Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/9f701f166bd1e89aaea14c768045104b8db7223c.roa
File:                     9f701f166bd1e89aaea14c768045104b8db7223c.roa (raw, json)
Hash identifier:          nbQ9UlyHZPTLI5RJUCkqFdUNeeE0spd685vkRNl9itA=
Subject key identifier:   93:5A:48:2D:B6:CF:81:A6:4D:47:F1:B7:1B:7F:AD:57:2A:09:22:60
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       0E3C01
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/9f701f166bd1e89aaea14c768045104b8db7223c.roa
Signing time:             Wed 24 Mar 2021 14:47:18 +0000
ROA not before:           Wed 24 Mar 2021 14:47:18 +0000
ROA not after:            Tue 24 Mar 2026 14:47:18 +0000
asID:                     61461
IP address blocks:        190.124.28.0/22 maxlen: 22
                          2803:d700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932865 (0xe3c01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: Mar 24 14:47:18 2021 GMT
            Not After : Mar 24 14:47:18 2026 GMT
        Subject: CN=9f701f166bd1e89aaea14c768045104b8db7223c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:04:85:bf:a1:b4:25:da:db:38:be:53:27:
                    54:1d:59:6b:27:dd:02:58:4b:69:e1:8f:d5:f8:6d:
                    2f:75:df:24:fe:de:c1:15:7c:4c:19:02:81:5b:1a:
                    7d:71:b2:a3:23:06:1a:d0:f3:ca:f0:98:55:bb:e1:
                    3b:b0:b8:6d:7e:17:67:00:bd:39:1d:d8:8e:80:cf:
                    c1:68:45:64:b8:c7:db:57:75:ed:dc:68:c1:6e:ce:
                    11:2d:4f:9f:a3:dd:a3:fd:11:2d:ba:43:c3:ec:c2:
                    b6:27:84:19:35:03:37:1a:ea:69:09:cc:21:78:45:
                    60:35:95:d2:42:8f:57:db:45:6d:88:12:06:fa:f7:
                    15:de:0b:88:5b:d3:00:65:19:3b:88:4b:b3:a8:bf:
                    f9:49:f8:bf:08:c0:d0:07:b0:9d:39:a0:92:2d:e6:
                    14:a6:c0:9b:bd:3c:56:b1:66:f6:1c:81:e6:9c:59:
                    8c:8e:6f:c2:43:79:ba:a4:81:31:4d:13:3c:72:4f:
                    8b:5f:23:ed:d4:64:4c:52:80:37:ac:3b:cf:d4:a6:
                    95:14:56:c1:a8:c4:e5:e1:b6:23:8c:f5:8b:bf:ed:
                    a0:af:12:1f:19:0d:39:99:fd:2b:df:ff:03:78:72:
                    a2:16:80:5f:2c:25:6a:01:ed:79:38:45:37:76:ab:
                    5c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5A:48:2D:B6:CF:81:A6:4D:47:F1:B7:1B:7F:AD:57:2A:09:22:60
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/9f701f166bd1e89aaea14c768045104b8db7223c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.28.0/22
                IPv6:
