Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b7924a2-bf21-496d-a8e0-cf890812a577/863c4e8eeae306f8e995f20eab1950bd765cb455.roa
File:                     863c4e8eeae306f8e995f20eab1950bd765cb455.roa (raw, json)
Hash identifier:          +5kZOiGFAPnaB1ybht9czVuJmR2xpLPJJj2WdHtB8yE=
Subject key identifier:   26:3D:9E:3A:FE:BA:1A:0E:52:33:1B:B1:C4:59:49:83:EA:58:AB:9B
Certificate issuer:       /CN=e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c
Certificate serial:       0D22A9
Authority key identifier: 17:73:3B:88:7C:39:A9:14:85:6A:EE:36:19:17:FC:E1:34:73:86:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b7924a2-bf21-496d-a8e0-cf890812a577/863c4e8eeae306f8e995f20eab1950bd765cb455.roa
Signing time:             Wed 24 Mar 2021 14:39:14 +0000
ROA not before:           Wed 24 Mar 2021 14:39:13 +0000
ROA not after:            Tue 24 Mar 2026 14:39:13 +0000
asID:                     23487
IP address blocks:        190.63.0.0/16 maxlen: 24
                          190.111.64.0/20 maxlen: 24
                          190.111.80.0/20 maxlen: 24
                          200.25.192.0/20 maxlen: 24
                          200.25.208.0/20 maxlen: 24
                          2800:430::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860841 (0xd22a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c
        Validity
            Not Before: Mar 24 14:39:13 2021 GMT
            Not After : Mar 24 14:39:13 2026 GMT
        Subject: CN=863c4e8eeae306f8e995f20eab1950bd765cb455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:a4:e2:d7:be:dd:8b:e3:c6:ca:f3:fd:50:
                    5a:5b:a2:33:c4:c0:0e:c9:a2:ca:30:ff:f7:32:20:
                    e2:51:c8:6d:b8:93:43:3c:d1:e1:bb:d5:d3:3a:59:
                    5c:65:87:2e:7a:3f:8d:35:60:a9:cf:a8:54:0d:b0:
                    66:7a:1d:57:ee:df:d2:8a:11:59:b0:12:68:99:01:
                    1e:49:ca:f4:a4:0f:38:c4:6b:d1:13:08:89:7f:e4:
                    fa:f8:8c:bc:e3:72:3f:39:ba:9d:24:6a:aa:4a:ec:
                    1c:b5:6e:79:9f:da:6c:1a:e9:e6:f7:06:48:9c:60:
                    65:b8:e6:e5:9f:5b:df:7e:e1:b6:99:6c:72:c3:07:
                    5b:fc:09:24:68:e9:42:43:84:91:ee:4f:eb:b2:91:
                    e1:ca:10:d4:7c:fe:33:3d:50:06:51:26:e8:67:f8:
                    84:2d:39:47:38:79:00:0a:09:b2:b8:4d:1b:73:e1:
                    0e:76:a9:1c:a5:8f:d6:09:7d:2a:ef:91:01:1b:ff:
                    a5:69:53:cb:72:23:8c:60:2b:88:1e:3c:4a:e1:b4:
                    58:17:35:76:50:43:39:96:9f:a5:d4:f3:ff:dd:0a:
                    1f:8b:b9:6a:35:99:3f:a5:d7:ea:9f:cc:70:b4:6c:
                    5e:e7:e1:54:2c:cd:94:07:62:c6:7a:f3:6d:d0:bf:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3D:9E:3A:FE:BA:1A:0E:52:33:1B:B1:C4:59:49:83:EA:58:AB:9B
            X509v3 Authority Key Identifier:
