Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2b030d66-8387-4c3a-8d3f-84ab0449b6f0/dca148592d6dc0c6680b17055fa72c1d236739ef.roa
File:                     dca148592d6dc0c6680b17055fa72c1d236739ef.roa (raw, json)
Hash identifier:          fDybuE0g9TxfOExP84NrKVxY1OKJUBk25WfVaGLuCRU=
Subject key identifier:   F0:D9:1B:FB:C3:9E:01:92:DD:38:C9:36:82:EE:2F:85:1F:3A:71:B9
Certificate issuer:       /CN=bb9edf01828f3707ed8a3a1dda7972aaab536846
Certificate serial:       04E9B7
Authority key identifier: BB:54:12:68:D5:9B:3B:F5:EC:27:82:89:1A:37:96:7D:C3:F7:49:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb9edf01828f3707ed8a3a1dda7972aaab536846.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2b030d66-8387-4c3a-8d3f-84ab0449b6f0/dca148592d6dc0c6680b17055fa72c1d236739ef.roa
Signing time:             Thu 06 Jan 2022 17:50:43 +0000
ROA not before:           Wed 16 Jun 2021 03:00:00 +0000
ROA not after:            Thu 16 Jun 2033 03:00:00 +0000
asID:                     264619
IP address blocks:        143.202.96.0/22 maxlen: 24
                          2803:7e40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321975 (0x4e9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb9edf01828f3707ed8a3a1dda7972aaab536846
        Validity
            Not Before: Jun 16 03:00:00 2021 GMT
            Not After : Jun 16 03:00:00 2033 GMT
        Subject: CN=dca148592d6dc0c6680b17055fa72c1d236739ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d3:6c:43:b4:48:74:c0:b8:5a:ac:47:d1:d7:
                    ea:b7:05:bd:ea:08:3e:51:c3:b6:80:e9:de:6f:0f:
                    95:06:86:50:26:02:28:9a:90:63:c6:75:2d:23:c8:
                    c6:b6:4c:d2:c8:4d:60:0b:50:7d:cf:eb:80:97:30:
                    f9:32:96:47:d1:dd:30:40:ed:c6:86:09:54:83:e9:
                    9f:23:14:1e:ef:f0:90:e6:db:7c:42:b8:a3:0c:34:
                    b5:0b:62:5e:83:9d:c2:d4:49:9e:82:6f:84:d5:b3:
                    65:2f:8d:a9:7a:c7:20:79:96:75:43:12:fd:07:d5:
                    c3:8c:14:43:66:65:ee:43:7b:5e:cc:63:6d:8d:e6:
                    a2:59:dd:73:e3:48:c7:59:a5:87:de:7e:89:b3:c8:
                    82:b7:ae:08:73:6e:c4:e7:b5:a4:04:4a:3e:29:21:
                    a9:75:25:19:43:ba:0b:65:ab:12:d4:0e:0f:8d:a5:
                    ca:12:32:02:32:f3:5c:68:dd:33:a2:a0:0c:23:40:
                    72:04:bd:72:32:cf:aa:b6:33:d0:24:a0:56:02:7d:
                    82:b1:7d:8b:a8:01:f3:a7:99:d6:1c:26:db:e1:7e:
                    b1:74:47:6b:5a:4d:7b:d2:4f:60:1e:c9:02:20:e5:
                    23:05:41:12:49:c3:75:b7:8d:1c:de:a4:cd:b8:7c:
                    80:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D9:1B:FB:C3:9E:01:92:DD:38:C9:36:82:EE:2F:85:1F:3A:71:B9
            X509v3 Authority Key Identifier:
