Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/550024e3f3e4c03b736c424551e2dd26e776e0a3.roa
File:                     550024e3f3e4c03b736c424551e2dd26e776e0a3.roa (raw, json)
Hash identifier:          TMrXk8sLGdU7CgX9lQmnqVMs48bVejweHZvYqlVQzBs=
Subject key identifier:   8C:49:19:DF:6A:B8:74:9F:54:31:49:D6:EB:5C:BC:58:9A:C6:2D:5D
Certificate issuer:       /CN=e58627f336cb5c55bc61f9db9ff0b11701078350
Certificate serial:       0D616C
Authority key identifier: 54:22:0C:2A:3E:14:D7:01:16:61:D8:00:FA:1B:79:1A:68:8E:6A:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e58627f336cb5c55bc61f9db9ff0b11701078350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/550024e3f3e4c03b736c424551e2dd26e776e0a3.roa
Signing time:             Tue 30 Mar 2021 10:27:06 +0000
ROA not before:           Tue 30 Mar 2021 03:00:00 +0000
ROA not after:            Thu 30 Mar 2023 03:00:00 +0000
asID:                     52389
IP address blocks:        190.123.16.0/22 maxlen: 24
                          2803:1600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876908 (0xd616c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58627f336cb5c55bc61f9db9ff0b11701078350
        Validity
            Not Before: Mar 30 03:00:00 2021 GMT
            Not After : Mar 30 03:00:00 2023 GMT
        Subject: CN=550024e3f3e4c03b736c424551e2dd26e776e0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:22:1c:e0:2b:cf:34:86:f9:af:71:5d:e7:
                    23:6b:77:cf:3d:e9:11:97:3b:ef:7d:8f:15:98:a8:
                    c5:8a:20:9d:cf:56:d0:06:23:27:56:b3:3f:51:29:
                    1f:20:11:87:ed:6e:1c:40:2b:52:1a:50:b6:9d:35:
                    67:4a:ac:e7:81:2f:be:6b:61:41:86:be:59:57:4d:
                    61:19:c7:c0:31:71:84:85:51:42:d3:ea:27:f3:2f:
                    69:b3:d0:16:f5:a5:d3:a1:b9:69:b6:c4:71:05:d2:
                    a2:98:39:f4:5e:32:2e:50:34:b9:5a:1f:72:96:26:
                    93:8c:98:f5:c5:24:3e:3b:0d:0b:b8:ed:20:57:68:
                    00:c6:50:95:1e:2e:8d:0f:d6:a5:54:cc:e2:fd:d6:
                    0d:6a:cf:d0:f7:b7:d7:c9:02:8a:95:c7:3b:8b:bd:
                    7d:80:05:37:f8:23:69:7f:b1:69:cf:41:f6:0f:2d:
                    d9:a1:b0:0c:29:9a:f8:55:19:5e:17:39:b2:32:78:
                    11:02:a6:14:4e:86:22:8d:f6:f0:f3:18:47:ea:52:
                    ff:36:87:9d:45:03:1f:ab:9c:28:2d:46:93:f9:3c:
                    93:3c:28:88:f3:27:8e:da:a4:33:b5:63:21:da:5f:
                    e5:36:6e:26:ad:05:a5:b4:1c:fd:24:83:04:dc:e5:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:49:19:DF:6A:B8:74:9F:54:31:49:D6:EB:5C:BC:58:9A:C6:2D:5D
            X509v3 Authority Key Identifier:
                keyid:54:22:0C:2A:3E:14:D7:01:16:61:D8:00:FA:1B:79:1A:68:8E:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e58627f336cb5c55bc61f9db9ff0b11701078350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/550024e3f3e4c03b736c424551e2dd26e776e0a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/e58627f336cb5c55bc61f9db9ff0b11701078350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.16.0/22
