Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7b3dc65-79c6-457e-9b87-b821fff8fe8f/216ab0ccb5a928e8ff58d1f05892337b0a591a5c.roa
File:                     216ab0ccb5a928e8ff58d1f05892337b0a591a5c.roa (raw, json)
Hash identifier:          rUA4j4lAdnRoffdBbA51tkTcx98VXESW3jW9lNC+UgQ=
Subject key identifier:   B4:2E:BA:B9:42:87:96:D2:48:FB:CE:1A:61:3A:FC:5F:1B:BA:9E:4D
Certificate issuer:       /CN=ec26d796feff013fc3a15572c1aa63c868c10fa2
Certificate serial:       1A3BD9
Authority key identifier: 68:A4:D9:F1:FA:A1:EA:6A:52:4C:01:E5:6E:E6:9F:00:4A:48:87:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec26d796feff013fc3a15572c1aa63c868c10fa2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7b3dc65-79c6-457e-9b87-b821fff8fe8f/216ab0ccb5a928e8ff58d1f05892337b0a591a5c.roa
Signing time:             Fri 29 Jul 2022 18:46:18 +0000
ROA not before:           Fri 29 Jul 2022 03:00:00 +0000
ROA not after:            Mon 29 Jul 2024 03:00:00 +0000
asID:                     264784
IP address blocks:        168.197.216.0/22 maxlen: 24
                          2803:88c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719257 (0x1a3bd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec26d796feff013fc3a15572c1aa63c868c10fa2
        Validity
            Not Before: Jul 29 03:00:00 2022 GMT
            Not After : Jul 29 03:00:00 2024 GMT
        Subject: CN=216ab0ccb5a928e8ff58d1f05892337b0a591a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:f8:8a:5b:5a:78:42:de:dd:ca:24:4e:4c:
                    e0:27:af:e7:8b:93:92:c6:57:b9:7e:3a:20:b1:aa:
                    91:dd:22:a4:e7:cc:03:f2:1f:75:31:ae:a5:74:41:
                    86:22:9e:1a:2b:87:8e:31:28:f9:7b:38:8c:d4:6a:
                    57:44:45:e8:69:12:d3:c6:d8:0e:a6:b7:5f:cc:16:
                    67:a1:59:3f:79:e3:e7:46:92:07:67:39:07:a4:3a:
                    7b:a8:dc:c5:e2:00:38:d0:a1:68:f7:cb:48:97:c6:
                    8f:d1:8c:5b:d9:81:cd:0d:d3:9a:69:a6:2f:06:e6:
                    df:e7:e7:30:c4:d9:09:92:d4:45:5e:7f:4b:59:ca:
                    8f:8c:7a:16:73:a0:aa:98:08:dd:4d:bf:d4:4b:b9:
                    1a:60:fd:53:10:6a:eb:ed:01:56:24:eb:42:4f:8a:
                    9d:6d:78:0e:05:76:98:d4:0d:a0:51:8e:53:1f:e9:
                    a5:b2:6e:28:d4:98:9c:f3:cb:be:89:04:9e:f2:c1:
                    30:29:f0:01:96:66:44:f5:9f:63:b7:3d:0f:4e:44:
                    a9:5a:9b:43:4a:2b:32:67:a0:17:33:d9:f9:81:1f:
                    d3:13:e9:b2:32:54:d4:54:17:a5:f0:e6:7e:dc:3f:
                    55:77:57:a0:15:93:e4:65:a5:19:c1:0d:ec:5f:e1:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2E:BA:B9:42:87:96:D2:48:FB:CE:1A:61:3A:FC:5F:1B:BA:9E:4D
            X509v3 Authority Key Identifier:
