Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d4ba8a15-a6ef-4009-8d66-c12cd3bc65ee/ee1a3fb95cc775a413beefe3f320c38cbbd29a7b.roa
File:                     ee1a3fb95cc775a413beefe3f320c38cbbd29a7b.roa (raw, json)
Hash identifier:          3zTvWKqnc8CgBc+2lDuHgTwfviycu1TeeeO/RXym5og=
Subject key identifier:   73:D1:86:44:E5:69:D1:EE:80:93:C2:64:FC:BE:4D:79:E2:46:31:D9
Certificate issuer:       /CN=3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd
Certificate serial:       0D1AA0
Authority key identifier: 1E:CB:AA:3A:C2:C8:9A:3D:73:D9:8B:6B:B6:82:E5:4F:D2:FF:52:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d4ba8a15-a6ef-4009-8d66-c12cd3bc65ee/ee1a3fb95cc775a413beefe3f320c38cbbd29a7b.roa
Signing time:             Wed 24 Mar 2021 14:38:17 +0000
ROA not before:           Wed 24 Mar 2021 14:38:17 +0000
ROA not after:            Tue 24 Mar 2026 14:38:17 +0000
asID:                     263212
IP address blocks:        191.97.88.0/21 maxlen: 24
                          2803:a280::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858784 (0xd1aa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd
        Validity
            Not Before: Mar 24 14:38:17 2021 GMT
            Not After : Mar 24 14:38:17 2026 GMT
        Subject: CN=ee1a3fb95cc775a413beefe3f320c38cbbd29a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:d3:dc:79:df:e8:cd:69:e3:e4:dc:d7:80:
                    b7:de:1b:51:0d:69:09:4e:60:a6:04:5e:71:55:26:
                    c6:a7:d0:f0:35:86:d9:d2:01:7f:4a:ab:0b:1a:e7:
                    87:a1:96:30:76:c9:6e:99:be:31:da:ca:ed:97:3f:
                    ce:9f:23:75:36:20:ec:a4:5b:db:dd:f7:e0:b0:fd:
                    5b:7e:db:55:d4:f7:e8:71:9b:2f:fc:84:aa:cc:f6:
                    4f:c1:16:52:a8:1b:ef:d9:03:02:4f:ba:7d:33:bc:
                    35:4c:b7:2e:49:fc:2c:c9:a7:7e:8c:e0:b6:39:81:
                    4a:ac:be:da:b8:1f:2a:a2:d1:20:a0:2e:cf:d1:88:
                    7e:d5:74:9a:34:8a:bc:7d:31:2a:b9:0b:c7:08:86:
                    9c:d8:86:54:e0:c7:33:1f:48:9a:46:71:0b:71:50:
                    e5:9a:8e:83:88:36:7f:be:8d:07:ef:fe:6f:8b:75:
                    de:c9:30:b7:1c:fc:4b:3f:0e:81:72:b3:ca:d3:48:
                    6e:8a:c0:af:f2:dd:28:f2:ab:bc:09:85:13:4a:3a:
                    97:cb:8f:a6:f1:4e:f8:41:0d:12:e2:e0:0f:35:96:
                    91:4f:4f:ca:04:91:77:4f:0d:e2:c2:00:05:db:5d:
                    f9:c0:7c:34:b3:71:da:59:ed:20:2f:6f:84:fe:0c:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D1:86:44:E5:69:D1:EE:80:93:C2:64:FC:BE:4D:79:E2:46:31:D9
            X509v3 Authority Key Identifier:
                keyid:1E:CB:AA:3A:C2:C8:9A:3D:73:D9:8B:6B:B6:82:E5:4F:D2:FF:52:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d4ba8a15-a6ef-4009-8d66-c12cd3bc65ee/ee1a3fb95cc775a413beefe3f320c38cbbd29a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d4ba8a15-a6ef-4009-8d66-c12cd3bc65ee/3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.88.0/21
