Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/c0561fdfb7ff7900508ecf73fbd5d76614ffefda.roa
File:                     c0561fdfb7ff7900508ecf73fbd5d76614ffefda.roa (raw, json)
Hash identifier:          IlZ7h99ZXT+wkdwkGWqEomqkXxCmrd2kRMXcaVaI44s=
Subject key identifier:   59:FB:28:AE:3A:35:CC:0C:FD:CC:48:FD:F1:BF:A0:85:40:DB:85:44
Certificate issuer:       /CN=b14932b827e5b166c58065cb1f4068a039d95258
Certificate serial:       0DE654
Authority key identifier: D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/c0561fdfb7ff7900508ecf73fbd5d76614ffefda.roa
Signing time:             Wed 24 Mar 2021 14:33:06 +0000
ROA not before:           Wed 24 Mar 2021 14:33:06 +0000
ROA not after:            Tue 24 Mar 2026 14:33:06 +0000
asID:                     28094
IP address blocks:        131.161.148.0/22 maxlen: 22
                          200.123.208.0/21 maxlen: 21
                          2803:7900::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910932 (0xde654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14932b827e5b166c58065cb1f4068a039d95258
        Validity
            Not Before: Mar 24 14:33:06 2021 GMT
            Not After : Mar 24 14:33:06 2026 GMT
        Subject: CN=c0561fdfb7ff7900508ecf73fbd5d76614ffefda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:c0:e0:4e:22:0c:89:23:84:8a:0e:96:a1:
                    67:a0:d9:93:76:0f:71:f9:a4:e7:0d:2d:e3:b6:54:
                    77:86:37:69:4c:79:7a:b3:f1:1a:41:e5:9f:e5:2e:
                    a5:03:c8:49:d0:a1:af:4d:3b:4c:c0:ba:a8:4b:10:
                    d2:54:b1:69:21:88:9f:b1:12:55:ee:e8:46:0b:db:
                    19:60:c7:ef:9f:3f:01:b8:0f:52:0e:3e:98:73:7a:
                    00:33:77:93:d8:f2:5f:28:11:bd:af:f2:9f:02:3f:
                    f4:1a:bb:1b:ab:59:ec:9e:55:f8:d1:16:ed:f3:8b:
                    d3:e6:05:eb:76:b3:58:96:76:63:a1:5f:11:10:99:
                    b7:6e:a4:2a:01:21:7b:00:4d:3b:ff:be:d6:d1:0b:
                    c5:21:f6:f1:b5:62:68:51:5d:46:e1:3b:b3:ff:d2:
                    16:e9:61:09:99:b9:47:d9:09:4f:aa:c1:00:56:69:
                    b4:e4:06:03:d4:9a:de:85:79:3d:fe:24:54:ab:5c:
                    e1:e9:6a:d7:7d:5e:d6:82:b6:5a:36:63:79:67:33:
                    09:72:e8:0a:1d:ac:33:ea:61:95:55:f4:8d:74:74:
                    74:4a:37:51:d6:1b:16:5f:30:78:1b:1e:ba:78:82:
                    db:48:a8:bf:b6:d2:a3:4f:5d:31:f1:fb:49:87:04:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FB:28:AE:3A:35:CC:0C:FD:CC:48:FD:F1:BF:A0:85:40:DB:85:44
            X509v3 Authority Key Identifier:
                keyid:D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/c0561fdfb7ff7900508ecf73fbd5d76614ffefda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/b14932b827e5b166c58065cb1f4068a039d95258.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.148.0/22
