Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27c8e655-a65b-480e-923f-a4701e583973/b1899ce224c949611932b13deda45f48df6710c5.roa
File:                     b1899ce224c949611932b13deda45f48df6710c5.roa (raw, json)
Hash identifier:          NY/p1sV7h6ip4krNS64nAu9VrVmIu7rM9D3EX4TJ2mg=
Subject key identifier:   EF:51:A3:CB:04:34:28:3D:86:3D:36:C1:E8:F2:54:2A:BB:20:BC:A1
Certificate issuer:       /CN=f199c15e83abff54c59af8a67e18495cb989d953
Certificate serial:       2208E5
Authority key identifier: 42:B3:74:40:2E:D5:88:86:4D:ED:8F:6A:6D:76:3F:DF:67:8C:DE:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f199c15e83abff54c59af8a67e18495cb989d953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27c8e655-a65b-480e-923f-a4701e583973/b1899ce224c949611932b13deda45f48df6710c5.roa
Signing time:             Tue 27 Jun 2023 18:56:58 +0000
ROA not before:           Mon 26 Jun 2023 18:56:58 +0000
ROA not after:            Fri 27 Jun 2025 18:56:58 +0000
asID:                     52273
IP address blocks:        190.112.32.0/21 maxlen: 24
                          2803:94c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2230501 (0x2208e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f199c15e83abff54c59af8a67e18495cb989d953
        Validity
            Not Before: Jun 26 18:56:58 2023 GMT
            Not After : Jun 27 18:56:58 2025 GMT
        Subject: CN=b1899ce224c949611932b13deda45f48df6710c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ed:d1:2c:e8:91:77:96:60:fa:52:03:39:27:
                    b1:11:76:75:4a:3a:af:6c:67:6d:26:d3:94:e5:f5:
                    ee:e6:08:1d:3d:d1:93:88:9b:58:f4:03:50:b4:cc:
                    1d:7d:94:0c:b9:2d:5e:ec:65:13:ce:94:99:a7:74:
                    70:47:74:c6:67:dc:ab:f1:84:0e:65:4c:7b:14:26:
                    7c:69:5c:0c:88:f1:cc:36:1b:8e:11:6f:9b:1f:cf:
                    dc:32:7c:25:a2:81:08:ff:62:3e:3b:f6:95:51:e2:
                    53:06:52:a4:5b:b3:f3:e1:53:49:d0:a0:85:7b:78:
                    64:4b:da:eb:15:dc:47:1b:9d:11:a4:9f:59:6c:82:
                    5b:10:63:94:ef:75:66:b6:b7:04:c6:07:7b:be:5e:
                    2c:e4:bf:e9:e8:f5:00:a3:e7:40:d7:84:3a:2a:e9:
                    27:58:f4:b8:67:59:78:11:21:9a:43:9f:cc:8b:4c:
                    73:92:02:93:11:0f:45:cd:44:18:5f:e3:84:77:3c:
                    1e:e0:36:56:6c:67:89:55:b4:2f:43:3e:c9:af:b6:
                    be:35:88:69:73:bd:fe:65:6c:b8:1f:36:c0:71:fd:
                    9b:fd:be:94:f8:92:30:3c:12:1c:b0:fa:e3:69:20:
                    00:28:39:6c:0b:98:7f:89:43:4b:86:3b:49:1a:1b:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:51:A3:CB:04:34:28:3D:86:3D:36:C1:E8:F2:54:2A:BB:20:BC:A1
            X509v3 Authority Key Identifier:
