Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f30cee74-e9d4-4a18-be4f-8e85a9363b96/2fcdfeaf41863ae6029669b367f0aca110b8683c.roa
File:                     2fcdfeaf41863ae6029669b367f0aca110b8683c.roa (raw, json)
Hash identifier:          HZ8MpivXRlpJR8QOvXxkbJL/92ZdsxlI1O1Nl/7blc4=
Subject key identifier:   F5:C1:A6:28:2E:E1:D0:C8:D8:AF:B8:FE:F2:E1:21:5C:41:CA:34:CF
Certificate issuer:       /CN=a4336b29ec8bc0375f86cd82d7995cda551537ec
Certificate serial:       0DCC5C
Authority key identifier: 05:3E:28:96:E1:1A:C6:10:5F:18:A3:0A:0B:D8:0F:93:5B:2C:60:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4336b29ec8bc0375f86cd82d7995cda551537ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f30cee74-e9d4-4a18-be4f-8e85a9363b96/2fcdfeaf41863ae6029669b367f0aca110b8683c.roa
Signing time:             Wed 24 Mar 2021 14:42:42 +0000
ROA not before:           Wed 24 Mar 2021 14:42:39 +0000
ROA not after:            Tue 24 Mar 2026 14:42:39 +0000
asID:                     263690
IP address blocks:        131.221.8.0/22 maxlen: 24
                          2801:10:6000::/48 maxlen: 48
                          2801:10:6001::/48 maxlen: 48
                          2801:10:6002::/47 maxlen: 47
                          2801:10:6004::/46 maxlen: 46
                          2801:10:6008::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904284 (0xdcc5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4336b29ec8bc0375f86cd82d7995cda551537ec
        Validity
            Not Before: Mar 24 14:42:39 2021 GMT
            Not After : Mar 24 14:42:39 2026 GMT
        Subject: CN=2fcdfeaf41863ae6029669b367f0aca110b8683c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:e7:e8:5d:9f:e7:32:79:14:d7:47:9c:78:
                    38:51:2b:05:17:f0:28:56:03:5d:ac:2a:fc:d0:57:
                    13:6e:55:41:4b:08:3c:5f:1b:be:1d:b6:1a:57:97:
                    85:3e:a4:87:3e:8d:1a:06:89:d5:8f:92:79:a1:27:
                    17:d4:b4:87:aa:38:60:08:a4:a3:d1:df:29:8a:72:
                    b7:b9:7a:79:b2:e3:c3:e5:48:b4:c3:ce:2f:31:aa:
                    af:ca:84:a7:55:47:a7:8c:49:e8:0c:b2:26:98:70:
                    08:5e:a0:26:1a:84:59:c3:3e:48:81:bf:6d:c6:ec:
                    03:15:04:ee:bf:33:65:11:ce:aa:18:b6:5f:cf:a7:
                    15:15:ae:3a:76:32:e5:95:df:ea:80:b7:37:2f:ab:
                    9b:88:54:77:61:37:2d:9b:b7:27:86:d0:d2:e2:5e:
                    d1:97:43:19:b2:5e:3b:f0:64:fe:5d:d4:84:45:88:
                    6a:35:d2:c5:1c:d4:17:24:d6:e0:94:0c:cc:bd:8e:
                    be:e0:53:5f:64:5e:e5:b1:52:6d:41:d9:d7:61:46:
                    bc:2d:71:e6:9a:16:a6:33:11:b5:db:77:5c:a7:1a:
                    bf:f2:a3:3b:19:5f:6f:0d:1b:85:4f:af:c0:6f:46:
                    fd:c9:ea:54:19:31:6a:f8:18:9d:c7:71:33:ad:a7:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C1:A6:28:2E:E1:D0:C8:D8:AF:B8:FE:F2:E1:21:5C:41:CA:34:CF
            X509v3 Authority Key Identifier:
                keyid:05:3E:28:96:E1:1A:C6:10:5F:18:A3:0A:0B:D8:0F:93:5B:2C:60:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4336b29ec8bc0375f86cd82d7995cda551537ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f30cee74-e9d4-4a18-be4f-8e85a9363b96/2fcdfeaf41863ae6029669b367f0aca110b8683c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f30cee74-e9d4-4a18-be4f-8e85a9363b96/a4336b29ec8bc0375f86cd82d7995cda551537ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.8.0/22
                IPv6:
                  2801:10:6000::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:1e:33:f4:be:02:f1:8d:6b:b1:3e:11:e5:bc:db:24:70:2a:
         d3:32:d6:86:0a:85:5b:aa:ff:dc:44:e8:45:8d:e7:2b:b0:cd:
         f6:d1:76:f9:c4:2f:48:dd:c3:65:24:65:63:49:a6:36:42:cb:
         4b:c2:97:38:44:1a:c3:59:a9:5e:c3:7d:b2:ad:ca:ad:c9:ba:
         4a:00:cf:ce:37:9e:cc:0b:e2:1c:17:ab:15:90:37:43:4a:9c:
         84:c0:4d:af:4c:d6:df:6c:25:af:60:ef:d9:3d:27:4f:4d:da:
         c2:a2:b8:80:8e:76:42:de:3a:60:d3:03:ae:cd:30:6b:5c:87:
         4e:8d:eb:91:40:df:14:02:64:42:b3:2d:13:c1:92:84:1d:a4:
         68:ae:72:9c:57:e2:94:c6:82:5f:8c:b8:94:b6:e5:3a:a4:7d:
         43:94:5a:c3:5e:f1:c9:61:61:ea:b6:c7:bb:c0:66:67:d6:a9:
         6a:7e:d5:45:03:51:97:91:1b:d0:f4:27:a3:dc:12:f1:25:6f:
         f4:d7:1e:d3:1a:cb:a4:18:be:cc:a9:c1:1a:07:83:01:4b:9a:
         27:3c:10:fc:72:6d:cc:cc:eb:66:f6:7b:e7:05:9b:b8:64:22:
         a7:44:bd:94:8f:b7:bd:cc:14:f7:32:21:14:03:65:ca:af:e3:
         77:84:7e:2a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDDcxcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE0
MzM2YjI5ZWM4YmMwMzc1Zjg2Y2Q4MmQ3OTk1Y2RhNTUxNTM3ZWMwHhcNMjEwMzI0
MTQ0MjM5WhcNMjYwMzI0MTQ0MjM5WjAzMTEwLwYDVQQDEygyZmNkZmVhZjQxODYz
YWU2MDI5NjY5YjM2N2YwYWNhMTEwYjg2ODNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmPbn6F2f5zJ5FNdHnHg4USsFF/AoVgNdrCr80FcTblVBSwg8
Xxu+HbYaV5eFPqSHPo0aBonVj5J5oScX1LSHqjhgCKSj0d8pinK3uXp5suPD5Ui0
w84vMaqvyoSnVUenjEnoDLImmHAIXqAmGoRZwz5Igb9txuwDFQTuvzNlEc6qGLZf
z6cVFa46djLlld/qgLc3L6ubiFR3YTctm7cnhtDS4l7Rl0MZsl478GT+XdSERYhq
NdLFHNQXJNbglAzMvY6+4FNfZF7lsVJtQdnXYUa8LXHmmhamMxG123dcpxq/8qM7
GV9vDRuFT6/Ab0b9yepUGTFq+Bidx3EzradUTwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFPXBpigu4dDI2K+4/vLhIVxByjTPMB8GA1UdIwQYMBaAFAU+KJbhGsYQXxij
CgvYD5NbLGDFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTQzMzZi
MjllYzhiYzAzNzVmODZjZDgyZDc5OTVjZGE1NTE1MzdlYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjMwY2VlNzQtZTlkNC00YTE4LWJlNGYtOGU4NWE5
MzYzYjk2LzJmY2RmZWFmNDE4NjNhZTYwMjk2NjliMzY3ZjBhY2ExMTBiODY4M2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMzBjZWU3NC1lOWQ0LTRhMTgtYmU0Zi04ZTg1
YTkzNjNiOTYvYTQzMzZiMjllYzhiYzAzNzVmODZjZDgyZDc5OTVjZGE1NTE1Mzdl
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAoPdCDAPBAIAAjAJAwcEKAEAEGAAMA0GCSqGSIb3DQEBCwUA
A4IBAQArHjP0vgLxjWuxPhHlvNskcCrTMtaGCoVbqv/cROhFjecrsM320Xb5xC9I
3cNlJGVjSaY2QstLwpc4RBrDWalew32yrcqtybpKAM/ON57MC+IcF6sVkDdDSpyE
wE2vTNbfbCWvYO/ZPSdPTdrCoriAjnZC3jpg0wOuzTBrXIdOjeuRQN8UAmRCsy0T
wZKEHaRornKcV+KUxoJfjLiUtuU6pH1DlFrDXvHJYWHqtse7wGZn1qlqftVFA1GX
kRvQ9Cej3BLxJW/01x7TGsukGL7MqcEaB4MBS5onPBD8cm3MzOtm9nvnBZu4ZCKn
RL2Uj7e9zBT3MiEUA2XKr+N3hH4q
-----END CERTIFICATE-----