                  200.123.208.0/21
                IPv6:
                  2803:7900::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:d3:86:51:47:50:9f:9e:82:44:d3:15:1c:c9:e9:89:be:ef:
         f1:f2:4d:c4:f7:32:61:af:ef:18:6d:7b:9d:ef:c6:4c:ea:3d:
         69:54:2d:a5:7f:7f:c5:27:76:cd:bb:b7:75:3d:8f:7b:33:0a:
         75:ea:57:e1:1e:9f:d9:4d:51:ff:6f:e9:a2:58:49:31:ae:8d:
         e6:d9:a4:bc:a2:cf:4b:6f:89:ae:cc:8d:92:d3:4e:0a:90:66:
         c7:9f:62:34:07:cf:b7:9e:a2:a6:fc:ee:f3:81:ec:fc:62:4d:
         76:2d:50:7b:de:63:c1:9e:cc:cf:c1:a2:e0:f2:db:ca:96:8d:
         2f:67:b6:dd:4c:16:85:b8:16:39:c5:14:70:18:94:23:be:d1:
         a3:77:47:6c:a7:eb:ae:fb:46:12:6e:c1:19:d7:1d:1e:fc:34:
         b0:94:8d:0b:94:e9:b1:27:41:7b:5d:1f:3a:c8:06:5d:7b:72:
         f3:bf:40:10:fa:c1:d4:f9:f5:e9:33:88:c0:60:60:ba:ef:99:
         f8:80:e0:23:7a:7c:20:d0:91:de:91:dd:65:10:e6:ad:cf:34:
         ed:ea:fc:9a:90:c1:ff:3d:5b:c8:2d:94:1f:5c:6c:67:28:be:
         7a:cc:2d:5f:ea:a5:f4:15:37:42:63:12:2c:8f:4c:db:77:86:
         16:26:dd:6c
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDDeZUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIx
NDkzMmI4MjdlNWIxNjZjNTgwNjVjYjFmNDA2OGEwMzlkOTUyNTgwHhcNMjEwMzI0
MTQzMzA2WhcNMjYwMzI0MTQzMzA2WjAzMTEwLwYDVQQDEyhjMDU2MWZkZmI3ZmY3
OTAwNTA4ZWNmNzNmYmQ1ZDc2NjE0ZmZlZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1HPA4E4iDIkjhIoOlqFnoNmTdg9x+aTnDS3jtlR3hjdpTHl6
s/EaQeWf5S6lA8hJ0KGvTTtMwLqoSxDSVLFpIYifsRJV7uhGC9sZYMfvnz8BuA9S
Dj6Yc3oAM3eT2PJfKBG9r/KfAj/0Grsbq1nsnlX40Rbt84vT5gXrdrNYlnZjoV8R
EJm3bqQqASF7AE07/77W0QvFIfbxtWJoUV1G4Tuz/9IW6WEJmblH2QlPqsEAVmm0
5AYD1JrehXk9/iRUq1zh6WrXfV7WgrZaNmN5ZzMJcugKHawz6mGVVfSNdHR0SjdR
1hsWXzB4Gx66eILbSKi/ttKjT10x8ftJhwSsBwIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFFn7KK46NcwM/cxI/fG/oIVA24VEMB8GA1UdIwQYMBaAFNLgi0j5gOFFbAg0
ZVXJtFPJC5zcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjE0OTMy
YjgyN2U1YjE2NmM1ODA2NWNiMWY0MDY4YTAzOWQ5NTI1OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzZlZDBkM2UtMTU4YS00YjVlLWFjOTAtOWIzNzA1
OTk5ZDM3L2MwNTYxZmRmYjdmZjc5MDA1MDhlY2Y3M2ZiZDVkNzY2MTRmZmVmZGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNmVkMGQzZS0xNThhLTRiNWUtYWM5MC05YjM3
MDU5OTlkMzcvYjE0OTMyYjgyN2U1YjE2NmM1ODA2NWNiMWY0MDY4YTAzOWQ5NTI1
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAoOhlAMEA8h70DANBAIAAjAHAwUAKAN5ADANBgkqhkiG9w0B
AQsFAAOCAQEAj9OGUUdQn56CRNMVHMnpib7v8fJNxPcyYa/vGG17ne/GTOo9aVQt
pX9/xSd2zbu3dT2PezMKdepX4R6f2U1R/2/polhJMa6N5tmkvKLPS2+JrsyNktNO
CpBmx59iNAfPt56ipvzu84Hs/GJNdi1Qe95jwZ7Mz8Gi4PLbypaNL2e23UwWhbgW
OcUUcBiUI77Ro3dHbKfrrvtGEm7BGdcdHvw0sJSNC5TpsSdBe10fOsgGXXty879A
EPrB1Pn16TOIwGBguu+Z+IDgI3p8INCR3pHdZRDmrc807er8mpDB/z1byC2UH1xs
Zyi+eswtX+ql9BU3QmMSLI9M23eGFibdbA==
-----END CERTIFICATE-----