Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/a98f1ef9da5e6009151b572036320c1805216294.roa
File:                     a98f1ef9da5e6009151b572036320c1805216294.roa (raw, json)
Hash identifier:          6cM45FpIplRNfNTTmnrwi0SQrCncdgctWIdTtSaG7oo=
Subject key identifier:   60:B6:32:E9:6A:32:9D:C9:37:90:4F:70:8D:B9:28:55:A8:AC:D1:D6
Certificate issuer:       /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial:       0DB709
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/a98f1ef9da5e6009151b572036320c1805216294.roa
Signing time:             Wed 24 Mar 2021 14:37:02 +0000
ROA not before:           Wed 24 Mar 2021 14:37:01 +0000
ROA not after:            Tue 24 Mar 2026 14:37:01 +0000
asID:                     20299
IP address blocks:        186.4.0.0/18 maxlen: 24
                          186.32.0.0/18 maxlen: 24
                          186.32.160.0/19 maxlen: 24
                          186.32.192.0/19 maxlen: 24
                          186.176.0.0/17 maxlen: 24
                          186.176.128.0/17 maxlen: 24
                          186.177.0.0/17 maxlen: 24
                          186.177.128.0/18 maxlen: 24
                          2800:860::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898825 (0xdb709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
        Validity
            Not Before: Mar 24 14:37:01 2021 GMT
            Not After : Mar 24 14:37:01 2026 GMT
        Subject: CN=a98f1ef9da5e6009151b572036320c1805216294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:f4:3f:ca:99:e6:18:5f:0c:a1:ea:49:78:
                    e3:02:34:37:47:43:c3:9d:08:1c:1a:20:d5:f8:e8:
                    df:6c:df:25:b2:f6:f3:67:d1:9a:2b:f9:3e:ef:63:
                    64:5b:f5:ce:34:23:46:42:7b:ca:71:2b:13:4c:5f:
                    dd:01:a3:53:68:00:18:c2:d7:81:a9:80:36:fa:3b:
                    fe:3d:da:2f:59:af:ea:f6:c8:2d:1e:12:d6:64:f1:
                    4a:ad:01:6f:91:fc:56:11:79:ec:d2:ae:ca:cb:bd:
                    e0:40:1d:8c:b0:88:7a:a5:fd:74:98:86:8b:c4:be:
                    24:c7:e3:a6:bb:65:e8:da:85:a1:51:32:a1:7b:cb:
                    7b:86:a3:09:08:77:b5:76:4f:b1:e4:03:5a:8d:90:
                    e6:2f:06:14:d9:06:16:a2:e3:15:e5:b2:8c:c6:94:
                    5c:72:87:b9:3f:33:84:b4:f9:89:2a:f7:5b:25:bc:
                    59:9a:11:95:97:6e:fe:dd:4d:2a:98:8c:42:c6:12:
                    82:31:af:29:d5:85:ac:8c:af:90:3f:c6:9e:ea:44:
                    39:25:16:cd:c6:c0:c1:21:c2:e7:e8:f5:50:0f:7a:
                    17:c7:68:49:87:6f:8b:89:db:29:e8:d2:da:85:33:
                    64:b5:c4:de:55:b8:04:f2:8f:bd:8a:90:77:65:43:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B6:32:E9:6A:32:9D:C9:37:90:4F:70:8D:B9:28:55:A8:AC:D1:D6
            X509v3 Authority Key Identifier:
                keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/a98f1ef9da5e6009151b572036320c1805216294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.4.0.0/18
