Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/227cf9f6-c6c5-420a-8d1a-f177f84147be/ac5354f194cc3a35d12c877e397bf31e327aad91.roa
File:                     ac5354f194cc3a35d12c877e397bf31e327aad91.roa (raw, json)
Hash identifier:          7P1NhDLB/A1EubE4YiRVwz31UF4P3819CUbNmsL2h3w=
Subject key identifier:   56:1D:C3:2E:A7:E2:77:8D:47:27:D4:B8:E9:7D:78:E0:F4:8C:26:6E
Certificate issuer:       /CN=e83236c6b0af75e4560f6908b8d7a5a157e2f730
Certificate serial:       0D7726
Authority key identifier: 18:61:33:45:13:61:0C:4A:33:F2:2D:88:C5:23:56:10:B3:59:A4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e83236c6b0af75e4560f6908b8d7a5a157e2f730.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/227cf9f6-c6c5-420a-8d1a-f177f84147be/ac5354f194cc3a35d12c877e397bf31e327aad91.roa
Signing time:             Wed 24 Mar 2021 14:34:28 +0000
ROA not before:           Wed 24 Mar 2021 14:34:28 +0000
ROA not after:            Tue 24 Mar 2026 14:34:28 +0000
asID:                     23140
IP address blocks:        200.89.64.0/20 maxlen: 20
                          2803:7ce0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882470 (0xd7726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83236c6b0af75e4560f6908b8d7a5a157e2f730
        Validity
            Not Before: Mar 24 14:34:28 2021 GMT
            Not After : Mar 24 14:34:28 2026 GMT
        Subject: CN=ac5354f194cc3a35d12c877e397bf31e327aad91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:67:34:65:d5:b1:20:11:d4:93:d3:ec:3c:e4:
                    49:a1:e6:c7:08:a9:21:34:a2:34:78:23:25:36:19:
                    37:37:0f:2b:b0:4d:d8:69:49:5c:bd:9d:68:df:e9:
                    a8:52:e2:5f:0f:e6:4d:de:0b:ba:6c:e5:26:78:4b:
                    29:41:c2:89:c8:82:08:27:70:77:82:5c:ae:06:b0:
                    4d:4c:a5:a3:25:9f:0e:76:d9:2d:ee:5e:5e:02:d5:
                    fe:30:68:cf:55:b8:99:58:f8:3d:e6:d7:c9:95:9f:
                    14:25:e2:35:a5:47:a7:fa:ac:12:60:29:db:34:38:
                    91:b2:55:c3:35:95:4e:98:e3:47:fb:ad:14:d7:e5:
                    cc:7b:07:ce:3c:35:c8:7b:d7:4f:ed:9e:5f:54:8d:
                    0f:93:19:a2:11:2b:1d:c9:64:aa:f7:94:8d:ee:84:
                    d7:cb:42:cb:15:45:5d:b2:20:9e:e1:dd:c6:f2:5b:
                    1c:b5:ad:95:ea:6c:db:bb:93:72:40:42:02:a5:9c:
                    dd:12:94:65:46:12:64:b9:60:c6:f8:e9:65:a3:1a:
                    af:b2:c6:27:f6:68:89:d0:8c:22:b1:84:92:a0:44:
                    dc:cb:b9:32:e6:99:a5:04:4b:b2:f6:b8:07:da:15:
                    4c:18:57:f1:3d:ba:38:69:ed:98:c5:d3:7c:e0:ca:
                    40:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1D:C3:2E:A7:E2:77:8D:47:27:D4:B8:E9:7D:78:E0:F4:8C:26:6E
            X509v3 Authority Key Identifier:
