Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/e4f2f86678c6410d7d5403a637667a7d3cb86bdf.roa
File:                     e4f2f86678c6410d7d5403a637667a7d3cb86bdf.roa (raw, json)
Hash identifier:          E56gW0/JbDM52GkRGf+JfStQ+KR6Z+o1PQjfkc+ScHs=
Subject key identifier:   28:B2:DB:C2:52:B1:A2:C8:28:9C:BA:FF:94:A9:55:59:0A:C2:4E:4B
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       1F2588
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/e4f2f86678c6410d7d5403a637667a7d3cb86bdf.roa
Signing time:             Wed 26 Apr 2023 17:24:45 +0000
ROA not before:           Tue 25 Apr 2023 17:24:40 +0000
ROA not after:            Sat 26 Apr 2025 17:24:40 +0000
asID:                     42
IP address blocks:        170.210.180.0/24 maxlen: 24
                          2800:110:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2041224 (0x1f2588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Apr 25 17:24:40 2023 GMT
            Not After : Apr 26 17:24:40 2025 GMT
        Subject: CN=e4f2f86678c6410d7d5403a637667a7d3cb86bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fa:3d:a6:a1:f5:27:6b:b6:e4:6c:3a:55:ca:
                    00:f9:26:67:c0:88:ea:52:42:10:07:a2:46:d3:82:
                    0c:29:a5:37:41:3a:a1:81:09:cc:1d:92:14:78:b9:
                    76:cb:3c:fb:f2:7b:3d:77:58:21:42:22:65:36:29:
                    e1:e3:d4:43:d3:4d:be:0f:14:b1:f9:68:39:9d:f8:
                    9d:41:04:52:d1:e8:fd:b9:86:35:17:d3:7d:13:25:
                    fd:a1:fa:3a:aa:bc:e6:2d:72:92:ae:c2:ce:f4:cb:
                    b8:3f:33:8e:e7:c6:a1:4c:e5:b6:65:8e:72:33:cd:
                    bd:aa:62:98:30:2e:18:9b:ec:3d:23:5d:fe:9d:94:
                    b3:6a:99:2a:c4:a7:d2:98:89:fd:14:fd:c2:3f:47:
                    4d:d8:15:73:c6:90:49:50:ca:d9:0a:3a:05:b7:55:
                    f4:da:ee:9d:d5:cc:68:3e:34:64:c6:3a:21:93:eb:
                    89:42:b1:c0:07:71:38:68:41:42:04:b8:53:bd:f6:
                    81:3e:c9:ac:95:d8:00:e7:28:2f:0b:87:46:31:ee:
                    20:7a:83:26:d6:55:f5:fe:c0:f3:5c:6d:5c:a3:f5:
                    88:77:f4:6b:3b:70:20:0f:b4:7d:92:e6:10:67:89:
                    15:ed:10:07:04:cf:56:d5:07:5b:f5:a5:c5:2c:0a:
                    09:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B2:DB:C2:52:B1:A2:C8:28:9C:BA:FF:94:A9:55:59:0A:C2:4E:4B
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/e4f2f86678c6410d7d5403a637667a7d3cb86bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.180.0/24
                IPv6:
