Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebe90bfd-ba56-4046-aa71-cf50da5c70fd/6ea25308cc0b5af8e52486e7a1273a10ccee66a9.roa
File:                     6ea25308cc0b5af8e52486e7a1273a10ccee66a9.roa (raw, json)
Hash identifier:          8kjeDVp6dJR9S7bVpKs+h1JUekWoiFGVgEd2ZVSdye0=
Subject key identifier:   C3:5A:68:57:0F:A0:A9:BA:66:59:89:3F:53:81:19:ED:F3:47:45:D3
Certificate issuer:       /CN=cd5bdf4364a69749441571efcc359e8b36e0aa9d
Certificate serial:       0D87F1
Authority key identifier: A8:58:B2:4C:DD:9A:12:71:8D:FF:37:C9:9C:4D:FD:8C:BD:DA:FB:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd5bdf4364a69749441571efcc359e8b36e0aa9d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebe90bfd-ba56-4046-aa71-cf50da5c70fd/6ea25308cc0b5af8e52486e7a1273a10ccee66a9.roa
Signing time:             Wed 24 Mar 2021 14:31:17 +0000
ROA not before:           Wed 24 Mar 2021 14:31:17 +0000
ROA not after:            Tue 24 Mar 2026 14:31:17 +0000
asID:                     265856
IP address blocks:        170.231.204.0/22 maxlen: 24
                          2803:9740::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886769 (0xd87f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5bdf4364a69749441571efcc359e8b36e0aa9d
        Validity
            Not Before: Mar 24 14:31:17 2021 GMT
            Not After : Mar 24 14:31:17 2026 GMT
        Subject: CN=6ea25308cc0b5af8e52486e7a1273a10ccee66a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:46:a2:89:9e:52:81:ec:5f:7c:e7:c1:24:
                    52:5e:74:a7:74:91:cb:a5:82:23:48:48:58:8f:7f:
                    98:0c:f5:20:fe:1e:fb:c7:fa:5d:80:13:82:a4:98:
                    18:28:b5:98:f3:10:58:96:15:2b:f0:bb:07:fa:77:
                    09:25:f6:60:68:6c:da:da:5e:f2:97:7d:ed:9a:4d:
                    1e:3c:28:db:f1:f3:cc:19:25:7c:68:90:31:bf:a0:
                    2d:e0:b1:4c:32:4b:36:f7:45:8d:fe:b7:d1:ce:2c:
                    34:cb:19:fc:e8:50:8c:53:f3:e4:b9:94:07:6d:45:
                    b1:3b:68:83:77:63:d7:c4:a9:33:91:df:82:de:70:
                    78:bc:9f:67:12:fb:33:85:6b:54:ac:9a:c0:8b:ec:
                    62:f8:ba:4e:84:1d:2f:ff:4f:81:d5:57:d5:19:12:
                    6a:cd:23:fa:41:18:e4:74:19:31:72:8d:e4:48:3d:
                    c8:b3:37:81:8b:33:23:13:12:a1:e8:dc:4e:87:14:
                    03:80:f7:42:8b:6f:a4:73:e9:f4:8d:37:93:94:78:
                    aa:b0:49:be:75:68:f7:92:79:2f:6c:77:48:62:13:
                    aa:52:45:70:bf:ee:c0:c5:fc:72:67:df:65:b8:af:
                    2a:1c:35:12:9b:79:60:d4:2a:0d:60:52:63:4d:b6:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5A:68:57:0F:A0:A9:BA:66:59:89:3F:53:81:19:ED:F3:47:45:D3
            X509v3 Authority Key Identifier:
