Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/677c39959be330812b2cc5468a107b481de8d1da.roa
File:                     677c39959be330812b2cc5468a107b481de8d1da.roa (raw, json)
Hash identifier:          5nzY/xCGmnENHM3sLn1VowkpvEAtDgYKOYJ/Yj8+1m4=
Subject key identifier:   D5:C7:41:C5:37:12:93:37:39:E4:8A:1E:A3:AF:07:25:85:69:71:2C
Certificate issuer:       /CN=b14932b827e5b166c58065cb1f4068a039d95258
Certificate serial:       0DEEE9
Authority key identifier: D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/677c39959be330812b2cc5468a107b481de8d1da.roa
Signing time:             Wed 24 Mar 2021 14:33:06 +0000
ROA not before:           Wed 24 Mar 2021 14:33:06 +0000
ROA not after:            Tue 24 Mar 2026 14:33:06 +0000
asID:                     28094
IP address blocks:        131.161.148.0/22 maxlen: 22
                          200.123.208.0/21 maxlen: 21
                          2803:7900::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913129 (0xdeee9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14932b827e5b166c58065cb1f4068a039d95258
        Validity
            Not Before: Mar 24 14:33:06 2021 GMT
            Not After : Mar 24 14:33:06 2026 GMT
        Subject: CN=677c39959be330812b2cc5468a107b481de8d1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:76:38:4d:42:7a:b5:d8:1e:e3:a6:3c:8a:
                    b6:b6:b0:93:39:68:87:eb:e9:67:bc:92:19:5c:d6:
                    80:6d:6a:c5:bd:d3:25:73:df:5c:a9:09:2d:c8:a9:
                    f6:d1:8a:15:f6:22:d7:86:55:4d:08:38:63:fb:e1:
                    54:8a:e5:cf:61:27:db:39:7e:ac:7b:7d:0c:81:2c:
                    86:07:cf:e8:27:24:6b:19:bf:96:aa:0f:f9:b2:7e:
                    71:1c:0f:7d:17:6c:8b:8e:e3:39:16:1a:1d:57:28:
                    e2:de:0e:54:84:6d:d8:e2:cc:6b:2b:89:aa:ea:e3:
                    87:68:fe:21:f9:a3:8f:da:19:06:c8:a2:57:42:01:
                    87:34:91:0a:02:dc:21:b4:73:8c:4f:a7:28:e3:61:
                    d6:e6:1e:e2:89:48:aa:ec:bc:2f:c6:38:f4:aa:4d:
                    b3:5e:68:20:2e:27:66:ef:7e:36:20:02:03:59:8f:
                    7c:91:a9:ef:a7:97:da:14:e9:03:36:05:6b:6e:d7:
                    60:12:58:49:52:52:7e:c8:5a:b9:8e:e9:00:54:82:
                    f2:5c:90:a5:ff:06:7f:3f:6e:64:21:e3:cc:d9:a9:
                    e7:4c:92:46:fc:9c:12:22:f2:cc:da:b2:24:1a:c5:
                    84:c0:10:a9:b8:14:07:4e:3a:8e:ff:fd:e7:f5:a9:
                    eb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C7:41:C5:37:12:93:37:39:E4:8A:1E:A3:AF:07:25:85:69:71:2C
            X509v3 Authority Key Identifier:
                keyid:D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/677c39959be330812b2cc5468a107b481de8d1da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/b14932b827e5b166c58065cb1f4068a039d95258.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.148.0/22
