgetZ80Kpco
0VjzqCTS2cjVZZbO6KLIlmnItKHusrbDnjSn4vYMOEA7ahThF1bLMW6f8SaFd1gH
LTJn4jp4YFllNgE56GzWKe1cChUBhzgyMTl1ZtCojERdSazzjO3DnGghuSjbmEON
g3n/gQ==
-----END CERTIFICATE-----