Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/fcbf6e17b9ae49eb7d8f5881a57db5a1c2915883.roa
File:                     fcbf6e17b9ae49eb7d8f5881a57db5a1c2915883.roa (raw, json)
Hash identifier:          Oeef6HtcInW/jH2HYnpLeQurNNENKiEBaJqq4N7uy00=
Subject key identifier:   D9:FA:52:35:3D:30:A2:1E:90:B2:50:3D:76:C1:F0:F9:6E:D5:F9:56
Certificate issuer:       /CN=4714a8fc89277634ae57cdaf4d814514cd61f656
Certificate serial:       159815
Authority key identifier: 25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/fcbf6e17b9ae49eb7d8f5881a57db5a1c2915883.roa
Signing time:             Tue 24 May 2022 15:46:24 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Mon 24 May 2027 03:00:00 +0000
asID:                     26619
IP address blocks:        179.50.48.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415189 (0x159815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4714a8fc89277634ae57cdaf4d814514cd61f656
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2027 GMT
        Subject: CN=fcbf6e17b9ae49eb7d8f5881a57db5a1c2915883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:67:1e:d5:df:86:09:5a:2f:cd:94:a2:4f:
                    9a:fe:7f:a0:ca:63:15:80:58:a2:af:50:63:8a:42:
                    92:09:06:2d:f5:2e:8d:9f:a1:56:64:dc:78:d9:7f:
                    4e:fc:30:f1:37:ca:a4:8f:c1:a8:30:1b:3f:9a:bb:
                    4c:a8:ed:f0:8e:48:52:78:3a:bd:72:b9:5d:69:a9:
                    f1:0d:c1:03:ee:d0:5a:10:f4:ef:d8:f4:20:7a:57:
                    c2:12:5d:12:6b:b5:3b:3c:e4:8f:ea:a5:65:85:69:
                    c1:b1:d8:79:30:30:5a:57:2c:25:87:64:1b:d7:09:
                    6c:1f:3b:da:09:4a:a7:0c:b0:e5:12:74:20:9d:98:
                    a8:3b:de:0b:b0:37:fc:ca:12:5c:4b:d5:4a:05:7b:
                    f9:5a:b1:90:72:6c:49:96:1c:c9:4b:82:ef:29:e7:
                    69:f3:b3:0b:ac:d3:4a:1c:f4:56:b4:ac:85:68:59:
                    4a:6b:a6:a8:b8:c3:c2:8d:2c:4e:8e:36:06:a8:37:
                    0c:9e:0d:35:1f:82:1f:fc:f4:e2:ca:3f:d1:59:d9:
                    d9:06:32:dc:fc:37:86:39:7f:af:19:5b:b3:6f:3c:
                    23:03:1f:85:13:78:6b:86:c3:4f:04:5e:93:8e:21:
                    07:37:07:a2:6b:e4:e9:a5:89:80:ff:d4:a2:a1:59:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FA:52:35:3D:30:A2:1E:90:B2:50:3D:76:C1:F0:F9:6E:D5:F9:56
            X509v3 Authority Key Identifier:
                keyid:25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/fcbf6e17b9ae49eb7d8f5881a57db5a1c2915883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:04:b2:ca:06:1a:54:45:21:64:e1:13:28:3e:6e:76:b9:ed:
         ee:c0:0c:fa:1a:60:7b:57:0b:bc:e5:e1:1a:11:ac:65:69:c0:
         f4:0f:37:e8:21:96:4c:78:23:df:56:84:a7:da:bd:03:ac:bc:
         b5:e4:a5:7c:52:db:0b:a6:d0:12:9d:77:73:3d:02:ae:cc:07:
         5b:c2:23:88:37:d6:d6:de:fc:67:e3:40:14:3d:2c:e6:e8:1e:
         79:c7:d0:af:48:5c:30:10:75:2e:ec:9c:e9:fe:f7:2c:29:6e:
         6f:e1:f6:8c:3f:f6:6a:85:2c:76:b1:04:41:e5:82:d6:07:12:
         7d:9e:81:71:57:ea:28:b9:9c:67:5a:ce:38:bd:22:58:d9:14:
         2d:b1:01:63:13:41:11:1f:84:eb:72:3a:1a:b7:dd:37:d6:7d:
         a8:93:4f:35:cc:69:32:df:78:f5:56:30:ec:9e:06:b2:74:3c:
         69:7a:3b:78:e5:2a:02:36:06:0d:cb:37:90:25:46:f1:7f:e8:
         02:30:e1:10:7c:94:38:5e:7a:23:8d:69:72:2c:10:56:2c:f6:
         b3:78:9a:e1:35:c6:65:e1:32:71:65:6a:02:e1:23:59:aa:de:
         3b:8b:46:cf:91:84:e5:62:5d:8a:69:9f:25:02:60:53:a1:36:
         38:23:fe:ee
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFZgVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
MTRhOGZjODkyNzc2MzRhZTU3Y2RhZjRkODE0NTE0Y2Q2MWY2NTYwHhcNMjIwNTI0
MDMwMDAwWhcNMjcwNTI0MDMwMDAwWjAzMTEwLwYDVQQDEyhmY2JmNmUxN2I5YWU0
OWViN2Q4ZjU4ODFhNTdkYjVhMWMyOTE1ODgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqjVnHtXfhglaL82Uok+a/n+gymMVgFiir1BjikKSCQYt9S6N
n6FWZNx42X9O/DDxN8qkj8GoMBs/mrtMqO3wjkhSeDq9crldaanxDcED7tBaEPTv
2PQgelfCEl0Sa7U7POSP6qVlhWnBsdh5MDBaVywlh2Qb1wlsHzvaCUqnDLDlEnQg
nZioO94LsDf8yhJcS9VKBXv5WrGQcmxJlhzJS4LvKedp87MLrNNKHPRWtKyFaFlK
a6aouMPCjSxOjjYGqDcMng01H4If/PTiyj/RWdnZBjLc/DeGOX+vGVuzbzwjAx+F
E3hrhsNPBF6TjiEHNweia+TppYmA/9SioVnbIQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNn6UjU9MKIekLJQPXbB8Plu1flWMB8GA1UdIwQYMBaAFCXzb5L/MZGd6p3o
GO5Gg5oebhfvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDcxNGE4
ZmM4OTI3NzYzNGFlNTdjZGFmNGQ4MTQ1MTRjZDYxZjY1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjQxYjVlZGQtNjhlNS00ZWEwLWI1MzUtNTJlY2Y5
OWEwODkxL2ZjYmY2ZTE3YjlhZTQ5ZWI3ZDhmNTg4MWE1N2RiNWExYzI5MTU4ODMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNDFiNWVkZC02OGU1LTRlYTAtYjUzNS01MmVj
Zjk5YTA4OTEvNDcxNGE4ZmM4OTI3NzYzNGFlNTdjZGFmNGQ4MTQ1MTRjZDYxZjY1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA7MyMDANBgkqhkiG9w0BAQsFAAOCAQEACASyygYaVEUhZOET
KD5udrnt7sAM+hpge1cLvOXhGhGsZWnA9A836CGWTHgj31aEp9q9A6y8teSlfFLb
C6bQEp13cz0CrswHW8IjiDfW1t78Z+NAFD0s5ugeecfQr0hcMBB1Luyc6f73LClu
b+H2jD/2aoUsdrEEQeWC1gcSfZ6BcVfqKLmcZ1rOOL0iWNkULbEBYxNBER+E63I6
GrfdN9Z9qJNPNcxpMt949VYw7J4GsnQ8aXo7eOUqAjYGDcs3kCVG8X/oAjDhEHyU
OF56I41pciwQViz2s3ia4TXGZeEycWVqAuEjWareO4tGz5GE5WJdimmfJQJgU6E2
OCP+7g==
-----END CERTIFICATE-----