                  2803:d700::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:35:c4:c6:24:32:1b:4b:79:04:2e:5d:8e:1d:9f:1d:80:6b:
         bd:d6:b8:f2:1f:01:bb:cb:3a:c5:d5:d7:56:b1:5c:14:20:2f:
         e6:97:55:44:50:1f:96:d1:52:82:18:40:1a:d3:88:20:ae:57:
         8b:0a:b2:2f:46:d3:a3:79:6f:aa:23:7b:7e:2a:0c:24:31:32:
         23:1f:9b:2a:9d:e3:3a:d3:f6:ad:f1:46:18:33:44:2d:08:9b:
         89:7c:8e:ef:80:58:5c:06:93:d3:57:48:94:60:3e:e9:94:3a:
         1a:25:0c:ee:39:7b:14:3b:65:b9:3f:09:e7:ec:9b:ad:df:b5:
         25:58:89:ea:5f:c6:dd:0d:c9:2f:03:e2:8f:ae:9c:a1:f6:48:
         0b:fe:d1:30:3d:8b:5a:71:61:e2:1e:87:da:b1:77:e8:c4:a4:
         47:80:a5:62:fd:e1:de:31:15:3c:5d:f2:f7:3d:e2:75:04:ea:
         84:7c:9c:04:2f:50:81:fa:c8:4d:3c:b7:2f:6a:b9:e6:93:3d:
         d9:8d:9b:f3:d9:69:32:80:0c:cd:8e:c3:bd:f9:a3:7b:35:8e:
         87:ac:b1:56:31:fa:f9:0a:78:2b:fc:fe:52:6b:67:c3:85:cd:
         25:a2:9d:fd:76:64:c8:81:93:34:87:9a:f8:c1:53:0b:4b:8f:
         16:97:e0:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDjwBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
MzJlZjNhODllMzgyZWE0Y2EwZTliMGZjNjY4MGFjNGRkODljNjgwHhcNMjEwMzI0
MTQ0NzE4WhcNMjYwMzI0MTQ0NzE4WjAzMTEwLwYDVQQDEyg5ZjcwMWYxNjZiZDFl
ODlhYWVhMTRjNzY4MDQ1MTA0YjhkYjcyMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1L8Ehb+htCXa2zi+UydUHVlrJ90CWEtp4Y/V+G0vdd8k/t7B
FXxMGQKBWxp9cbKjIwYa0PPK8JhVu+E7sLhtfhdnAL05HdiOgM/BaEVkuMfbV3Xt
3GjBbs4RLU+fo92j/REtukPD7MK2J4QZNQM3GuppCcwheEVgNZXSQo9X20VtiBIG
+vcV3guIW9MAZRk7iEuzqL/5Sfi/CMDQB7CdOaCSLeYUpsCbvTxWsWb2HIHmnFmM
jm/CQ3m6pIExTRM8ck+LXyPt1GRMUoA3rDvP1KaVFFbBqMTl4bYjjPWLv+2grxIf
GQ05mf0r3/8DeHKiFoBfLCVqAe15OEU3dqtc/wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFJNaSC22z4GmTUfxtxt/rVcqCSJgMB8GA1UdIwQYMBaAFMGsGY88wAcWyo6U
h+hJDQs/q15VMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWIzMmVm
M2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWUzMTM4YTUtYmE4OC00MjQxLWFkZWItMzE2YTNj
YTUyNGU1LzlmNzAxZjE2NmJkMWU4OWFhZWExNGM3NjgwNDUxMDRiOGRiNzIyM2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZTMxMzhhNS1iYTg4LTQyNDEtYWRlYi0zMTZh
M2NhNTI0ZTUvYWIzMmVmM2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr58HDANBAIAAjAHAwUAKAPXADANBgkqhkiG9w0BAQsFAAOC
AQEANjXExiQyG0t5BC5djh2fHYBrvda48h8Bu8s6xdXXVrFcFCAv5pdVRFAfltFS
ghhAGtOIIK5XiwqyL0bTo3lvqiN7fioMJDEyIx+bKp3jOtP2rfFGGDNELQibiXyO
74BYXAaT01dIlGA+6ZQ6GiUM7jl7FDtluT8J5+ybrd+1JViJ6l/G3Q3JLwPij66c
ofZIC/7RMD2LWnFh4h6H2rF36MSkR4ClYv3h3jEVPF3y9z3idQTqhHycBC9QgfrI
TTy3L2q55pM92Y2b89lpMoAMzY7DvfmjezWOh6yxVjH6+Qp4K/z+Umtnw4XNJaKd
/XZkyIGTNIea+MFTC0uPFpfgPg==
-----END CERTIFICATE-----