                  2800:110:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:3f:39:5c:dc:84:71:a5:ee:7b:55:cf:55:a3:02:f2:5f:d7:
         6c:22:c5:bb:1e:22:ce:61:31:e4:96:ea:cd:05:7a:fb:16:f9:
         de:db:9e:25:08:44:7a:c4:60:41:f9:56:51:6d:e8:d4:2f:de:
         c4:87:da:4d:c0:cb:43:63:72:b5:42:08:0c:fb:60:18:12:7c:
         54:38:91:e3:59:48:02:a3:92:29:ca:80:8c:45:a4:23:b2:a9:
         03:97:ea:e0:14:8c:1a:58:04:e1:cc:67:b3:54:e3:dc:2f:09:
         17:88:7e:4e:6b:5a:3d:a8:f0:1a:ad:cd:7a:40:0a:ba:97:04:
         2a:0b:ec:c5:d5:b9:49:b2:cb:27:c0:be:1c:9a:71:cb:c1:a6:
         3f:a7:ab:e9:bf:80:ea:06:6d:97:1b:dc:fd:8e:7a:7f:9a:0d:
         bf:ac:f7:70:f6:cc:c3:08:53:d7:e0:31:74:f5:13:c8:b2:fc:
         47:e0:9f:e1:d0:34:4b:2f:b4:ac:05:3d:d7:eb:83:16:fe:95:
         4d:ab:c4:d4:e1:47:ca:68:08:a4:90:44:c3:3f:a5:38:7d:8d:
         df:8b:75:2c:b8:b4:87:f0:53:d0:16:6b:90:ef:ad:54:55:2a:
         74:43:9b:b6:6f:f2:94:78:cd:34:83:2b:1f:6e:f8:b1:b6:15:
         68:32:42:32
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDHyWIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl
YzkzMzQ3ODlkNGZiOTdiMGMwYWE0ODM1NjM5MDZhNWQ2OWI0YzIwHhcNMjMwNDI1
MTcyNDQwWhcNMjUwNDI2MTcyNDQwWjAzMTEwLwYDVQQDEyhlNGYyZjg2Njc4YzY0
MTBkN2Q1NDAzYTYzNzY2N2E3ZDNjYjg2YmRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3/o9pqH1J2u25Gw6VcoA+SZnwIjqUkIQB6JG04IMKaU3QTqh
gQnMHZIUeLl2yzz78ns9d1ghQiJlNinh49RD002+DxSx+Wg5nfidQQRS0ej9uYY1
F9N9EyX9ofo6qrzmLXKSrsLO9Mu4PzOO58ahTOW2ZY5yM829qmKYMC4Ym+w9I13+
nZSzapkqxKfSmIn9FP3CP0dN2BVzxpBJUMrZCjoFt1X02u6d1cxoPjRkxjohk+uJ
QrHAB3E4aEFCBLhTvfaBPsmsldgA5ygvC4dGMe4geoMm1lX1/sDzXG1co/WId/Rr
O3AgD7R9kuYQZ4kV7RAHBM9W1Qdb9aXFLAoJMwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFCiy28JSsaLIKJy6/5SpVVkKwk5LMB8GA1UdIwQYMBaAFAiRqsSRgrsOBnj6
2ng1jFjfNFzLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWVjOTMz
NDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjhkNWJlNGQtZTc1MS00YzcwLTk2NmItY2ZmNWVk
N2JmNWJlL2U0ZjJmODY2NzhjNjQxMGQ3ZDU0MDNhNjM3NjY3YTdkM2NiODZiZGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOGQ1YmU0ZC1lNzUxLTRjNzAtOTY2Yi1jZmY1
ZWQ3YmY1YmUvZWVjOTMzNDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAKrStDAPBAIAAjAJAwcAKAABEAAQMA0GCSqGSIb3DQEBCwUA
A4IBAQByPzlc3IRxpe57Vc9VowLyX9dsIsW7HiLOYTHklurNBXr7Fvne254lCER6
xGBB+VZRbejUL97Eh9pNwMtDY3K1QggM+2AYEnxUOJHjWUgCo5IpyoCMRaQjsqkD
l+rgFIwaWAThzGezVOPcLwkXiH5Oa1o9qPAarc16QAq6lwQqC+zF1blJsssnwL4c
mnHLwaY/p6vpv4DqBm2XG9z9jnp/mg2/rPdw9szDCFPX4DF09RPIsvxH4J/h0DRL
L7SsBT3X64MW/pVNq8TU4UfKaAikkETDP6U4fY3fi3UsuLSH8FPQFmuQ761UVSp0
Q5u2b/KUeM00gysfbvixthVoMkIy
-----END CERTIFICATE-----