Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da1cc7d0-3753-465c-9128-0a4d1a25aaa3/5e7b65cc8115038eeb0d0f3033c16e2b239cd216.roa
File:                     5e7b65cc8115038eeb0d0f3033c16e2b239cd216.roa (raw, json)
Hash identifier:          HtJPuuoq2NMPeDtTonUQXyYjLzA9W3WiwsJxHI0wkS0=
Subject key identifier:   4A:80:BE:80:26:42:6B:8D:26:21:0A:F1:08:A2:E7:37:A0:1D:37:FD
Certificate issuer:       /CN=d2ba642acd3effb827907bb587a1c8f62a3e1160
Certificate serial:       063891
Authority key identifier: 43:C2:B8:FB:38:CB:FE:62:07:02:CC:00:9D:36:4C:1F:37:2F:76:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2ba642acd3effb827907bb587a1c8f62a3e1160.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/da1cc7d0-3753-465c-9128-0a4d1a25aaa3/5e7b65cc8115038eeb0d0f3033c16e2b239cd216.roa
Signing time:             Wed 24 Mar 2021 14:36:08 +0000
ROA not before:           Wed 24 Mar 2021 14:36:08 +0000
ROA not after:            Tue 24 Mar 2026 14:36:08 +0000
asID:                     270039
IP address blocks:        190.120.228.0/22 maxlen: 24
                          2803:d5e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407697 (0x63891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ba642acd3effb827907bb587a1c8f62a3e1160
        Validity
            Not Before: Mar 24 14:36:08 2021 GMT
            Not After : Mar 24 14:36:08 2026 GMT
        Subject: CN=5e7b65cc8115038eeb0d0f3033c16e2b239cd216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5b:a2:2c:e8:c9:d3:9e:f4:e2:ef:ed:99:84:
                    d8:07:37:36:ac:bd:62:70:75:83:e1:7f:37:e6:f5:
                    d1:cc:2f:a3:fd:6a:d8:64:9c:fd:af:d7:b8:62:b2:
                    cd:ad:4b:dd:ef:a6:5f:09:92:16:bd:d5:95:34:03:
                    1d:b4:3d:20:d7:e3:5b:55:0e:ae:12:7e:ac:55:41:
                    5a:8d:c8:d6:b1:59:0d:bd:f3:e2:12:6e:2c:7f:d2:
                    9b:1b:f7:44:c1:28:a7:60:f0:ea:12:d6:f1:f2:e8:
                    7b:75:d0:7f:ef:55:bd:7d:4d:91:58:87:ee:0f:ab:
                    fe:a4:99:71:12:06:43:db:f7:6f:6a:0f:77:a5:fd:
                    a3:5b:b8:de:8f:a9:55:cd:a5:b8:32:84:8f:73:8b:
                    88:ae:8d:28:3d:1d:51:fb:ad:d9:ed:70:78:4c:66:
                    3e:13:0c:b0:c1:85:ca:04:1a:6b:76:9f:b0:1c:d4:
                    c2:1e:10:8e:80:08:61:53:dc:d8:0d:bc:13:13:bc:
                    5a:1f:59:65:1b:4e:1d:93:79:73:13:8f:38:21:9b:
                    06:3e:93:76:eb:dd:68:76:40:ad:ee:0d:4c:32:fb:
                    b0:e9:75:6d:22:80:d1:0f:6e:97:ea:5f:5a:8a:be:
                    29:96:28:09:69:c2:c0:81:41:0e:7a:15:52:eb:95:
                    ef:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:80:BE:80:26:42:6B:8D:26:21:0A:F1:08:A2:E7:37:A0:1D:37:FD
            X509v3 Authority Key Identifier:
                keyid:43:C2:B8:FB:38:CB:FE:62:07:02:CC:00:9D:36:4C:1F:37:2F:76:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2ba642acd3effb827907bb587a1c8f62a3e1160.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da1cc7d0-3753-465c-9128-0a4d1a25aaa3/5e7b65cc8115038eeb0d0f3033c16e2b239cd216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/da1cc7d0-3753-465c-9128-0a4d1a25aaa3/d2ba642acd3effb827907bb587a1c8f62a3e1160.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.228.0/22
                IPv6:
                  2803:d5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:60:54:2d:9b:04:31:b6:bf:33:d7:49:4b:53:f3:c3:b0:c2:
         23:d7:c1:c8:8e:50:2e:8b:9e:d1:a2:26:c2:14:a2:55:cb:a4:
         f5:97:64:d6:17:82:5a:b9:85:b1:4f:91:fb:e6:09:fb:ce:14:
         d4:5e:b8:a7:38:3b:b0:aa:cc:ad:a9:a5:53:e0:64:4b:cc:68:
         9c:3b:ec:fd:e9:f6:f7:2e:50:bf:b4:67:8a:98:81:98:f7:d2:
         d9:e9:e3:9f:c0:32:e5:a7:1e:56:f4:3b:1d:0c:aa:62:11:ec:
         72:bf:8a:e1:fb:ef:5f:e9:41:92:cf:3a:63:20:82:86:45:06:
         3a:da:22:51:6e:72:f4:4f:d4:7e:44:31:f4:61:e5:b9:bb:01:
         6b:da:47:36:05:b0:14:c2:3c:d3:73:9c:b9:20:6d:ec:57:27:
         be:f4:f7:ad:4c:a3:12:6e:45:56:b7:fa:31:ed:64:55:9e:4b:
         15:d1:1a:85:96:6c:09:a9:38:89:49:a2:05:75:a7:2e:05:22:
         24:b6:bc:a5:80:70:6f:e2:15:b8:a5:33:6f:00:df:15:cc:a8:
         4d:a4:87:0f:65:2c:ed:d7:6a:33:3f:99:27:f3:8c:2e:0e:56:
         fe:19:fd:e6:f9:ec:d2:1b:41:1e:91:3a:50:dd:be:6b:80:a2:
         43:01:bf:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBjiRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQy
YmE2NDJhY2QzZWZmYjgyNzkwN2JiNTg3YTFjOGY2MmEzZTExNjAwHhcNMjEwMzI0
MTQzNjA4WhcNMjYwMzI0MTQzNjA4WjAzMTEwLwYDVQQDEyg1ZTdiNjVjYzgxMTUw
MzhlZWIwZDBmMzAzM2MxNmUyYjIzOWNkMjE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgluiLOjJ05704u/tmYTYBzc2rL1icHWD4X835vXRzC+j/WrY
ZJz9r9e4YrLNrUvd76ZfCZIWvdWVNAMdtD0g1+NbVQ6uEn6sVUFajcjWsVkNvfPi
Em4sf9KbG/dEwSinYPDqEtbx8uh7ddB/71W9fU2RWIfuD6v+pJlxEgZD2/dvag93
pf2jW7jej6lVzaW4MoSPc4uIro0oPR1R+63Z7XB4TGY+EwywwYXKBBprdp+wHNTC
HhCOgAhhU9zYDbwTE7xaH1llG04dk3lzE484IZsGPpN2691odkCt7g1MMvuw6XVt
IoDRD26X6l9air4pligJacLAgUEOehVS65Xv6wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFEqAvoAmQmuNJiEK8Qii5zegHTf9MB8GA1UdIwQYMBaAFEPCuPs4y/5iBwLM
AJ02TB83L3YjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDJiYTY0
MmFjZDNlZmZiODI3OTA3YmI1ODdhMWM4ZjYyYTNlMTE2MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGExY2M3ZDAtMzc1My00NjVjLTkxMjgtMGE0ZDFh
MjVhYWEzLzVlN2I2NWNjODExNTAzOGVlYjBkMGYzMDMzYzE2ZTJiMjM5Y2QyMTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYTFjYzdkMC0zNzUzLTQ2NWMtOTEyOC0wYTRk
MWEyNWFhYTMvZDJiYTY0MmFjZDNlZmZiODI3OTA3YmI1ODdhMWM4ZjYyYTNlMTE2
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr545DANBAIAAjAHAwUAKAPV4DANBgkqhkiG9w0BAQsFAAOC
AQEAO2BULZsEMba/M9dJS1Pzw7DCI9fByI5QLoue0aImwhSiVcuk9Zdk1heCWrmF
sU+R++YJ+84U1F64pzg7sKrMramlU+BkS8xonDvs/en29y5Qv7RnipiBmPfS2enj
n8Ay5aceVvQ7HQyqYhHscr+K4fvvX+lBks86YyCChkUGOtoiUW5y9E/UfkQx9GHl
ubsBa9pHNgWwFMI803OcuSBt7FcnvvT3rUyjEm5FVrf6Me1kVZ5LFdEahZZsCak4
iUmiBXWnLgUiJLa8pYBwb+IVuKUzbwDfFcyoTaSHD2Us7ddqMz+ZJ/OMLg5W/hn9
5vns0htBHpE6UN2+a4CiQwG/xQ==
-----END CERTIFICATE-----