Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b7924a2-bf21-496d-a8e0-cf890812a577/c7e97582550e3a8af9d3e889bdb49ab33c50d707.roa
File:                     c7e97582550e3a8af9d3e889bdb49ab33c50d707.roa (raw, json)
Hash identifier:          4w4LW5ItFIDEiTkEFqSy8xqjYr2++oeA6QYscA+4qQ4=
Subject key identifier:   F4:2E:EA:8D:27:BE:10:D4:52:17:1E:57:42:75:F0:74:5E:AF:1D:78
Certificate issuer:       /CN=e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c
Certificate serial:       0D1AC2
Authority key identifier: 17:73:3B:88:7C:39:A9:14:85:6A:EE:36:19:17:FC:E1:34:73:86:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b7924a2-bf21-496d-a8e0-cf890812a577/c7e97582550e3a8af9d3e889bdb49ab33c50d707.roa
Signing time:             Wed 24 Mar 2021 14:39:14 +0000
ROA not before:           Wed 24 Mar 2021 14:39:13 +0000
ROA not after:            Tue 24 Mar 2026 14:39:13 +0000
asID:                     27738
IP address blocks:        190.63.56.0/22 maxlen: 24
                          190.63.60.0/24 maxlen: 24
                          190.63.61.0/24 maxlen: 24
                          190.63.212.0/22 maxlen: 24
                          190.63.216.0/24 maxlen: 24
                          190.63.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858818 (0xd1ac2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c
        Validity
            Not Before: Mar 24 14:39:13 2021 GMT
            Not After : Mar 24 14:39:13 2026 GMT
        Subject: CN=c7e97582550e3a8af9d3e889bdb49ab33c50d707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:b4:90:23:33:c9:5a:b0:ed:95:61:aa:7b:
                    75:31:c8:69:23:b4:73:1b:1a:55:33:cf:c0:99:95:
                    a0:71:d8:d5:03:5e:2b:70:58:e7:ff:12:70:66:cd:
                    f3:59:b9:21:52:74:16:12:4b:51:30:21:d8:bc:4c:
                    be:6a:21:85:44:73:df:08:ba:56:16:98:32:38:b2:
                    67:52:91:33:28:e9:a5:9f:56:99:10:1b:48:ae:19:
                    64:4e:0d:dc:d9:46:2e:13:ce:48:65:47:cc:2d:57:
                    d0:c6:2b:bf:d0:c7:77:07:ac:64:f7:b4:16:5d:a0:
                    1a:30:63:63:80:e7:f2:f5:34:99:37:90:c7:27:10:
                    c2:9b:4d:d3:a1:eb:c6:89:bb:a2:a7:e6:5e:0f:15:
                    59:de:44:c8:a7:f3:e2:b5:4e:4f:f3:d1:ab:a7:13:
                    97:6f:a6:69:ce:95:48:b9:cb:d1:50:10:84:3d:a9:
                    83:e9:57:23:a3:b7:82:bf:37:35:34:97:bf:c0:7d:
                    d0:3c:e5:74:af:e8:dd:50:22:a6:fe:e9:07:4a:78:
                    4e:59:f0:08:89:b5:9a:a5:6c:d2:e8:14:4a:7e:fd:
                    9a:df:94:14:7c:95:c0:35:a7:6b:ff:df:f3:b6:08:
                    8c:ce:3b:5e:2c:f0:c8:58:82:b6:8a:e8:3a:63:fb:
                    74:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2E:EA:8D:27:BE:10:D4:52:17:1E:57:42:75:F0:74:5E:AF:1D:78
            X509v3 Authority Key Identifier:
