Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f3db7275-69d4-4e0b-8923-6d27a3eb5ee6/ec5d91953d25352ff10dba884286842d2cb14fe9.roa
File:                     ec5d91953d25352ff10dba884286842d2cb14fe9.roa (raw, json)
Hash identifier:          ngdfeVasVxxdYX2FjAK9ixZKD/6TxQY6w39D4GI5Mns=
Subject key identifier:   6E:C1:B5:40:2F:89:F2:73:53:E8:BF:C1:A0:92:B1:AB:AC:78:F4:E3
Certificate issuer:       /CN=0eec528551448f1d0df617193fcf25e8ab02ee62
Certificate serial:       036C5C
Authority key identifier: E3:A9:1B:B2:BD:75:2D:28:06:D3:42:32:0D:9E:37:B7:E5:03:7D:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eec528551448f1d0df617193fcf25e8ab02ee62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f3db7275-69d4-4e0b-8923-6d27a3eb5ee6/ec5d91953d25352ff10dba884286842d2cb14fe9.roa
Signing time:             Wed 24 Mar 2021 14:42:28 +0000
ROA not before:           Wed 24 Mar 2021 14:42:28 +0000
ROA not after:            Tue 24 Mar 2026 14:42:28 +0000
asID:                     27884
IP address blocks:        45.7.236.0/22 maxlen: 24
                          2803:c3c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224348 (0x36c5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eec528551448f1d0df617193fcf25e8ab02ee62
        Validity
            Not Before: Mar 24 14:42:28 2021 GMT
            Not After : Mar 24 14:42:28 2026 GMT
        Subject: CN=ec5d91953d25352ff10dba884286842d2cb14fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:7e:7d:69:48:b1:6e:d4:cf:e1:fd:19:0c:
                    a8:63:23:08:66:5e:28:b8:aa:fe:83:da:e8:a1:23:
                    6d:85:14:46:30:b1:04:db:e2:d1:b0:86:54:1d:44:
                    ba:1f:d0:c1:6e:fb:11:b4:fd:37:b7:ff:78:d3:f5:
                    2f:56:74:4b:27:6c:5b:78:fe:e0:15:7f:30:e7:cf:
                    92:3d:eb:1d:7f:48:47:0f:1f:1a:3d:ac:06:67:f1:
                    22:cb:6b:cb:f2:dc:f8:27:23:77:14:d9:ff:01:01:
                    d6:b4:e6:a8:eb:0f:56:7e:ae:91:1a:d7:6d:9e:7f:
                    d4:37:9d:4e:36:ba:c7:aa:96:1e:d5:c6:b3:db:49:
                    84:07:75:e4:21:0f:9a:59:af:ff:a9:bf:2a:79:14:
                    59:3e:6a:67:de:10:43:97:5a:6c:42:76:e6:38:3a:
                    10:28:02:19:02:a3:10:91:8d:82:a7:81:cd:87:4d:
                    d5:5a:1a:74:e4:8d:07:ef:57:0c:45:53:af:23:57:
                    c1:40:bf:be:02:57:1a:67:90:0a:2c:cf:39:56:99:
                    98:27:78:49:cb:24:b6:bd:22:b9:7d:4e:e8:63:4f:
                    56:84:ed:88:6b:05:3e:55:5a:6f:e6:c2:8f:3c:ed:
                    d9:c6:e8:d2:7b:cb:38:66:95:8d:ab:99:26:cb:b6:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C1:B5:40:2F:89:F2:73:53:E8:BF:C1:A0:92:B1:AB:AC:78:F4:E3
            X509v3 Authority Key Identifier:
