Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/22e78109687c52fca2c79f5fd8e3daf211822ec2.roa
File:                     22e78109687c52fca2c79f5fd8e3daf211822ec2.roa (raw, json)
Hash identifier:          7SoJBrBDEoE/s7aHClabTG94/HIXTBW6hVBVyI9vrl4=
Subject key identifier:   1D:1B:52:5B:07:2D:93:67:32:ED:1B:21:79:25:54:74:1E:A6:76:6A
Certificate issuer:       /CN=6b2d6c543f96c6e360e6bb67a94434bb666f2d80
Certificate serial:       0BA034
Authority key identifier: 82:E6:1D:62:7A:72:C4:AE:B9:7B:6E:8B:13:50:2D:BE:71:E6:7E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2d6c543f96c6e360e6bb67a94434bb666f2d80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/22e78109687c52fca2c79f5fd8e3daf211822ec2.roa
Signing time:             Wed 24 Mar 2021 14:32:00 +0000
ROA not before:           Wed 24 Mar 2021 14:32:00 +0000
ROA not after:            Tue 24 Mar 2026 14:32:00 +0000
asID:                     264716
IP address blocks:        170.150.44.0/22 maxlen: 24
                          2803:5b40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761908 (0xba034)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2d6c543f96c6e360e6bb67a94434bb666f2d80
        Validity
            Not Before: Mar 24 14:32:00 2021 GMT
            Not After : Mar 24 14:32:00 2026 GMT
        Subject: CN=22e78109687c52fca2c79f5fd8e3daf211822ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2a:ea:32:65:96:40:e1:96:32:92:15:cb:84:
                    de:e2:70:5a:d3:ab:9e:30:4e:8f:bd:b8:5b:4f:4c:
                    55:bd:ac:36:af:31:08:9f:09:95:d1:e7:a0:e8:8e:
                    97:a1:3b:1a:e8:1c:66:0c:6b:4e:fd:1b:85:ab:72:
                    a7:24:91:85:52:de:f0:a4:26:2c:03:7e:93:4b:31:
                    47:14:2e:60:74:02:4c:5b:07:4c:a7:bc:95:b0:b7:
                    8c:60:fa:c3:55:29:15:dc:e6:d7:5f:b3:51:23:2d:
                    be:79:51:65:62:9a:88:df:88:ce:58:9a:32:7e:32:
                    6e:7d:03:12:7a:d8:7b:a0:a2:c3:a3:ef:89:38:9e:
                    3c:44:69:e9:3d:d3:65:5c:4d:86:31:81:ab:cb:aa:
                    fd:98:36:a1:ff:77:fc:89:8c:e8:13:e7:3d:91:76:
                    97:31:11:e2:e0:f7:e4:2e:16:33:7e:87:14:b5:5a:
                    ee:23:97:e4:84:a6:6c:8f:c2:a7:d1:97:8e:fd:70:
                    31:28:4e:05:e2:25:71:ca:4d:81:9b:f7:fd:14:89:
                    35:5c:f9:0b:d5:d8:4e:71:43:b3:7e:59:32:8c:f9:
                    68:d2:c5:0a:a4:28:8b:2a:a4:12:d3:09:e3:12:fb:
                    60:29:32:2f:c6:10:76:7a:d6:fb:7b:c1:35:f1:84:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1B:52:5B:07:2D:93:67:32:ED:1B:21:79:25:54:74:1E:A6:76:6A
            X509v3 Authority Key Identifier:
                keyid:82:E6:1D:62:7A:72:C4:AE:B9:7B:6E:8B:13:50:2D:BE:71:E6:7E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2d6c543f96c6e360e6bb67a94434bb666f2d80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/22e78109687c52fca2c79f5fd8e3daf211822ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/6b2d6c543f96c6e360e6bb67a94434bb666f2d80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.44.0/22
                IPv6:
                  2803:5b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:7e:49:e3:c1:75:3d:ef:ea:b1:38:34:72:38:82:75:3c:01:
         8f:ce:a6:c9:f4:b7:67:cb:10:7e:7a:36:9f:f1:df:cd:27:70:
         ec:ff:b3:78:c4:a6:c0:63:d0:77:00:c6:27:8c:08:c1:f0:12:
         11:eb:7b:65:9f:f2:1f:89:e8:cd:a5:e5:b2:ef:53:61:2e:89:
         a9:bd:f4:03:1e:b6:71:84:03:95:67:8c:35:33:0f:79:67:13:
         36:8d:07:3d:4b:b9:0d:92:95:14:ff:e7:df:a8:38:2b:4d:65:
         0d:50:ac:48:da:62:0d:2b:25:01:c5:b3:99:84:bf:50:39:ba:
         99:e5:c7:f4:ec:cb:9c:21:61:01:9f:23:3f:cc:ca:42:2c:84:
         bb:1f:29:61:e7:9e:69:1f:da:be:16:22:b1:41:c9:34:bf:3e:
         5a:39:fa:e2:dd:22:d4:0c:49:0e:3e:88:8e:b1:14:6e:02:ca:
         bc:da:0f:32:94:58:e7:78:0e:09:7e:6d:1e:26:f5:6a:ad:f7:
         17:25:a7:98:66:5f:4c:91:27:50:bd:0b:08:fc:68:44:c0:ab:
         24:74:27:34:ec:0b:25:5e:4d:bf:d0:57:49:b8:8c:35:91:b6:
         03:a2:76:ab:dd:27:9b:c8:47:dc:51:84:f9:02:06:dc:30:03:
         33:b8:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----