                keyid:18:61:33:45:13:61:0C:4A:33:F2:2D:88:C5:23:56:10:B3:59:A4:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e83236c6b0af75e4560f6908b8d7a5a157e2f730.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/227cf9f6-c6c5-420a-8d1a-f177f84147be/ac5354f194cc3a35d12c877e397bf31e327aad91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/227cf9f6-c6c5-420a-8d1a-f177f84147be/e83236c6b0af75e4560f6908b8d7a5a157e2f730.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.64.0/20
                IPv6:
                  2803:7ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:4b:c6:0d:3e:73:9f:76:4c:56:6f:f9:40:ec:bb:04:ac:0a:
         85:39:75:14:98:e0:a8:d5:a5:a7:5b:a3:18:d1:12:fb:c5:03:
         34:bd:67:1d:ca:c6:88:c6:15:d6:9d:27:05:87:a1:3c:a9:7a:
         16:76:15:ce:cf:37:eb:b1:01:5e:ec:fd:25:32:b7:2b:d0:5c:
         1e:e1:7e:23:90:0b:04:20:d1:58:03:68:7f:4a:dd:90:6c:d0:
         d8:84:8b:ec:a8:2d:10:d5:fc:b5:a5:1e:b4:bf:45:76:ed:76:
         59:df:b6:e0:96:fb:35:84:cc:e6:84:ff:09:56:e8:ab:07:cb:
         79:5c:49:53:80:2c:11:07:fb:26:23:bd:eb:69:d3:97:c6:00:
         85:4e:b5:3a:83:6a:c9:b4:64:10:df:25:a5:e1:23:9d:ed:a0:
         11:fe:b6:5c:d6:77:a2:24:95:ce:c6:05:24:8a:29:ab:7b:97:
         be:08:e4:97:07:2e:ce:43:75:fc:69:02:a9:b4:e9:8f:4f:ad:
         fe:06:1a:67:2a:49:d3:02:1b:bc:57:8a:2a:99:6e:66:af:37:
         9d:69:f6:65:2b:ba:45:9c:1a:31:b8:6e:ff:6c:23:fd:97:94:
         33:a5:c5:cd:92:09:eb:9b:0f:fe:fe:a7:63:b6:18:2a:3f:f9:
         50:36:e6:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDXcmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4
MzIzNmM2YjBhZjc1ZTQ1NjBmNjkwOGI4ZDdhNWExNTdlMmY3MzAwHhcNMjEwMzI0
MTQzNDI4WhcNMjYwMzI0MTQzNDI4WjAzMTEwLwYDVQQDEyhhYzUzNTRmMTk0Y2Mz
YTM1ZDEyYzg3N2UzOTdiZjMxZTMyN2FhZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhmc0ZdWxIBHUk9PsPORJoebHCKkhNKI0eCMlNhk3Nw8rsE3Y
aUlcvZ1o3+moUuJfD+ZN3gu6bOUmeEspQcKJyIIIJ3B3glyuBrBNTKWjJZ8Odtkt
7l5eAtX+MGjPVbiZWPg95tfJlZ8UJeI1pUen+qwSYCnbNDiRslXDNZVOmONH+60U
1+XMewfOPDXIe9dP7Z5fVI0PkxmiESsdyWSq95SN7oTXy0LLFUVdsiCe4d3G8lsc
ta2V6mzbu5NyQEICpZzdEpRlRhJkuWDG+OlloxqvssYn9miJ0IwisYSSoETcy7ky
5pmlBEuy9rgH2hVMGFfxPbo4ae2YxdN84MpAoQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFFYdwy6n4neNRyfUuOl9eOD0jCZuMB8GA1UdIwQYMBaAFBhhM0UTYQxKM/It
iMUjVhCzWaQnMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTgzMjM2
YzZiMGFmNzVlNDU2MGY2OTA4YjhkN2E1YTE1N2UyZjczMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjI3Y2Y5ZjYtYzZjNS00MjBhLThkMWEtZjE3N2Y4
NDE0N2JlL2FjNTM1NGYxOTRjYzNhMzVkMTJjODc3ZTM5N2JmMzFlMzI3YWFkOTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMjdjZjlmNi1jNmM1LTQyMGEtOGQxYS1mMTc3
Zjg0MTQ3YmUvZTgzMjM2YzZiMGFmNzVlNDU2MGY2OTA4YjhkN2E1YTE1N2UyZjcz
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEBMhZQDANBAIAAjAHAwUAKAN84DANBgkqhkiG9w0BAQsFAAOC
AQEAH0vGDT5zn3ZMVm/5QOy7BKwKhTl1FJjgqNWlp1ujGNES+8UDNL1nHcrGiMYV
1p0nBYehPKl6FnYVzs8367EBXuz9JTK3K9BcHuF+I5ALBCDRWANof0rdkGzQ2ISL
7KgtENX8taUetL9Fdu12Wd+24Jb7NYTM5oT/CVboqwfLeVxJU4AsEQf7JiO962nT
l8YAhU61OoNqybRkEN8lpeEjne2gEf62XNZ3oiSVzsYFJIopq3uXvgjklwcuzkN1
/GkCqbTpj0+t/gYaZypJ0wIbvFeKKpluZq83nWn2ZSu6RZwaMbhu/2wj/ZeUM6XF
zZIJ65sP/v6nY7YYKj/5UDbmXQ==
-----END CERTIFICATE-----