Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/b509ca7a70521f31ed1589adff654fb4c9d44574.roa
File:                     b509ca7a70521f31ed1589adff654fb4c9d44574.roa (raw, json)
Hash identifier:          3E3ZH8TqkqYqHXLs5t5d712P3UI+SzbZzKN8UWHkpXw=
Subject key identifier:   79:07:CF:22:92:BB:CD:D3:EC:C1:8A:44:E2:87:F5:D9:60:D1:4F:CF
Certificate issuer:       /CN=07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4
Certificate serial:       13F413
Authority key identifier: F5:94:27:0F:83:2E:B2:05:83:30:E3:F6:46:2B:43:F0:6A:5B:3B:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/b509ca7a70521f31ed1589adff654fb4c9d44574.roa
Signing time:             Wed 22 Feb 2023 20:33:50 +0000
ROA not before:           Thu 10 Feb 2022 03:00:00 +0000
ROA not after:            Mon 12 Feb 2024 03:00:00 +0000
asID:                     271791
IP address blocks:        201.221.112.0/22 maxlen: 24
                          2803:bfe0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307667 (0x13f413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4
        Validity
            Not Before: Feb 10 03:00:00 2022 GMT
            Not After : Feb 12 03:00:00 2024 GMT
        Subject: CN=b509ca7a70521f31ed1589adff654fb4c9d44574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:bd:86:6c:39:b8:7e:7b:2d:b3:66:e8:1d:
                    ec:c7:da:d4:fa:10:27:e1:36:db:00:2e:31:45:bb:
                    7d:fa:11:25:74:f6:b1:12:cd:44:c1:af:bf:99:dc:
                    9b:3a:c1:fc:97:30:3e:f6:d2:b3:25:a5:37:ec:d7:
                    7c:6c:da:b7:a2:82:24:d1:0b:54:b6:f5:73:79:8b:
                    cd:08:5d:c7:3c:4d:34:68:eb:a5:46:a8:72:4a:c9:
                    f7:75:eb:5e:56:22:65:aa:93:bc:9d:51:02:09:c2:
                    34:b3:0d:5f:d6:52:e2:fc:80:4f:42:47:e1:72:77:
                    44:0b:93:f5:02:c1:e8:20:66:b4:ce:bb:0f:e7:0e:
                    ac:83:5a:a9:b8:95:96:c8:50:fb:c5:0a:7e:b4:f8:
                    6e:42:36:b0:32:d0:a5:66:f9:96:25:a1:8c:a8:21:
                    45:aa:9a:7e:1c:49:03:a6:02:f6:75:eb:fe:93:e5:
                    9f:eb:d1:37:a9:a8:cb:69:4f:c1:70:cc:cc:b4:bc:
                    a7:a9:d3:71:6d:73:39:92:9e:98:da:d8:a5:d2:21:
                    f5:38:8d:d6:00:89:ec:2c:d4:af:f1:06:74:82:bc:
                    d3:60:7f:13:42:52:7a:18:ab:b9:66:69:af:0b:ba:
                    7c:0f:c7:80:72:e9:aa:c9:e9:1d:2f:cf:13:6b:10:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:CF:22:92:BB:CD:D3:EC:C1:8A:44:E2:87:F5:D9:60:D1:4F:CF
            X509v3 Authority Key Identifier:
                keyid:F5:94:27:0F:83:2E:B2:05:83:30:E3:F6:46:2B:43:F0:6A:5B:3B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/b509ca7a70521f31ed1589adff654fb4c9d44574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.112.0/22