                keyid:BB:54:12:68:D5:9B:3B:F5:EC:27:82:89:1A:37:96:7D:C3:F7:49:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb9edf01828f3707ed8a3a1dda7972aaab536846.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2b030d66-8387-4c3a-8d3f-84ab0449b6f0/dca148592d6dc0c6680b17055fa72c1d236739ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2b030d66-8387-4c3a-8d3f-84ab0449b6f0/bb9edf01828f3707ed8a3a1dda7972aaab536846.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.96.0/22
                IPv6:
                  2803:7e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:9c:54:79:6d:db:62:bc:df:2a:f3:a8:fe:3a:f7:72:f0:fe:
         19:9e:5c:1c:f9:37:d4:4a:6d:db:d8:3e:55:2e:90:78:4e:80:
         80:64:8f:ab:05:6f:52:cd:43:28:66:98:3b:f4:88:b2:b8:4b:
         ad:04:fa:b1:0a:cc:97:0b:3e:4f:95:33:6c:aa:d3:68:bf:99:
         ad:30:fd:17:78:a5:64:47:cb:1c:da:5b:5d:fe:5a:e8:2b:40:
         19:d6:30:b0:7e:3b:0d:ac:ad:e5:d2:0d:20:1e:dc:e5:3b:6c:
         18:aa:e3:0a:c8:37:a2:bf:20:05:65:58:ed:87:54:60:75:e7:
         4a:30:b2:b6:90:3e:3c:4a:be:fe:90:e0:2d:96:5c:95:5f:2a:
         49:e6:c0:d4:b3:27:41:10:e9:3d:dd:86:46:ba:a6:6f:bc:c6:
         90:8c:62:4d:7c:0d:16:6a:6a:c9:1b:e2:57:c7:0a:40:aa:a5:
         8e:ab:91:c5:f7:b1:61:0c:a6:32:13:55:3a:f1:00:a6:1d:83:
         13:ba:a6:ef:0b:2c:47:00:c2:e7:dc:e6:9c:30:44:55:f4:1d:
         47:1d:35:62:ce:40:03:6d:9b:da:df:17:29:7b:e2:60:97:ab:
         e0:86:0b:50:c4:a4:7c:be:ab:93:e0:1b:9c:37:47:9f:79:09:
         e1:b8:f3:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBOm3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
OWVkZjAxODI4ZjM3MDdlZDhhM2ExZGRhNzk3MmFhYWI1MzY4NDYwHhcNMjEwNjE2
MDMwMDAwWhcNMzMwNjE2MDMwMDAwWjAzMTEwLwYDVQQDEyhkY2ExNDg1OTJkNmRj
MGM2NjgwYjE3MDU1ZmE3MmMxZDIzNjczOWVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjNNsQ7RIdMC4WqxH0dfqtwW96gg+UcO2gOnebw+VBoZQJgIo
mpBjxnUtI8jGtkzSyE1gC1B9z+uAlzD5MpZH0d0wQO3GhglUg+mfIxQe7/CQ5tt8
QrijDDS1C2Jeg53C1Emegm+E1bNlL42pescgeZZ1QxL9B9XDjBRDZmXuQ3tezGNt
jeaiWd1z40jHWaWH3n6Js8iCt64Ic27E57WkBEo+KSGpdSUZQ7oLZasS1A4PjaXK
EjICMvNcaN0zoqAMI0ByBL1yMs+qtjPQJKBWAn2CsX2LqAHzp5nWHCbb4X6xdEdr
Wk170k9gHskCIOUjBUESScN1t40c3qTNuHyABwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFPDZG/vDngGS3TjJNoLuL4UfOnG5MB8GA1UdIwQYMBaAFLtUEmjVmzv17CeC
iRo3ln3D90nvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmI5ZWRm
MDE4MjhmMzcwN2VkOGEzYTFkZGE3OTcyYWFhYjUzNjg0Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmIwMzBkNjYtODM4Ny00YzNhLThkM2YtODRhYjA0
NDliNmYwL2RjYTE0ODU5MmQ2ZGMwYzY2ODBiMTcwNTVmYTcyYzFkMjM2NzM5ZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yYjAzMGQ2Ni04Mzg3LTRjM2EtOGQzZi04NGFi
MDQ0OWI2ZjAvYmI5ZWRmMDE4MjhmMzcwN2VkOGEzYTFkZGE3OTcyYWFhYjUzNjg0
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAo/KYDANBAIAAjAHAwUAKAN+QDANBgkqhkiG9w0BAQsFAAOC
AQEAXZxUeW3bYrzfKvOo/jr3cvD+GZ5cHPk31Ept29g+VS6QeE6AgGSPqwVvUs1D
KGaYO/SIsrhLrQT6sQrMlws+T5UzbKrTaL+ZrTD9F3ilZEfLHNpbXf5a6CtAGdYw
sH47Dayt5dINIB7c5TtsGKrjCsg3or8gBWVY7YdUYHXnSjCytpA+PEq+/pDgLZZc
lV8qSebA1LMnQRDpPd2GRrqmb7zGkIxiTXwNFmpqyRviV8cKQKqljquRxfexYQym
MhNVOvEAph2DE7qm7wssRwDC59zmnDBEVfQdRx01Ys5AA22b2t8XKXviYJer4IYL
UMSkfL6rk+AbnDdHn3kJ4bjzKA==
-----END CERTIFICATE-----