                keyid:68:A4:D9:F1:FA:A1:EA:6A:52:4C:01:E5:6E:E6:9F:00:4A:48:87:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec26d796feff013fc3a15572c1aa63c868c10fa2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7b3dc65-79c6-457e-9b87-b821fff8fe8f/216ab0ccb5a928e8ff58d1f05892337b0a591a5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7b3dc65-79c6-457e-9b87-b821fff8fe8f/ec26d796feff013fc3a15572c1aa63c868c10fa2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.216.0/22
                IPv6:
                  2803:88c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:fe:c8:94:4e:cd:3e:f0:9a:a4:95:7d:f7:f5:83:21:d3:cf:
         76:59:c0:b3:0c:25:49:0e:97:7d:6a:39:97:ed:00:36:76:c2:
         a2:d5:05:19:46:76:62:88:54:0c:ff:00:fe:77:62:4c:da:dc:
         7a:6d:27:b5:ca:f2:b0:00:b6:16:04:38:ef:c2:98:46:c0:f8:
         56:35:10:92:8d:53:2f:ab:e4:c7:6f:95:a5:14:2c:10:a2:66:
         ae:26:49:22:2d:e0:44:df:ec:09:67:d4:ff:c7:73:87:2f:54:
         d7:8c:46:17:d6:9a:f2:fb:f0:9a:0d:f2:7e:3d:ea:56:39:98:
         39:75:b1:68:c1:a6:99:9e:24:89:5c:5d:21:28:77:66:aa:f9:
         ca:b7:d4:2f:f6:c8:10:56:bf:bf:74:5f:3a:f7:75:8b:02:f6:
         e6:93:d9:38:8d:0c:5e:f1:5a:f7:45:8f:a1:53:ef:12:42:e5:
         f3:d8:ea:be:c7:93:79:2e:bf:a7:a4:13:69:b2:02:cd:66:0a:
         45:56:cc:e0:7a:f7:81:ea:69:f0:51:dd:c9:6e:26:6b:24:82:
         54:ac:8d:87:96:79:0d:8b:2c:10:4a:60:66:76:b3:a0:a9:a1:
         bc:50:c9:2d:31:65:a8:41:5e:87:b2:11:4a:26:bb:a2:0e:bd:
         fc:c6:ec:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDGjvZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVj
MjZkNzk2ZmVmZjAxM2ZjM2ExNTU3MmMxYWE2M2M4NjhjMTBmYTIwHhcNMjIwNzI5
MDMwMDAwWhcNMjQwNzI5MDMwMDAwWjAzMTEwLwYDVQQDEygyMTZhYjBjY2I1YTky
OGU4ZmY1OGQxZjA1ODkyMzM3YjBhNTkxYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr/f4iltaeELe3cokTkzgJ6/ni5OSxle5fjogsaqR3SKk58wD
8h91Ma6ldEGGIp4aK4eOMSj5eziM1GpXREXoaRLTxtgOprdfzBZnoVk/eePnRpIH
ZzkHpDp7qNzF4gA40KFo98tIl8aP0Yxb2YHNDdOaaaYvBubf5+cwxNkJktRFXn9L
WcqPjHoWc6CqmAjdTb/US7kaYP1TEGrr7QFWJOtCT4qdbXgOBXaY1A2gUY5TH+ml
sm4o1Jic88u+iQSe8sEwKfABlmZE9Z9jtz0PTkSpWptDSisyZ6AXM9n5gR/TE+my
MlTUVBel8OZ+3D9Vd1egFZPkZaUZwQ3sX+FWrQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFLQuurlCh5bSSPvOGmE6/F8bup5NMB8GA1UdIwQYMBaAFGik2fH6oepqUkwB
5W7mnwBKSIebMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWMyNmQ3
OTZmZWZmMDEzZmMzYTE1NTcyYzFhYTYzYzg2OGMxMGZhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTdiM2RjNjUtNzljNi00NTdlLTliODctYjgyMWZm
ZjhmZThmLzIxNmFiMGNjYjVhOTI4ZThmZjU4ZDFmMDU4OTIzMzdiMGE1OTFhNWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lN2IzZGM2NS03OWM2LTQ1N2UtOWI4Ny1iODIx
ZmZmOGZlOGYvZWMyNmQ3OTZmZWZmMDEzZmMzYTE1NTcyYzFhYTYzYzg2OGMxMGZh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqjF2DANBAIAAjAHAwUAKAOIwDANBgkqhkiG9w0BAQsFAAOC
AQEApf7IlE7NPvCapJV99/WDIdPPdlnAswwlSQ6XfWo5l+0ANnbCotUFGUZ2YohU
DP8A/ndiTNrcem0ntcrysAC2FgQ478KYRsD4VjUQko1TL6vkx2+VpRQsEKJmriZJ
Ii3gRN/sCWfU/8dzhy9U14xGF9aa8vvwmg3yfj3qVjmYOXWxaMGmmZ4kiVxdISh3
Zqr5yrfUL/bIEFa/v3RfOvd1iwL25pPZOI0MXvFa90WPoVPvEkLl89jqvseTeS6/
p6QTabICzWYKRVbM4Hr3gepp8FHdyW4maySCVKyNh5Z5DYssEEpgZnazoKmhvFDJ
LTFlqEFeh7IRSia7og69/Mbs1g==
-----END CERTIFICATE-----