Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0de7d46d-4375-43a3-afd3-461aed858f94/42783305f1e178b14b3570b2eee1370ce6bc334d.roa
File:                     42783305f1e178b14b3570b2eee1370ce6bc334d.roa (raw, json)
Hash identifier:          CMJnuUBla+C5QQC01goUj0KW55FjYkfseNOjdLQwh0s=
Subject key identifier:   E7:E9:09:BE:50:F7:85:AB:12:B6:A3:08:C8:3C:81:B7:6C:DC:A8:C2
Certificate issuer:       /CN=905f1f446ba61c6b2b71c9c73f85bb4d3b26c1ed
Certificate serial:       0570
Authority key identifier: 00:D4:73:DE:A8:B4:66:E1:E6:2D:D6:9E:14:FF:16:1B:6B:00:09:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905f1f446ba61c6b2b71c9c73f85bb4d3b26c1ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0de7d46d-4375-43a3-afd3-461aed858f94/42783305f1e178b14b3570b2eee1370ce6bc334d.roa
Signing time:             Thu 22 Apr 2021 17:04:14 +0000
ROA not before:           Thu 22 Apr 2021 03:00:00 +0000
ROA not after:            Wed 22 Apr 2026 03:00:00 +0000
asID:                     27928
IP address blocks:        190.123.224.0/20 maxlen: 24
                          201.221.224.0/19 maxlen: 24
                          2803:ae40::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905f1f446ba61c6b2b71c9c73f85bb4d3b26c1ed
        Validity
            Not Before: Apr 22 03:00:00 2021 GMT
            Not After : Apr 22 03:00:00 2026 GMT
        Subject: CN=42783305f1e178b14b3570b2eee1370ce6bc334d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:ff:f7:a7:54:60:75:36:b3:d7:b9:ea:17:
                    15:c3:c9:6b:85:c1:69:2c:38:bc:33:a8:7e:6d:4c:
                    ae:98:67:ab:41:d0:07:d5:25:3e:31:c1:f1:3e:30:
                    fe:91:d7:e1:ce:0b:06:22:1b:b7:11:47:c8:d0:3f:
                    5c:cc:87:c0:c4:6e:d1:8b:f9:37:7b:59:1d:4d:b6:
                    6c:dc:1b:c6:2f:32:ff:97:02:22:5a:31:c3:e8:44:
                    51:af:5f:7a:0b:1b:93:09:2f:e0:a3:91:85:da:7a:
                    cc:fe:3d:33:02:96:62:ad:f0:31:c3:01:b8:94:57:
                    1e:86:5d:aa:2b:68:b6:0d:8b:24:89:51:1e:4e:1a:
                    fb:4b:43:16:54:df:01:f2:b2:48:ce:3c:df:b9:37:
                    df:45:9b:d3:59:74:1c:e6:08:4a:48:66:08:af:4b:
                    aa:13:7f:e5:1b:b1:82:d3:94:ac:a3:2f:6d:b0:87:
                    c4:10:91:51:98:f5:c7:79:f0:a6:51:9a:45:38:d6:
                    f9:8a:96:72:af:51:37:44:51:6d:fc:ea:c7:e0:ad:
                    a0:cb:52:47:67:dd:31:63:9f:6c:5e:da:d7:3a:16:
                    e9:17:6a:af:91:dd:37:a4:f6:5b:1b:ca:18:c6:49:
                    f2:46:37:06:0b:4d:70:ef:97:1f:eb:f2:60:45:de:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E9:09:BE:50:F7:85:AB:12:B6:A3:08:C8:3C:81:B7:6C:DC:A8:C2
            X509v3 Authority Key Identifier:
                keyid:00:D4:73:DE:A8:B4:66:E1:E6:2D:D6:9E:14:FF:16:1B:6B:00:09:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905f1f446ba61c6b2b71c9c73f85bb4d3b26c1ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0de7d46d-4375-43a3-afd3-461aed858f94/42783305f1e178b14b3570b2eee1370ce6bc334d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0de7d46d-4375-43a3-afd3-461aed858f94/905f1f446ba61c6b2b71c9c73f85bb4d3b26c1ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.224.0/20
                  201.221.224.0/19
                IPv6:
                  2803:ae40::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:79:78:a1:3e:09:b5:e1:32:c8:9e:d0:19:e2:f8:b3:95:46:
         83:79:13:40:6c:bc:7a:c7:89:eb:b1:a2:9c:75:ce:6b:73:c3:
         74:a7:1b:32:7e:03:f3:cb:f9:fa:9b:af:58:dd:fb:4a:f5:54:
         90:51:5c:46:2c:48:a0:03:60:76:e6:ae:69:d1:98:76:57:1d:
         06:63:5b:53:6f:d4:f0:ae:e4:4f:26:97:ff:5a:27:95:27:cb:
         8a:0b:8f:f9:c9:e8:46:49:b6:6b:d4:b8:c8:93:c6:7c:35:c6:
         af:0a:c1:16:5a:5e:69:7c:11:1e:b7:e0:c8:36:17:81:4f:57:
         d4:42:60:d8:76:35:d0:a8:6e:6a:9e:3b:5e:41:25:0a:20:65:
         c9:60:73:31:78:f5:b0:50:7c:98:0b:45:25:13:0c:03:fd:62:
         5c:6c:eb:05:43:75:15:40:5e:ff:b8:8d:ce:8c:47:68:dd:12:
         6e:31:d3:7f:4c:57:59:74:6d:af:06:b3:5a:12:c5:34:29:c6:
         8e:f9:4c:8f:81:0d:72:67:7f:81:f6:93:8c:15:63:9c:34:c1:
         79:e2:3d:1d:25:d5:cf:89:30:c9:77:1c:7a:c5:26:89:9d:6d:
         88:dc:82:d1:95:47:03:78:2f:e8:6f:67:f4:e3:32:69:41:0c:
         93:97:72:f3
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTA1
ZjFmNDQ2YmE2MWM2YjJiNzFjOWM3M2Y4NWJiNGQzYjI2YzFlZDAeFw0yMTA0MjIw
MzAwMDBaFw0yNjA0MjIwMzAwMDBaMDMxMTAvBgNVBAMTKDQyNzgzMzA1ZjFlMTc4
YjE0YjM1NzBiMmVlZTEzNzBjZTZiYzMzNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC31P/3p1RgdTaz17nqFxXDyWuFwWksOLwzqH5tTK6YZ6tB0AfV
JT4xwfE+MP6R1+HOCwYiG7cRR8jQP1zMh8DEbtGL+Td7WR1NtmzcG8YvMv+XAiJa
McPoRFGvX3oLG5MJL+CjkYXaesz+PTMClmKt8DHDAbiUVx6GXaoraLYNiySJUR5O
GvtLQxZU3wHyskjOPN+5N99Fm9NZdBzmCEpIZgivS6oTf+UbsYLTlKyjL22wh8QQ
kVGY9cd58KZRmkU41vmKlnKvUTdEUW386sfgraDLUkdn3TFjn2xe2tc6FukXaq+R
3Tek9lsbyhjGSfJGNwYLTXDvlx/r8mBF3v/hAgMBAAGjggJwMIICbDAdBgNVHQ4E
FgQU5+kJvlD3hasStqMIyDyBt2zcqMIwHwYDVR0jBBgwFoAUANRz3qi0ZuHmLdae
FP8WG2sACXwwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS85MDVmMWY0
NDZiYTYxYzZiMmI3MWM5YzczZjg1YmI0ZDNiMjZjMWVkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wZGU3ZDQ2ZC00Mzc1LTQzYTMtYWZkMy00NjFhZWQ4
NThmOTQvNDI3ODMzMDVmMWUxNzhiMTRiMzU3MGIyZWVlMTM3MGNlNmJjMzM0ZC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzBkZTdkNDZkLTQzNzUtNDNhMy1hZmQzLTQ2MWFl
ZDg1OGY5NC85MDVmMWY0NDZiYTYxYzZiMmI3MWM5YzczZjg1YmI0ZDNiMjZjMWVk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUw
IzASBAIAATAMAwQEvnvgAwQFyd3gMA0EAgACMAcDBQAoA65AMA0GCSqGSIb3DQEB
CwUAA4IBAQB5eXihPgm14TLIntAZ4vizlUaDeRNAbLx6x4nrsaKcdc5rc8N0pxsy
fgPzy/n6m69Y3ftK9VSQUVxGLEigA2B25q5p0Zh2Vx0GY1tTb9TwruRPJpf/WieV
J8uKC4/5yehGSbZr1LjIk8Z8NcavCsEWWl5pfBEet+DINheBT1fUQmDYdjXQqG5q
njteQSUKIGXJYHMxePWwUHyYC0UlEwwD/WJcbOsFQ3UVQF7/uI3OjEdo3RJuMdN/
TFdZdG2vBrNaEsU0KcaO+UyPgQ1yZ3+B9pOMFWOcNMF54j0dJdXPiTDJdxx6xSaJ
nW2I3ILRlUcDeC/ob2f04zJpQQyTl3Lz
-----END CERTIFICATE-----