Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/843c8c7267375ceca236b8ea11da258db037d20a.roa
File:                     843c8c7267375ceca236b8ea11da258db037d20a.roa (raw, json)
Hash identifier:          7AdXXWUKQc6YdhmTCVsrVGO8OYeTzI3qpthsLS6CAoE=
Subject key identifier:   09:09:19:78:95:D0:BE:C4:63:F3:28:13:60:4D:44:0C:72:ED:C5:A8
Certificate issuer:       /CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
Certificate serial:       11A777
Authority key identifier: C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/843c8c7267375ceca236b8ea11da258db037d20a.roa
Signing time:             Fri 17 Sep 2021 00:15:13 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27814
IP address blocks:        200.110.112.0/21 maxlen: 23
                          200.110.121.0/24 maxlen: 24
                          200.110.122.0/24 maxlen: 24
                          200.110.123.0/24 maxlen: 24
                          200.110.124.0/22 maxlen: 22
                          2001:13c7:6f00::/45 maxlen: 47
                          2001:13c7:6f08::/48 maxlen: 48
                          2001:13c7:6f09::/48 maxlen: 48
                          2001:13c7:6f0a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156983 (0x11a777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=843c8c7267375ceca236b8ea11da258db037d20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:db:63:ad:8a:c0:02:fa:fe:b6:9a:30:3a:
                    17:4c:7f:ca:92:34:bc:3e:57:44:f1:8a:d0:8e:62:
                    c2:92:b6:40:c4:f4:b4:08:2f:8a:aa:14:c6:81:fc:
                    68:7b:37:44:1b:b7:75:aa:f1:c1:00:53:a6:88:7a:
                    fa:06:28:74:49:5b:f6:d1:e6:0d:39:42:b7:1a:d3:
                    bf:23:64:d6:7e:44:10:06:7c:55:7c:cc:53:71:9a:
                    35:50:e3:9d:80:0a:da:76:3a:e7:74:52:07:1e:5e:
                    94:fd:9e:84:2a:f9:19:00:17:de:af:5f:8a:04:b2:
                    f1:ce:8b:9d:ce:3f:ff:b7:2c:c7:95:c2:94:72:29:
                    bf:2f:2c:d6:1b:c5:92:4c:69:8f:59:ed:a0:27:68:
                    9e:6d:a5:7f:1a:70:d7:76:a7:27:5c:25:27:3f:08:
                    44:60:da:3c:48:2c:20:c2:7b:25:62:4e:0a:cf:cf:
                    d5:51:d9:b3:72:78:a1:d2:c8:b4:bd:eb:38:11:51:
                    c2:fc:b2:28:52:66:84:bc:50:82:2e:68:33:3f:b9:
                    87:f9:4a:62:86:99:18:ff:e8:30:c5:1d:47:89:af:
                    8c:7c:54:f6:82:52:68:ea:1f:09:d0:93:30:fe:dd:
                    38:00:c2:7a:58:2a:c6:ad:fe:8f:e4:40:54:28:01:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:09:19:78:95:D0:BE:C4:63:F3:28:13:60:4D:44:0C:72:ED:C5:A8
            X509v3 Authority Key Identifier:
                keyid:C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/843c8c7267375ceca236b8ea11da258db037d20a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/c6e6abb9e295aea3473895245eb2e4f25f175b38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.112.0/21
