Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0be29702-ceb4-4dfc-923c-3e47c20081dd/41e187ebd3b6a416b5aa213e0c8deed23869d2df.roa
File:                     41e187ebd3b6a416b5aa213e0c8deed23869d2df.roa (raw, json)
Hash identifier:          uvuuaw9lGEBmJRskWJKGLyXXtm7nwjnaT0vo8w7sYqY=
Subject key identifier:   50:D5:D1:23:E4:03:09:F0:2B:5E:59:A9:D2:37:4D:A2:94:FE:3C:4E
Certificate issuer:       /CN=a7008452fabb6e30ceb5752150fdcfc1732a60c6
Certificate serial:       1AA7D4
Authority key identifier: 51:F7:F1:E0:DD:4B:AD:FF:02:74:73:04:5E:39:13:12:7B:1E:09:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7008452fabb6e30ceb5752150fdcfc1732a60c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0be29702-ceb4-4dfc-923c-3e47c20081dd/41e187ebd3b6a416b5aa213e0c8deed23869d2df.roa
Signing time:             Fri 25 Nov 2022 17:12:18 +0000
ROA not before:           Sat 19 Nov 2022 18:34:58 +0000
ROA not after:            Sun 24 Nov 2024 18:34:58 +0000
asID:                     28099
IP address blocks:        190.3.168.0/24 maxlen: 24
                          190.3.169.0/24 maxlen: 24
                          190.3.170.0/24 maxlen: 24
                          190.3.171.0/24 maxlen: 24
                          190.3.172.0/24 maxlen: 24
                          190.3.173.0/24 maxlen: 24
                          190.3.174.0/24 maxlen: 24
                          190.3.175.0/24 maxlen: 24
                          168.194.196.0/24 maxlen: 24
                          168.194.197.0/24 maxlen: 24
                          168.194.198.0/24 maxlen: 24
                          168.194.199.0/24 maxlen: 24
                          2803:b480::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746900 (0x1aa7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7008452fabb6e30ceb5752150fdcfc1732a60c6
        Validity
            Not Before: Nov 19 18:34:58 2022 GMT
            Not After : Nov 24 18:34:58 2024 GMT
        Subject: CN=41e187ebd3b6a416b5aa213e0c8deed23869d2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:c6:a4:2f:a9:1f:cd:cc:22:43:f8:59:f2:
                    ed:be:62:d6:dd:70:bd:00:62:c9:06:48:af:03:51:
                    94:08:df:bb:65:f0:8b:0c:86:d6:04:9d:9a:55:10:
                    08:ec:27:e5:1b:e8:78:69:2e:a2:76:16:f7:c4:d6:
                    84:36:21:45:11:e5:f4:34:11:a3:c5:5e:87:ce:cc:
                    bb:2f:28:c1:50:4b:c3:1d:f1:4d:cf:b3:80:33:b5:
                    ef:ba:3b:5c:b5:85:6f:c3:e0:97:a0:49:17:4b:5c:
                    c3:1e:bf:b2:57:44:96:b6:4d:eb:ba:3c:f4:67:b3:
                    d4:4c:6a:6c:b4:93:f5:ed:70:3f:8c:67:bb:ca:85:
                    0a:8c:e4:67:1b:1f:34:47:81:62:29:69:9c:3b:5a:
                    4d:5b:a1:23:f1:70:46:56:07:30:98:e3:ca:da:1c:
                    ee:ea:54:ef:db:4a:d8:b9:0c:b9:8e:d7:78:63:e5:
                    14:42:4d:ff:75:2f:7e:a3:9e:81:cc:a7:7d:c9:96:
                    24:8e:90:8c:5c:73:be:71:ec:0e:69:ec:63:ce:72:
                    e0:e8:d8:86:1d:98:7a:82:95:32:a1:b9:a1:a0:ad:
                    d1:bc:eb:37:72:98:9b:12:68:dc:19:3d:be:dc:f5:
                    90:a0:88:0c:f8:77:04:13:ac:5b:cf:f2:4d:26:83:
                    90:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D5:D1:23:E4:03:09:F0:2B:5E:59:A9:D2:37:4D:A2:94:FE:3C:4E