                  186.32.0.0/18
                  186.32.160.0-186.32.223.255
                  186.176.0.0-186.177.191.255
                IPv6:
                  2800:860::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:64:a5:67:0e:ca:f4:37:5a:88:cb:d7:54:2c:c1:63:79:62:
         f8:b6:4b:3b:e8:bc:a4:e6:87:2b:12:76:a8:7b:ef:2f:b1:ab:
         60:f0:89:30:60:5b:6a:32:1a:8d:84:c2:1c:51:0e:55:b2:75:
         d2:1d:f8:4d:a8:88:c4:59:49:61:06:e1:f4:ee:f2:a3:0b:7b:
         07:4f:a2:89:e4:48:14:0f:6e:9a:79:a7:71:80:dd:af:b8:e4:
         ac:31:50:c9:c8:2f:af:6d:ae:98:bd:38:48:ef:4f:a7:7b:35:
         22:96:61:f5:fb:23:7d:34:a2:56:23:7d:a2:dd:45:10:bb:21:
         c3:7a:82:6a:5a:e5:26:0d:42:1e:e2:e2:15:e4:f6:4d:10:76:
         2d:e2:f9:99:45:81:00:e1:3d:b2:53:e7:3c:1b:87:80:a3:2f:
         d8:3d:51:89:00:a5:11:51:3d:d7:3c:4a:3b:05:9d:4a:55:60:
         6a:b2:6d:3c:6b:ab:aa:7e:29:3a:c6:89:dd:2a:da:6a:ab:d8:
         d2:46:52:01:f0:db:6d:0b:b1:65:96:76:e8:7b:ca:76:1c:06:
         f4:32:7e:a8:e6:b2:c8:4b:3b:f8:3d:e4:7b:51:aa:9d:c1:4c:
         83:2e:12:3e:46:90:d1:c1:7f:e9:70:1c:df:1c:ee:ba:30:b1:
         30:be:bf:cb
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIDDbcJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
NTcwMzMwMjNlNzNjNWIxYTUyNGFhNDNmMDU4YmQxZWQ3MmQ0N2YwHhcNMjEwMzI0
MTQzNzAxWhcNMjYwMzI0MTQzNzAxWjAzMTEwLwYDVQQDEyhhOThmMWVmOWRhNWU2
MDA5MTUxYjU3MjAzNjMyMGMxODA1MjE2Mjk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlHb0P8qZ5hhfDKHqSXjjAjQ3R0PDnQgcGiDV+OjfbN8lsvbz
Z9GaK/k+72NkW/XONCNGQnvKcSsTTF/dAaNTaAAYwteBqYA2+jv+PdovWa/q9sgt
HhLWZPFKrQFvkfxWEXns0q7Ky73gQB2MsIh6pf10mIaLxL4kx+Omu2Xo2oWhUTKh
e8t7hqMJCHe1dk+x5ANajZDmLwYU2QYWouMV5bKMxpRccoe5PzOEtPmJKvdbJbxZ
mhGVl27+3U0qmIxCxhKCMa8p1YWsjK+QP8ae6kQ5JRbNxsDBIcLn6PVQD3oXx2hJ
h2+Lidsp6NLahTNktcTeVbgE8o+9ipB3ZUNV8wIDAQABo4ICizCCAocwHQYDVR0O
BBYEFGC2MulqMp3JN5BPcI25KFWorNHWMB8GA1UdIwQYMBaAFJZbxfXCJa1jqwN4
3yKvlBlD27nmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2E1NzAz
MzAyM2U3M2M1YjFhNTI0YWE0M2YwNThiZDFlZDcyZDQ3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzUwYjA2YzctNDQ4Zi00MTI1LTgwY2ItZmMwZDg2
OTU0MmQwL2E5OGYxZWY5ZGE1ZTYwMDkxNTFiNTcyMDM2MzIwYzE4MDUyMTYyOTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNTBiMDZjNy00NDhmLTQxMjUtODBjYi1mYzBk
ODY5NTQyZDAvY2E1NzAzMzAyM2U3M2M1YjFhNTI0YWE0M2YwNThiZDFlZDcyZDQ3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBPBggrBgEFBQcBBwEB/wRA
MD4wLQQCAAEwJwMEBroEAAMEBrogADAMAwQFuiCgAwQFuiDAMAsDAwS6sAMEBrqx
gDANBAIAAjAHAwUAKAAIYDANBgkqhkiG9w0BAQsFAAOCAQEAsmSlZw7K9DdaiMvX
VCzBY3li+LZLO+i8pOaHKxJ2qHvvL7GrYPCJMGBbajIajYTCHFEOVbJ10h34TaiI
xFlJYQbh9O7yowt7B0+iieRIFA9umnmncYDdr7jkrDFQycgvr22umL04SO9Pp3s1
IpZh9fsjfTSiViN9ot1FELshw3qCalrlJg1CHuLiFeT2TRB2LeL5mUWBAOE9slPn
PBuHgKMv2D1RiQClEVE91zxKOwWdSlVgarJtPGurqn4pOsaJ3SraaqvY0kZSAfDb
bQuxZZZ26HvKdhwG9DJ+qOayyEs7+D3ke1GqncFMgy4SPkaQ0cF/6XAc3xzuujCx
ML6/yw==
-----END CERTIFICATE-----