                keyid:E3:A9:1B:B2:BD:75:2D:28:06:D3:42:32:0D:9E:37:B7:E5:03:7D:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eec528551448f1d0df617193fcf25e8ab02ee62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f3db7275-69d4-4e0b-8923-6d27a3eb5ee6/ec5d91953d25352ff10dba884286842d2cb14fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f3db7275-69d4-4e0b-8923-6d27a3eb5ee6/0eec528551448f1d0df617193fcf25e8ab02ee62.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.236.0/22
                IPv6:
                  2803:c3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:c2:97:bf:1c:3b:0d:c2:ca:ac:24:53:f5:fb:de:34:30:f1:
         9d:51:74:44:87:88:37:18:44:f1:11:c9:6e:53:cb:76:7d:f3:
         f8:3e:d6:61:18:40:dd:76:ad:5e:d4:0c:d1:cd:de:5b:5c:08:
         80:02:47:c8:25:c2:96:a4:33:1f:f7:ff:07:77:27:1c:ed:d5:
         03:95:3c:0f:6b:d2:75:78:26:d7:94:9e:f1:75:87:aa:a0:46:
         d1:0e:e3:7c:bb:35:7b:03:80:11:b0:23:ab:98:58:e4:7d:cb:
         58:16:ca:cf:7e:30:83:80:70:53:7e:f9:72:f0:0e:2c:dc:5a:
         b2:9b:e0:05:09:a6:91:14:2d:14:bf:41:fe:a6:80:5d:9f:69:
         2f:6f:36:e8:35:1a:8d:d6:70:45:29:39:d3:6c:c1:1a:fb:a7:
         b3:42:4d:e8:74:f0:45:a2:47:b5:ac:93:30:d8:f3:bd:b2:1a:
         a1:41:80:bb:7d:a1:50:45:c7:ae:89:8e:7f:21:22:1b:a3:cd:
         0a:32:19:a8:a9:94:fe:10:ae:50:44:83:be:62:79:67:44:02:
         b7:d6:ff:fc:48:ae:f9:72:bc:bf:56:21:79:ab:32:ee:7c:00:
         16:76:bf:24:a4:7b:ed:96:b5:67:04:0b:7c:84:ef:14:56:6c:
         17:91:30:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDA2xcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBl
ZWM1Mjg1NTE0NDhmMWQwZGY2MTcxOTNmY2YyNWU4YWIwMmVlNjIwHhcNMjEwMzI0
MTQ0MjI4WhcNMjYwMzI0MTQ0MjI4WjAzMTEwLwYDVQQDEyhlYzVkOTE5NTNkMjUz
NTJmZjEwZGJhODg0Mjg2ODQyZDJjYjE0ZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj0R+fWlIsW7Uz+H9GQyoYyMIZl4ouKr+g9rooSNthRRGMLEE
2+LRsIZUHUS6H9DBbvsRtP03t/940/UvVnRLJ2xbeP7gFX8w58+SPesdf0hHDx8a
PawGZ/Eiy2vL8tz4JyN3FNn/AQHWtOao6w9Wfq6RGtdtnn/UN51ONrrHqpYe1caz
20mEB3XkIQ+aWa//qb8qeRRZPmpn3hBDl1psQnbmODoQKAIZAqMQkY2Cp4HNh03V
Whp05I0H71cMRVOvI1fBQL++AlcaZ5AKLM85VpmYJ3hJyyS2vSK5fU7oY09WhO2I
awU+VVpv5sKPPO3ZxujSe8s4ZpWNq5kmy7Z5SwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFG7BtUAvifJzU+i/waCSsausePTjMB8GA1UdIwQYMBaAFOOpG7K9dS0oBtNC
Mg2eN7flA30AMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGVlYzUy
ODU1MTQ0OGYxZDBkZjYxNzE5M2ZjZjI1ZThhYjAyZWU2Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjNkYjcyNzUtNjlkNC00ZTBiLTg5MjMtNmQyN2Ez
ZWI1ZWU2L2VjNWQ5MTk1M2QyNTM1MmZmMTBkYmE4ODQyODY4NDJkMmNiMTRmZTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mM2RiNzI3NS02OWQ0LTRlMGItODkyMy02ZDI3
YTNlYjVlZTYvMGVlYzUyODU1MTQ0OGYxZDBkZjYxNzE5M2ZjZjI1ZThhYjAyZWU2
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi0H7DANBAIAAjAHAwUAKAPDwDANBgkqhkiG9w0BAQsFAAOC
AQEAfMKXvxw7DcLKrCRT9fveNDDxnVF0RIeINxhE8RHJblPLdn3z+D7WYRhA3Xat
XtQM0c3eW1wIgAJHyCXClqQzH/f/B3cnHO3VA5U8D2vSdXgm15Se8XWHqqBG0Q7j
fLs1ewOAEbAjq5hY5H3LWBbKz34wg4BwU375cvAOLNxaspvgBQmmkRQtFL9B/qaA
XZ9pL2826DUajdZwRSk502zBGvuns0JN6HTwRaJHtayTMNjzvbIaoUGAu32hUEXH
romOfyEiG6PNCjIZqKmU/hCuUESDvmJ5Z0QCt9b//Eiu+XK8v1Yheasy7nwAFna/
JKR77Za1ZwQLfITvFFZsF5EwRQ==
-----END CERTIFICATE-----