                IPv6:
                  2803:1600::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:16:02:03:b2:01:f2:d2:bd:c9:73:a7:7b:97:8a:0e:c3:b9:
         c7:fd:f2:ec:88:1a:fe:8b:34:bf:8b:04:1a:07:cb:2c:72:0b:
         0d:65:81:1e:5b:d5:9b:5b:83:b4:0a:55:8d:e4:6e:2c:76:bb:
         67:6f:fc:f5:ad:7f:af:f7:7e:30:4f:5c:69:ce:13:dc:1b:b3:
         df:24:fd:6b:c6:e1:f0:a3:5b:c6:1a:3e:ad:00:92:29:e3:d7:
         e3:1b:fa:ea:4e:7e:88:89:47:71:5c:dc:c6:4a:23:0a:86:98:
         58:b8:bb:5e:84:b9:bf:5e:c7:ac:89:cf:c2:60:f6:2f:59:8b:
         58:41:a8:dd:28:2b:a3:ac:3d:7b:11:d2:11:50:d4:8f:f6:5e:
         f2:c0:6e:44:5a:5b:18:8e:f0:01:9f:3f:02:fc:48:ce:55:71:
         10:dd:74:67:a5:fa:9c:a2:30:d2:6c:da:0c:15:1b:e9:97:e9:
         f4:a1:1e:65:5f:2c:dc:fc:be:1c:b2:fb:ad:b6:d1:3b:4e:8e:
         7e:07:12:3e:76:c8:6d:3b:99:e9:19:d4:d2:c1:eb:c9:4e:29:
         90:20:e1:f6:17:c7:23:2d:08:36:35:07:69:c7:82:8b:0b:0d:
         9b:90:a5:ac:6a:d5:0b:9d:f6:04:84:1e:dd:b3:69:30:5d:96:
         37:e2:2a:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDWFsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
ODYyN2YzMzZjYjVjNTViYzYxZjlkYjlmZjBiMTE3MDEwNzgzNTAwHhcNMjEwMzMw
MDMwMDAwWhcNMjMwMzMwMDMwMDAwWjAzMTEwLwYDVQQDEyg1NTAwMjRlM2YzZTRj
MDNiNzM2YzQyNDU1MWUyZGQyNmU3NzZlMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1RQiHOArzzSG+a9xXecja3fPPekRlzvvfY8VmKjFiiCdz1bQ
BiMnVrM/USkfIBGH7W4cQCtSGlC2nTVnSqzngS++a2FBhr5ZV01hGcfAMXGEhVFC
0+on8y9ps9AW9aXToblptsRxBdKimDn0XjIuUDS5Wh9yliaTjJj1xSQ+Ow0LuO0g
V2gAxlCVHi6ND9alVMzi/dYNas/Q97fXyQKKlcc7i719gAU3+CNpf7Fpz0H2Dy3Z
obAMKZr4VRleFzmyMngRAqYUToYijfbw8xhH6lL/NoedRQMfq5woLUaT+TyTPCiI
8yeO2qQztWMh2l/lNm4mrQWltBz9JIME3OXl5wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFIxJGd9quHSfVDFJ1utcvFiaxi1dMB8GA1UdIwQYMBaAFFQiDCo+FNcBFmHY
APobeRpojmreMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTU4NjI3
ZjMzNmNiNWM1NWJjNjFmOWRiOWZmMGIxMTcwMTA3ODM1MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzZjZDI1NjMtMzQ5OC00OTg5LWJmMDctMWE0NWFk
ZGExYWYxLzU1MDAyNGUzZjNlNGMwM2I3MzZjNDI0NTUxZTJkZDI2ZTc3NmUwYTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNmNkMjU2My0zNDk4LTQ5ODktYmYwNy0xYTQ1
YWRkYTFhZjEvZTU4NjI3ZjMzNmNiNWM1NWJjNjFmOWRiOWZmMGIxMTcwMTA3ODM1
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr57EDANBAIAAjAHAwUAKAMWADANBgkqhkiG9w0BAQsFAAOC
AQEAdRYCA7IB8tK9yXOne5eKDsO5x/3y7Iga/os0v4sEGgfLLHILDWWBHlvVm1uD
tApVjeRuLHa7Z2/89a1/r/d+ME9cac4T3Buz3yT9a8bh8KNbxho+rQCSKePX4xv6
6k5+iIlHcVzcxkojCoaYWLi7XoS5v17HrInPwmD2L1mLWEGo3Sgro6w9exHSEVDU
j/Ze8sBuRFpbGI7wAZ8/AvxIzlVxEN10Z6X6nKIw0mzaDBUb6Zfp9KEeZV8s3Py+
HLL7rbbRO06OfgcSPnbIbTuZ6RnU0sHryU4pkCDh9hfHIy0INjUHaceCiwsNm5Cl
rGrVC532BIQe3bNpMF2WN+IqDw==
-----END CERTIFICATE-----