                keyid:A8:58:B2:4C:DD:9A:12:71:8D:FF:37:C9:9C:4D:FD:8C:BD:DA:FB:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd5bdf4364a69749441571efcc359e8b36e0aa9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebe90bfd-ba56-4046-aa71-cf50da5c70fd/6ea25308cc0b5af8e52486e7a1273a10ccee66a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebe90bfd-ba56-4046-aa71-cf50da5c70fd/cd5bdf4364a69749441571efcc359e8b36e0aa9d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.204.0/22
                IPv6:
                  2803:9740::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:79:21:4e:aa:c2:0c:00:a1:2c:2e:95:36:6c:63:49:7a:46:
         c3:0a:24:fc:a5:18:a4:35:a5:42:59:a2:f6:db:ac:ab:f5:c0:
         7d:0f:a6:e9:17:98:d9:5e:dc:ac:74:06:d3:13:6a:c5:cc:5f:
         25:9c:05:2a:19:40:17:57:4a:ae:2b:da:fd:86:70:71:42:cb:
         43:b7:28:5d:12:76:ad:39:36:73:cf:e5:04:87:b7:51:14:e6:
         dd:4f:e9:56:f0:7a:2f:68:74:8c:e8:43:8c:0a:16:cd:ce:d3:
         aa:08:c7:2b:4f:b9:e3:83:fe:4a:ff:8d:37:89:06:c9:f7:43:
         0d:c5:02:f4:6f:af:42:37:16:fb:27:30:3b:5e:6b:f8:86:96:
         5c:eb:4a:aa:34:3e:ea:8d:2f:2b:80:10:cf:30:93:66:eb:76:
         7b:58:5a:a4:b4:21:85:f3:82:d5:dd:10:35:71:a2:d6:bb:6b:
         80:42:b0:66:24:d9:3d:a7:c2:9c:c4:9f:9a:a9:dc:c1:d7:18:
         6a:dc:76:56:41:b0:b2:f3:0e:b0:02:d4:72:6c:d1:d3:d9:3b:
         fe:74:5a:4c:c0:d7:96:46:00:8e:c7:6a:9e:12:06:ff:6a:71:
         3f:36:ea:fc:d6:d6:fe:a8:f1:64:7b:b9:0d:83:b2:13:56:98:
         b8:2b:3a:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDYfxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNk
NWJkZjQzNjRhNjk3NDk0NDE1NzFlZmNjMzU5ZThiMzZlMGFhOWQwHhcNMjEwMzI0
MTQzMTE3WhcNMjYwMzI0MTQzMTE3WjAzMTEwLwYDVQQDEyg2ZWEyNTMwOGNjMGI1
YWY4ZTUyNDg2ZTdhMTI3M2ExMGNjZWU2NmE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk+lGoomeUoHsX3znwSRSXnSndJHLpYIjSEhYj3+YDPUg/h77
x/pdgBOCpJgYKLWY8xBYlhUr8LsH+ncJJfZgaGza2l7yl33tmk0ePCjb8fPMGSV8
aJAxv6At4LFMMks290WN/rfRziw0yxn86FCMU/PkuZQHbUWxO2iDd2PXxKkzkd+C
3nB4vJ9nEvszhWtUrJrAi+xi+LpOhB0v/0+B1VfVGRJqzSP6QRjkdBkxco3kSD3I
szeBizMjExKh6NxOhxQDgPdCi2+kc+n0jTeTlHiqsEm+dWj3knkvbHdIYhOqUkVw
v+7AxfxyZ99luK8qHDUSm3lg1CoNYFJjTbZmuwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFMNaaFcPoKm6ZlmJP1OBGe3zR0XTMB8GA1UdIwQYMBaAFKhYskzdmhJxjf83
yZxN/Yy92vvtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2Q1YmRm
NDM2NGE2OTc0OTQ0MTU3MWVmY2MzNTllOGIzNmUwYWE5ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWJlOTBiZmQtYmE1Ni00MDQ2LWFhNzEtY2Y1MGRh
NWM3MGZkLzZlYTI1MzA4Y2MwYjVhZjhlNTI0ODZlN2ExMjczYTEwY2NlZTY2YTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYmU5MGJmZC1iYTU2LTQwNDYtYWE3MS1jZjUw
ZGE1YzcwZmQvY2Q1YmRmNDM2NGE2OTc0OTQ0MTU3MWVmY2MzNTllOGIzNmUwYWE5
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqrnzDANBAIAAjAHAwUAKAOXQDANBgkqhkiG9w0BAQsFAAOC
AQEABnkhTqrCDAChLC6VNmxjSXpGwwok/KUYpDWlQlmi9tusq/XAfQ+m6ReY2V7c
rHQG0xNqxcxfJZwFKhlAF1dKriva/YZwcULLQ7coXRJ2rTk2c8/lBIe3URTm3U/p
VvB6L2h0jOhDjAoWzc7TqgjHK0+544P+Sv+NN4kGyfdDDcUC9G+vQjcW+ycwO15r
+IaWXOtKqjQ+6o0vK4AQzzCTZut2e1hapLQhhfOC1d0QNXGi1rtrgEKwZiTZPafC
nMSfmqncwdcYatx2VkGwsvMOsALUcmzR09k7/nRaTMDXlkYAjsdqnhIG/2pxPzbq
/NbW/qjxZHu5DYOyE1aYuCs6Cw==
-----END CERTIFICATE-----