                IPv6:
                  2803:a280::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:74:22:9e:45:98:68:54:ac:6f:b2:ea:d3:45:67:7a:1a:e9:
         9c:cd:7e:59:ff:e9:1c:1f:1e:60:41:72:18:51:31:ca:20:08:
         51:70:69:aa:65:ad:12:1c:98:37:91:99:e7:ad:5e:ae:3d:7b:
         d6:31:5b:e0:d0:55:78:00:c5:0d:f3:5d:e7:9d:80:21:a6:e5:
         c8:96:5b:3b:8f:44:82:7e:88:f1:96:1e:96:f4:84:a9:e4:65:
         f4:ed:b1:34:a3:a5:d0:48:5c:b3:ea:06:fc:86:a3:2f:09:49:
         bc:45:1a:0f:be:1b:b8:3b:17:00:39:4f:d5:02:3d:27:06:40:
         66:12:5f:2f:ba:a0:a9:63:fd:a2:53:01:cc:46:94:6f:8e:5b:
         76:3d:76:ef:09:bf:9d:44:bd:7e:60:07:0f:f8:83:a2:04:1e:
         5d:43:a3:30:68:4e:c5:83:8c:10:c7:b9:f1:33:52:7a:44:ac:
         2b:bf:49:49:80:e2:32:f0:58:ba:30:35:c7:12:88:b3:2a:43:
         b7:e0:ca:b1:79:b4:ef:ef:4d:a0:4f:e4:13:30:9e:98:d7:2e:
         07:e2:2c:e2:ae:a1:e0:fb:8b:04:55:ce:f2:49:30:db:ce:fb:
         60:08:0f:4e:72:eb:dd:3b:28:3d:62:3a:06:69:74:40:0c:19:
         8b:a8:4f:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDRqgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNm
NmIzMWY0ZWU1YzNmODE1ZTJhMDMwYTJiYzg4Y2Q1ZGVkYWRjYmQwHhcNMjEwMzI0
MTQzODE3WhcNMjYwMzI0MTQzODE3WjAzMTEwLwYDVQQDEyhlZTFhM2ZiOTVjYzc3
NWE0MTNiZWVmZTNmMzIwYzM4Y2JiZDI5YTdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoNXT3Hnf6M1p4+Tc14C33htRDWkJTmCmBF5xVSbGp9DwNYbZ
0gF/SqsLGueHoZYwdslumb4x2srtlz/OnyN1NiDspFvb3ffgsP1bfttV1PfocZsv
/ISqzPZPwRZSqBvv2QMCT7p9M7w1TLcuSfwsyad+jOC2OYFKrL7auB8qotEgoC7P
0Yh+1XSaNIq8fTEquQvHCIac2IZU4MczH0iaRnELcVDlmo6DiDZ/vo0H7/5vi3Xe
yTC3HPxLPw6BcrPK00huisCv8t0o8qu8CYUTSjqXy4+m8U74QQ0S4uAPNZaRT0/K
BJF3Tw3iwgAF2135wHw0s3HaWe0gL2+E/gzH2wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHPRhkTladHugJPCZPy+TXniRjHZMB8GA1UdIwQYMBaAFB7LqjrCyJo9c9mL
a7aC5U/S/1JeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2Y2YjMx
ZjRlZTVjM2Y4MTVlMmEwMzBhMmJjODhjZDVkZWRhZGNiZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDRiYThhMTUtYTZlZi00MDA5LThkNjYtYzEyY2Qz
YmM2NWVlL2VlMWEzZmI5NWNjNzc1YTQxM2JlZWZlM2YzMjBjMzhjYmJkMjlhN2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNGJhOGExNS1hNmVmLTQwMDktOGQ2Ni1jMTJj
ZDNiYzY1ZWUvM2Y2YjMxZjRlZTVjM2Y4MTVlMmEwMzBhMmJjODhjZDVkZWRhZGNi
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEA79hWDANBAIAAjAHAwUAKAOigDANBgkqhkiG9w0BAQsFAAOC
AQEALHQinkWYaFSsb7Lq00VnehrpnM1+Wf/pHB8eYEFyGFExyiAIUXBpqmWtEhyY
N5GZ561erj171jFb4NBVeADFDfNd552AIablyJZbO49Egn6I8ZYelvSEqeRl9O2x
NKOl0Ehcs+oG/IajLwlJvEUaD74buDsXADlP1QI9JwZAZhJfL7qgqWP9olMBzEaU
b45bdj127wm/nUS9fmAHD/iDogQeXUOjMGhOxYOMEMe58TNSekSsK79JSYDiMvBY
ujA1xxKIsypDt+DKsXm07+9NoE/kEzCemNcuB+Is4q6h4PuLBFXO8kkw2877YAgP
TnLr3TsoPWI6Bml0QAwZi6hPVw==
-----END CERTIFICATE-----