                keyid:17:73:3B:88:7C:39:A9:14:85:6A:EE:36:19:17:FC:E1:34:73:86:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b7924a2-bf21-496d-a8e0-cf890812a577/c7e97582550e3a8af9d3e889bdb49ab33c50d707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b7924a2-bf21-496d-a8e0-cf890812a577/e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.63.56.0-190.63.61.255
                  190.63.212.0-190.63.217.255

    Signature Algorithm: sha256WithRSAEncryption
         1c:f1:c0:eb:56:8f:23:30:aa:77:a7:2e:b1:36:20:b7:fe:ef:
         22:b5:f5:af:4f:f7:fb:e2:26:99:2b:64:f0:fb:0e:ef:e9:56:
         ff:2d:0e:b1:46:1c:72:eb:ff:3c:f6:70:ae:de:2d:db:ac:3f:
         aa:08:95:1e:3a:00:47:39:f8:e8:1c:c7:01:fb:a5:ae:94:a3:
         bc:18:96:94:04:ea:9f:44:2d:40:d0:c3:15:94:76:4d:5a:ff:
         ea:cd:4a:cd:aa:05:7d:5d:9d:fc:66:8b:13:2f:30:0d:9a:01:
         75:00:cc:e2:42:94:af:3c:dc:08:75:97:9a:1f:3a:c2:06:1d:
         03:5a:4c:24:72:c0:00:9d:12:5d:b8:25:40:85:dc:4f:4f:29:
         37:d1:c6:ad:09:99:d7:ea:64:5f:9e:17:a7:d4:46:a2:2a:db:
         12:db:0f:dd:1e:c1:8b:e4:ce:77:81:65:ad:a8:fb:67:67:83:
         62:8b:fa:b9:a5:bb:e7:a6:0b:b0:54:42:2c:8d:d9:e9:8e:62:
         7a:ce:7b:08:da:f3:fc:75:7b:39:06:4b:18:fd:80:c9:43:12:
         65:6d:e6:db:5c:9a:ad:57:7b:87:e7:71:43:0e:b2:60:e6:d6:
         b0:87:c4:64:63:1e:ba:d6:1d:ff:be:28:6e:16:2a:b4:c5:33:
         b2:a2:66:ab
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIDDRrCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU0
YzA1ZGFhM2E2ZTVhYTYwMzQ2YmM1YjZhOGIyMmM0YzE0Y2NiMmMwHhcNMjEwMzI0
MTQzOTEzWhcNMjYwMzI0MTQzOTEzWjAzMTEwLwYDVQQDEyhjN2U5NzU4MjU1MGUz
YThhZjlkM2U4ODliZGI0OWFiMzNjNTBkNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuCu0kCMzyVqw7ZVhqnt1MchpI7RzGxpVM8/AmZWgcdjVA14r
cFjn/xJwZs3zWbkhUnQWEktRMCHYvEy+aiGFRHPfCLpWFpgyOLJnUpEzKOmln1aZ
EBtIrhlkTg3c2UYuE85IZUfMLVfQxiu/0Md3B6xk97QWXaAaMGNjgOfy9TSZN5DH
JxDCm03ToevGibuip+ZeDxVZ3kTIp/PitU5P89GrpxOXb6ZpzpVIucvRUBCEPamD
6Vcjo7eCvzc1NJe/wH3QPOV0r+jdUCKm/ukHSnhOWfAIibWapWzS6BRKfv2a35QU
fJXANadr/9/ztgiMzjteLPDIWIK2iug6Y/t0JwIDAQABo4ICcTCCAm0wHQYDVR0O
BBYEFPQu6o0nvhDUUhceV0J18HRerx14MB8GA1UdIwQYMBaAFBdzO4h8OakUhWru
NhkX/OE0c4bNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTRjMDVk
YWEzYTZlNWFhNjAzNDZiYzViNmE4YjIyYzRjMTRjY2IyYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWI3OTI0YTItYmYyMS00OTZkLWE4ZTAtY2Y4OTA4
MTJhNTc3L2M3ZTk3NTgyNTUwZTNhOGFmOWQzZTg4OWJkYjQ5YWIzM2M1MGQ3MDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYjc5MjRhMi1iZjIxLTQ5NmQtYThlMC1jZjg5
MDgxMmE1NzcvZTRjMDVkYWEzYTZlNWFhNjAzNDZiYzViNmE4YjIyYzRjMTRjY2Iy
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1BggrBgEFBQcBBwEB/wQm
MCQwIgQCAAEwHDAMAwQDvj84AwQBvj88MAwDBAK+P9QDBAG+P9gwDQYJKoZIhvcN
AQELBQADggEBABzxwOtWjyMwqnenLrE2ILf+7yK19a9P9/viJpkrZPD7Du/pVv8t
DrFGHHLr/zz2cK7eLdusP6oIlR46AEc5+OgcxwH7pa6Uo7wYlpQE6p9ELUDQwxWU
dk1a/+rNSs2qBX1dnfxmixMvMA2aAXUAzOJClK883Ah1l5ofOsIGHQNaTCRywACd
El24JUCF3E9PKTfRxq0JmdfqZF+eF6fURqIq2xLbD90ewYvkzneBZa2o+2dng2KL
+rmlu+emC7BUQiyN2emOYnrOewja8/x1ezkGSxj9gMlDEmVt5ttcmq1Xe4fncUMO
smDm1rCHxGRjHrrWHf++KG4WKrTFM7KiZqs=
-----END CERTIFICATE-----