                keyid:42:B3:74:40:2E:D5:88:86:4D:ED:8F:6A:6D:76:3F:DF:67:8C:DE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f199c15e83abff54c59af8a67e18495cb989d953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27c8e655-a65b-480e-923f-a4701e583973/b1899ce224c949611932b13deda45f48df6710c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27c8e655-a65b-480e-923f-a4701e583973/f199c15e83abff54c59af8a67e18495cb989d953.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.32.0/21
                IPv6:
                  2803:94c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:a4:c2:72:5a:21:0c:bb:08:5f:71:ef:85:82:f2:ed:49:ce:
         e5:fa:7a:c8:ef:1d:35:61:56:eb:43:2e:d0:89:9f:c7:a0:78:
         7f:62:2a:db:1f:0f:93:17:64:c2:31:b7:96:71:7f:56:f5:86:
         f1:6c:7c:2e:ec:a4:a7:c2:9c:5f:2e:8b:e1:26:b5:11:04:f7:
         b2:a5:bb:b7:94:a3:bd:f8:78:cb:ec:54:c9:f9:d4:d0:fe:8a:
         64:ef:37:66:a4:c0:d7:d1:0c:16:7a:02:02:0d:28:b9:00:d4:
         fd:e1:bb:33:d2:a1:44:0b:01:54:ca:15:b3:2d:d7:f1:f2:46:
         18:f8:cb:94:69:9e:3b:c1:43:3e:54:fa:28:8c:eb:ca:e9:05:
         b8:bf:48:af:69:8d:03:e7:33:e2:82:41:1f:e9:83:ff:cd:b3:
         5b:21:7b:f7:49:14:d6:df:17:98:20:d8:f6:bc:5a:65:0d:f1:
         87:0d:48:d8:ba:93:99:6d:d0:29:a2:da:d7:53:23:d6:9b:38:
         eb:9d:a8:b9:7e:7a:51:8c:f1:d8:07:2a:13:14:5c:74:f9:a4:
         ff:36:1d:54:bd:7d:7e:d3:12:47:67:dd:85:cb:b4:8f:a8:96:
         01:28:70:26:b5:af:e5:23:cf:c9:46:3b:b4:c8:44:3a:07:bb:
         d9:1d:9d:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDIgjlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYx
OTljMTVlODNhYmZmNTRjNTlhZjhhNjdlMTg0OTVjYjk4OWQ5NTMwHhcNMjMwNjI2
MTg1NjU4WhcNMjUwNjI3MTg1NjU4WjAzMTEwLwYDVQQDEyhiMTg5OWNlMjI0Yzk0
OTYxMTkzMmIxM2RlZGE0NWY0OGRmNjcxMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhu3RLOiRd5Zg+lIDOSexEXZ1SjqvbGdtJtOU5fXu5ggdPdGT
iJtY9ANQtMwdfZQMuS1e7GUTzpSZp3RwR3TGZ9yr8YQOZUx7FCZ8aVwMiPHMNhuO
EW+bH8/cMnwlooEI/2I+O/aVUeJTBlKkW7Pz4VNJ0KCFe3hkS9rrFdxHG50RpJ9Z
bIJbEGOU73VmtrcExgd7vl4s5L/p6PUAo+dA14Q6KuknWPS4Z1l4ESGaQ5/Mi0xz
kgKTEQ9FzUQYX+OEdzwe4DZWbGeJVbQvQz7Jr7a+NYhpc73+ZWy4HzbAcf2b/b6U
+JIwPBIcsPrjaSAAKDlsC5h/iUNLhjtJGhv+uwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFO9Ro8sENCg9hj02wejyVCq7ILyhMB8GA1UdIwQYMBaAFEKzdEAu1YiGTe2P
am12P99njN6TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjE5OWMx
NWU4M2FiZmY1NGM1OWFmOGE2N2UxODQ5NWNiOTg5ZDk1My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjdjOGU2NTUtYTY1Yi00ODBlLTkyM2YtYTQ3MDFl
NTgzOTczL2IxODk5Y2UyMjRjOTQ5NjExOTMyYjEzZGVkYTQ1ZjQ4ZGY2NzEwYzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yN2M4ZTY1NS1hNjViLTQ4MGUtOTIzZi1hNDcw
MWU1ODM5NzMvZjE5OWMxNWU4M2FiZmY1NGM1OWFmOGE2N2UxODQ5NWNiOTg5ZDk1
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEA75wIDANBAIAAjAHAwUAKAOUwDANBgkqhkiG9w0BAQsFAAOC
AQEATaTCclohDLsIX3HvhYLy7UnO5fp6yO8dNWFW60Mu0Imfx6B4f2Iq2x8Pkxdk
wjG3lnF/VvWG8Wx8Luykp8KcXy6L4Sa1EQT3sqW7t5Sjvfh4y+xUyfnU0P6KZO83
ZqTA19EMFnoCAg0ouQDU/eG7M9KhRAsBVMoVsy3X8fJGGPjLlGmeO8FDPlT6KIzr
yukFuL9Ir2mNA+cz4oJBH+mD/82zWyF790kU1t8XmCDY9rxaZQ3xhw1I2LqTmW3Q
KaLa11Mj1ps4652ouX56UYzx2AcqExRcdPmk/zYdVL19ftMSR2fdhcu0j6iWAShw
JrWv5SPPyUY7tMhEOge72R2dxA==
-----END CERTIFICATE-----