            X509v3 Authority Key Identifier:
                keyid:51:F7:F1:E0:DD:4B:AD:FF:02:74:73:04:5E:39:13:12:7B:1E:09:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7008452fabb6e30ceb5752150fdcfc1732a60c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0be29702-ceb4-4dfc-923c-3e47c20081dd/41e187ebd3b6a416b5aa213e0c8deed23869d2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0be29702-ceb4-4dfc-923c-3e47c20081dd/a7008452fabb6e30ceb5752150fdcfc1732a60c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.196.0/22
                  190.3.168.0/21
                IPv6:
                  2803:b480::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:a9:1a:86:6a:d6:18:1c:87:b6:da:0b:f4:0e:7c:76:69:ed:
         5c:54:2f:a3:45:31:9f:52:3c:d1:ac:1b:92:c2:ef:41:51:8f:
         38:95:ce:0f:6a:42:a5:6d:8c:e0:83:05:3c:21:65:04:8c:26:
         75:72:c7:e7:39:9f:bf:6b:0c:0b:93:da:d7:e7:42:b6:b5:9d:
         77:3e:b5:0b:5e:ac:88:f9:f9:88:c4:66:c1:21:26:78:24:c7:
         07:3a:c9:5e:ce:26:f9:ad:54:66:c1:d7:01:56:12:32:c1:68:
         30:89:86:05:68:bb:20:a3:3c:47:f0:4b:c6:77:f1:30:b8:23:
         df:d4:b1:76:92:a7:a9:e1:1d:77:b9:8e:7e:2f:cb:ee:83:fc:
         c0:2e:15:a4:ce:f4:28:ee:90:89:40:97:48:0a:a0:b2:79:e4:
         89:07:64:0a:ed:f3:62:ce:4d:f5:c3:7f:87:de:88:fb:b7:51:
         f2:44:15:ce:86:ea:7a:20:26:11:ea:f3:ef:ec:2d:b4:92:73:
         11:1b:f2:61:65:9a:8d:64:b8:87:b5:76:a9:55:4c:df:a1:b0:
         27:65:01:f3:50:fa:84:38:9f:2a:d0:b2:33:10:3b:f1:81:53:
         80:29:f0:d9:ad:d1:8b:0b:8b:b1:a3:66:09:e9:78:26:49:6e:
         52:78:f6:1a
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDGqfUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3
MDA4NDUyZmFiYjZlMzBjZWI1NzUyMTUwZmRjZmMxNzMyYTYwYzYwHhcNMjIxMTE5
MTgzNDU4WhcNMjQxMTI0MTgzNDU4WjAzMTEwLwYDVQQDEyg0MWUxODdlYmQzYjZh
NDE2YjVhYTIxM2UwYzhkZWVkMjM4NjlkMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqsDGpC+pH83MIkP4WfLtvmLW3XC9AGLJBkivA1GUCN+7ZfCL
DIbWBJ2aVRAI7CflG+h4aS6idhb3xNaENiFFEeX0NBGjxV6Hzsy7LyjBUEvDHfFN
z7OAM7XvujtctYVvw+CXoEkXS1zDHr+yV0SWtk3rujz0Z7PUTGpstJP17XA/jGe7
yoUKjORnGx80R4FiKWmcO1pNW6Ej8XBGVgcwmOPK2hzu6lTv20rYuQy5jtd4Y+UU
Qk3/dS9+o56BzKd9yZYkjpCMXHO+cewOaexjznLg6NiGHZh6gpUyobmhoK3RvOs3
cpibEmjcGT2+3PWQoIgM+HcEE6xbz/JNJoOQyQIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFFDV0SPkAwnwK15ZqdI3TaKU/jxOMB8GA1UdIwQYMBaAFFH38eDdS63/AnRz
BF45ExJ7HglyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTcwMDg0
NTJmYWJiNmUzMGNlYjU3NTIxNTBmZGNmYzE3MzJhNjBjNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGJlMjk3MDItY2ViNC00ZGZjLTkyM2MtM2U0N2My
MDA4MWRkLzQxZTE4N2ViZDNiNmE0MTZiNWFhMjEzZTBjOGRlZWQyMzg2OWQyZGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYmUyOTcwMi1jZWI0LTRkZmMtOTIzYy0zZTQ3
YzIwMDgxZGQvYTcwMDg0NTJmYWJiNmUzMGNlYjU3NTIxNTBmZGNmYzE3MzJhNjBj
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAqjCxAMEA74DqDAPBAIAAjAJAwcAKAO0gAAAMA0GCSqGSIb3
DQEBCwUAA4IBAQATqRqGatYYHIe22gv0Dnx2ae1cVC+jRTGfUjzRrBuSwu9BUY84
lc4PakKlbYzggwU8IWUEjCZ1csfnOZ+/awwLk9rX50K2tZ13PrULXqyI+fmIxGbB
ISZ4JMcHOslezib5rVRmwdcBVhIywWgwiYYFaLsgozxH8EvGd/EwuCPf1LF2kqep
4R13uY5+L8vug/zALhWkzvQo7pCJQJdICqCyeeSJB2QK7fNizk31w3+H3oj7t1Hy
RBXOhup6ICYR6vPv7C20knMRG/JhZZqNZLiHtXapVUzfobAnZQHzUPqEOJ8q0LIz
EDvxgVOAKfDZrdGLC4uxo2YJ6XgmSW5SePYa
-----END CERTIFICATE-----