                IPv6:
                  2803:bfe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:58:df:e2:44:dd:30:b2:a5:47:1a:5d:f7:13:2e:1f:46:
         11:09:86:99:09:8b:43:11:54:61:20:fc:d2:9e:ca:f8:7f:67:
         1f:09:27:56:5a:09:bf:ff:4b:d1:1d:1a:0e:75:ba:20:93:ea:
         13:36:26:fc:69:1a:39:ba:cd:6b:5e:4b:c7:25:d1:5a:45:b1:
         d2:06:c3:b9:10:59:29:bb:d8:d6:42:3f:69:f9:08:c3:8e:11:
         87:08:da:bf:ce:b2:e1:34:73:9d:07:41:5d:6a:2e:c4:71:24:
         69:f2:b9:5b:fb:be:44:28:18:21:0b:ae:7c:fb:db:35:75:3f:
         b0:4d:d0:b9:ed:7f:75:02:44:64:41:68:37:25:4a:17:1a:5c:
         11:1e:ea:d6:66:89:23:b8:8d:84:5a:38:26:57:19:1b:9b:3d:
         4f:ef:3e:dc:57:91:d4:e4:62:04:16:4a:af:98:e8:81:8f:63:
         fc:7e:6d:30:a3:67:63:cf:c9:96:6a:9d:3e:92:9c:b4:66:21:
         d8:72:fc:1c:92:e6:5d:f6:e1:26:3e:3e:0f:89:68:52:37:ac:
         06:5c:99:a5:bf:59:8a:2a:3b:f5:c1:82:f5:8d:bb:60:7d:42:
         b7:69:50:4a:60:33:1e:81:a2:2a:6d:aa:b8:a3:00:16:b5:ba:
         09:cd:49:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDE/QTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA3
YzlhZGM4NTFlMmQ2N2I1YjNhYjAxYmNkZjMxMGMxYWUyMmYyZTQwHhcNMjIwMjEw
MDMwMDAwWhcNMjQwMjEyMDMwMDAwWjAzMTEwLwYDVQQDEyhiNTA5Y2E3YTcwNTIx
ZjMxZWQxNTg5YWRmZjY1NGZiNGM5ZDQ0NTc0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0tK9hmw5uH57LbNm6B3sx9rU+hAn4TbbAC4xRbt9+hEldPax
Es1Ewa+/mdybOsH8lzA+9tKzJaU37Nd8bNq3ooIk0QtUtvVzeYvNCF3HPE00aOul
RqhySsn3deteViJlqpO8nVECCcI0sw1f1lLi/IBPQkfhcndEC5P1AsHoIGa0zrsP
5w6sg1qpuJWWyFD7xQp+tPhuQjawMtClZvmWJaGMqCFFqpp+HEkDpgL2dev+k+Wf
69E3qajLaU/BcMzMtLynqdNxbXM5kp6Y2til0iH1OI3WAInsLNSv8QZ0grzTYH8T
QlJ6GKu5ZmmvC7p8D8eAcumqyekdL88TaxD+kwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHkHzyKSu83T7MGKROKH9dlg0U/PMB8GA1UdIwQYMBaAFPWUJw+DLrIFgzDj
9kYrQ/BqWztHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDdjOWFk
Yzg1MWUyZDY3YjViM2FiMDFiY2RmMzEwYzFhZTIyZjJlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjZmN2IyOGYtOTQwNy00YzE3LTg0YTAtZDYwNWY5
NzQzZWUwL2I1MDljYTdhNzA1MjFmMzFlZDE1ODlhZGZmNjU0ZmI0YzlkNDQ1NzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNmY3YjI4Zi05NDA3LTRjMTctODRhMC1kNjA1
Zjk3NDNlZTAvMDdjOWFkYzg1MWUyZDY3YjViM2FiMDFiY2RmMzEwYzFhZTIyZjJl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAsndcDANBAIAAjAHAwUAKAO/4DANBgkqhkiG9w0BAQsFAAOC
AQEAaltY3+JE3TCypUcaXfcTLh9GEQmGmQmLQxFUYSD80p7K+H9nHwknVloJv/9L
0R0aDnW6IJPqEzYm/GkaObrNa15LxyXRWkWx0gbDuRBZKbvY1kI/afkIw44Rhwja
v86y4TRznQdBXWouxHEkafK5W/u+RCgYIQuufPvbNXU/sE3Que1/dQJEZEFoNyVK
FxpcER7q1maJI7iNhFo4JlcZG5s9T+8+3FeR1ORiBBZKr5jogY9j/H5tMKNnY8/J
lmqdPpKctGYh2HL8HJLmXfbhJj4+D4loUjesBlyZpb9Ziio79cGC9Y27YH1Ct2lQ
SmAzHoGiKm2quKMAFrW6Cc1JdA==
-----END CERTIFICATE-----