                  200.110.121.0-200.110.127.255
                IPv6:
                  2001:13c7:6f00::-2001:13c7:6f0a:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         93:7e:0d:b4:40:ff:38:35:6f:05:a1:dd:44:0f:0e:16:a8:61:
         71:ca:64:0a:fd:77:61:c1:cc:dc:7e:df:0f:33:95:9b:3d:96:
         79:b9:0f:31:28:49:a4:2b:f8:21:2b:1d:95:e7:be:e4:b9:38:
         c7:f2:26:57:37:e8:0e:07:c9:50:af:4a:5f:80:5a:37:4d:27:
         d0:75:ad:23:fc:f3:76:c9:dc:f3:fa:36:90:5c:7a:5d:78:ae:
         ca:a9:00:e5:8e:93:f4:66:73:91:c6:62:c9:c6:17:22:da:43:
         10:d0:26:42:6e:38:ae:66:51:14:6f:10:80:e4:fc:23:62:cd:
         8b:8e:fd:c5:48:e1:59:80:6b:16:34:3d:fb:45:90:e1:d0:7c:
         22:fe:ef:a4:79:ed:92:2f:9d:73:01:52:4a:ac:64:a3:22:ef:
         eb:82:4e:60:4e:89:46:d3:f1:44:4e:24:0f:25:0d:f6:9a:5f:
         3d:4c:93:3a:d1:06:60:2a:57:52:ac:99:8d:7a:8a:7d:a5:0d:
         30:a8:2b:06:03:0c:0e:7e:1d:9c:12:93:52:28:a5:d3:98:93:
         05:67:8b:23:9b:9f:e7:44:64:59:ff:ed:da:2a:8b:40:71:3d:
         4b:d8:4e:89:27:65:90:f9:98:aa:92:0b:fc:02:fe:14:ab:07:
         1e:01:b2:2d
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIDEad3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM2
ZTZhYmI5ZTI5NWFlYTM0NzM4OTUyNDVlYjJlNGYyNWYxNzViMzgwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg4NDNjOGM3MjY3Mzc1
Y2VjYTIzNmI4ZWExMWRhMjU4ZGIwMzdkMjBhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtaDbY62KwAL6/raaMDoXTH/KkjS8PldE8YrQjmLCkrZAxPS0
CC+KqhTGgfxoezdEG7d1qvHBAFOmiHr6Bih0SVv20eYNOUK3GtO/I2TWfkQQBnxV
fMxTcZo1UOOdgAradjrndFIHHl6U/Z6EKvkZABfer1+KBLLxzoudzj//tyzHlcKU
cim/LyzWG8WSTGmPWe2gJ2iebaV/GnDXdqcnXCUnPwhEYNo8SCwgwnslYk4Kz8/V
Udmzcnih0si0ves4EVHC/LIoUmaEvFCCLmgzP7mH+UpihpkY/+gwxR1Hia+MfFT2
glJo6h8J0JMw/t04AMJ6WCrGrf6P5EBUKAFNNwIDAQABo4IChDCCAoAwHQYDVR0O
BBYEFAkJGXiV0L7EY/MoE2BNRAxy7cWoMB8GA1UdIwQYMBaAFMDKJxfFXOOeVUu0
O/etEgk8Nn4oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzZlNmFi
YjllMjk1YWVhMzQ3Mzg5NTI0NWViMmU0ZjI1ZjE3NWIzOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTU1YTRjNDItZmQxYy00NmM5LWFjMTgtZWZmNjI4
MWM4YzM4Lzg0M2M4YzcyNjczNzVjZWNhMjM2YjhlYTExZGEyNThkYjAzN2QyMGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNTVhNGM0Mi1mZDFjLTQ2YzktYWMxOC1lZmY2
MjgxYzhjMzgvYzZlNmFiYjllMjk1YWVhMzQ3Mzg5NTI0NWViMmU0ZjI1ZjE3NWIz
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBIBggrBgEFBQcBBwEB/wQ5
MDcwGgQCAAEwFAMEA8hucDAMAwQAyG55AwQHyG4AMBkEAgACMBMwEQMGACABE8dv
AwcAIAETx28KMA0GCSqGSIb3DQEBCwUAA4IBAQCTfg20QP84NW8Fod1EDw4WqGFx
ymQK/Xdhwczcft8PM5WbPZZ5uQ8xKEmkK/ghKx2V577kuTjH8iZXN+gOB8lQr0pf
gFo3TSfQda0j/PN2ydzz+jaQXHpdeK7KqQDljpP0ZnORxmLJxhci2kMQ0CZCbjiu
ZlEUbxCA5PwjYs2Ljv3FSOFZgGsWND37RZDh0Hwi/u+kee2SL51zAVJKrGSjIu/r
gk5gTolG0/FETiQPJQ32ml89TJM60QZgKldSrJmNeop9pQ0wqCsGAwwOfh2cEpNS
KKXTmJMFZ4sjm5/nRGRZ/+3aKotAcT1L2E6JJ2WQ+Ziqkgv8Av4UqwceAbIt
-----END CERTIFICATE-----