                keyid:17:73:3B:88:7C:39:A9:14:85:6A:EE:36:19:17:FC:E1:34:73:86:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b7924a2-bf21-496d-a8e0-cf890812a577/863c4e8eeae306f8e995f20eab1950bd765cb455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b7924a2-bf21-496d-a8e0-cf890812a577/e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.63.0.0/16
                  190.111.64.0/19
                  200.25.192.0/19
                IPv6:
                  2800:430::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:54:cb:97:e3:cc:5f:4b:d8:c9:a3:7b:26:38:30:3a:fd:3b:
         7b:d6:23:ef:ef:e9:a9:0f:81:c7:0a:5d:be:1a:90:5e:c7:a7:
         58:a6:0b:ff:61:68:a3:8d:10:ed:24:29:29:4c:92:8d:09:42:
         92:79:69:7c:49:c6:e1:e9:a1:a8:b4:0d:87:ef:99:93:6e:f4:
         82:ac:c0:5d:89:e4:28:ca:70:ad:23:18:e9:9b:df:71:1c:02:
         7a:b8:cb:c9:fb:93:a9:9f:8c:8b:c7:92:b9:f0:2f:e2:b9:2b:
         4c:49:56:2a:f7:50:c6:4f:61:bc:78:a8:5f:00:12:f2:62:b4:
         a9:31:59:ad:f1:4c:b6:75:85:d9:43:a9:d9:1e:70:36:67:44:
         86:05:5c:1c:4a:56:54:1a:5c:fe:5f:b2:05:e2:39:1a:f2:64:
         3e:3e:25:5b:c5:03:c0:95:07:c6:0a:a7:d3:6f:19:ae:b9:c8:
         ff:d2:c3:29:39:7b:be:ad:86:c0:0d:08:bd:53:67:ee:de:b4:
         55:3a:83:46:6d:66:d4:d0:58:3f:d5:e2:07:9f:b0:0f:eb:80:
         91:bd:06:ff:73:e9:25:49:6f:40:aa:ba:1f:32:45:6b:40:b3:
         ab:c7:07:fd:59:fe:81:87:fb:ad:a0:54:21:95:49:1e:3c:42:
         21:b7:3a:fd
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIDDSKpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU0
YzA1ZGFhM2E2ZTVhYTYwMzQ2YmM1YjZhOGIyMmM0YzE0Y2NiMmMwHhcNMjEwMzI0
MTQzOTEzWhcNMjYwMzI0MTQzOTEzWjAzMTEwLwYDVQQDEyg4NjNjNGU4ZWVhZTMw
NmY4ZTk5NWYyMGVhYjE5NTBiZDc2NWNiNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo8Kk4te+3Yvjxsrz/VBaW6IzxMAOyaLKMP/3MiDiUchtuJND
PNHhu9XTOllcZYcuej+NNWCpz6hUDbBmeh1X7t/SihFZsBJomQEeScr0pA84xGvR
EwiJf+T6+Iy843I/ObqdJGqqSuwctW55n9psGunm9wZInGBluObln1vffuG2mWxy
wwdb/AkkaOlCQ4SR7k/rspHhyhDUfP4zPVAGUSboZ/iELTlHOHkACgmyuE0bc+EO
dqkcpY/WCX0q75EBG/+laVPLciOMYCuIHjxK4bRYFzV2UEM5lp+l1PP/3Qofi7lq
NZk/pdfqn8xwtGxe5+FULM2UB2LGevNt0L9uoQIDAQABo4ICdTCCAnEwHQYDVR0O
BBYEFCY9njr+uhoOUjMbscRZSYPqWKubMB8GA1UdIwQYMBaAFBdzO4h8OakUhWru
NhkX/OE0c4bNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTRjMDVk
YWEzYTZlNWFhNjAzNDZiYzViNmE4YjIyYzRjMTRjY2IyYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWI3OTI0YTItYmYyMS00OTZkLWE4ZTAtY2Y4OTA4
MTJhNTc3Lzg2M2M0ZThlZWFlMzA2ZjhlOTk1ZjIwZWFiMTk1MGJkNzY1Y2I0NTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYjc5MjRhMi1iZjIxLTQ5NmQtYThlMC1jZjg5
MDgxMmE1NzcvZTRjMDVkYWEzYTZlNWFhNjAzNDZiYzViNmE4YjIyYzRjMTRjY2Iy
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq
MCgwFwQCAAEwEQMDAL4/AwQFvm9AAwQFyBnAMA0EAgACMAcDBQAoAAQwMA0GCSqG
SIb3DQEBCwUAA4IBAQAjVMuX48xfS9jJo3smODA6/Tt71iPv7+mpD4HHCl2+GpBe
x6dYpgv/YWijjRDtJCkpTJKNCUKSeWl8Scbh6aGotA2H75mTbvSCrMBdieQoynCt
Ixjpm99xHAJ6uMvJ+5Opn4yLx5K58C/iuStMSVYq91DGT2G8eKhfABLyYrSpMVmt
8Uy2dYXZQ6nZHnA2Z0SGBVwcSlZUGlz+X7IF4jka8mQ+PiVbxQPAlQfGCqfTbxmu
ucj/0sMpOXu+rYbADQi9U2fu3rRVOoNGbWbU0Fg/1eIHn7AP64CRvQb/c+klSW9A
qrofMkVrQLOrxwf9Wf6Bh/utoFQhlUkePEIhtzr9
-----END CERTIFICATE-----