                  200.123.208.0/21
                IPv6:
                  2803:7900::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:81:f2:66:47:01:ec:24:4c:33:96:b2:69:4b:1f:a1:31:ac:
         09:05:10:9c:d9:52:b3:82:3c:89:32:aa:f4:5a:35:3a:7e:6d:
         7a:77:91:22:b2:a7:72:b0:7d:e8:2d:93:d7:75:f9:14:d4:07:
         69:39:11:b4:43:47:4e:ff:77:c1:15:56:d2:77:79:3d:90:38:
         0c:3c:3d:78:4b:df:55:01:68:59:1c:3c:d1:4c:ab:88:23:53:
         43:ba:8e:56:b9:05:0c:29:d8:9a:b8:56:ab:05:62:2a:3e:a0:
         95:34:d7:bb:f2:91:14:c2:66:15:c6:27:fe:9b:5f:1f:35:67:
         ab:78:d2:c4:09:1a:1f:16:c1:fb:04:44:33:43:a6:09:07:cd:
         dd:02:e1:1f:03:53:cd:2e:d1:00:ba:e3:46:f7:a7:74:16:20:
         ea:78:04:41:2b:ee:91:d3:53:75:89:94:ff:cd:09:f0:7d:62:
         73:2e:31:fc:90:7f:2e:fd:71:f4:50:9b:15:46:36:5b:cc:0d:
         ed:a3:f9:e8:60:b8:0a:5b:57:5e:12:cc:78:c6:13:3c:3d:e3:
         97:9d:f7:f3:24:75:57:29:e7:da:87:7f:0f:52:e4:1c:f5:10:
         fc:26:8b:6a:2d:09:4e:e1:14:74:aa:1e:99:ea:b5:40:7e:30:
         5b:5b:c5:6b
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDDe7pMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIx
NDkzMmI4MjdlNWIxNjZjNTgwNjVjYjFmNDA2OGEwMzlkOTUyNTgwHhcNMjEwMzI0
MTQzMzA2WhcNMjYwMzI0MTQzMzA2WjAzMTEwLwYDVQQDEyg2NzdjMzk5NTliZTMz
MDgxMmIyY2M1NDY4YTEwN2I0ODFkZThkMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAykB2OE1CerXYHuOmPIq2trCTOWiH6+lnvJIZXNaAbWrFvdMl
c99cqQktyKn20YoV9iLXhlVNCDhj++FUiuXPYSfbOX6se30MgSyGB8/oJyRrGb+W
qg/5sn5xHA99F2yLjuM5FhodVyji3g5UhG3Y4sxrK4mq6uOHaP4h+aOP2hkGyKJX
QgGHNJEKAtwhtHOMT6co42HW5h7iiUiq7Lwvxjj0qk2zXmggLidm7342IAIDWY98
kanvp5faFOkDNgVrbtdgElhJUlJ+yFq5jukAVILyXJCl/wZ/P25kIePM2annTJJG
/JwSIvLM2rIkGsWEwBCpuBQHTjqO//3n9anrkQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFNXHQcU3EpM3OeSKHqOvByWFaXEsMB8GA1UdIwQYMBaAFNLgi0j5gOFFbAg0
ZVXJtFPJC5zcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjE0OTMy
YjgyN2U1YjE2NmM1ODA2NWNiMWY0MDY4YTAzOWQ5NTI1OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzZlZDBkM2UtMTU4YS00YjVlLWFjOTAtOWIzNzA1
OTk5ZDM3LzY3N2MzOTk1OWJlMzMwODEyYjJjYzU0NjhhMTA3YjQ4MWRlOGQxZGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNmVkMGQzZS0xNThhLTRiNWUtYWM5MC05YjM3
MDU5OTlkMzcvYjE0OTMyYjgyN2U1YjE2NmM1ODA2NWNiMWY0MDY4YTAzOWQ5NTI1
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAoOhlAMEA8h70DANBAIAAjAHAwUAKAN5ADANBgkqhkiG9w0B
AQsFAAOCAQEAjoHyZkcB7CRMM5ayaUsfoTGsCQUQnNlSs4I8iTKq9Fo1On5teneR
IrKncrB96C2T13X5FNQHaTkRtENHTv93wRVW0nd5PZA4DDw9eEvfVQFoWRw80Uyr
iCNTQ7qOVrkFDCnYmrhWqwViKj6glTTXu/KRFMJmFcYn/ptfHzVnq3jSxAkaHxbB
+wREM0OmCQfN3QLhHwNTzS7RALrjRvendBYg6ngEQSvukdNTdYmU/80J8H1icy4x
/JB/Lv1x9FCbFUY2W8wN7aP56GC4CltXXhLMeMYTPD3jl5338yR1Vynn2od/D1Lk
HPUQ/CaLai0JTuEUdKoemeq1QH4wW1vFaw==
-----END CERTIFICATE-----