Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ac43a48-a247-4c0d-9771-a461ba45d436/b1c836b0f14cf349cc9cc52671494481b067bb04.roa
File:                     b1c836b0f14cf349cc9cc52671494481b067bb04.roa (raw, json)
Hash identifier:          /Ok49wyVBXioxM/prjShG2BtK2MIM9byEB3GyZPqvJ4=
Subject key identifier:   73:90:C8:01:F1:7B:4F:0A:6E:BE:77:16:00:0D:26:41:39:54:E6:E3
Certificate issuer:       /CN=b09868b14b6cbc7138aa221c912f82b36b5e7481
Certificate serial:       06F4F7
Authority key identifier: 60:40:2F:A3:29:4F:49:0A:B0:82:95:A3:0B:5E:7F:61:02:93:F0:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b09868b14b6cbc7138aa221c912f82b36b5e7481.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3ac43a48-a247-4c0d-9771-a461ba45d436/b1c836b0f14cf349cc9cc52671494481b067bb04.roa
Signing time:             Wed 24 Mar 2021 14:36:22 +0000
ROA not before:           Wed 24 Mar 2021 14:36:22 +0000
ROA not after:            Tue 24 Mar 2026 14:36:22 +0000
asID:                     270031
IP address blocks:        186.194.160.0/22 maxlen: 22
                          2803:85e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455927 (0x6f4f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b09868b14b6cbc7138aa221c912f82b36b5e7481
        Validity
            Not Before: Mar 24 14:36:22 2021 GMT
            Not After : Mar 24 14:36:22 2026 GMT
        Subject: CN=b1c836b0f14cf349cc9cc52671494481b067bb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:95:30:a2:76:38:66:fa:2e:09:18:af:7b:
                    4f:56:40:aa:7c:ff:75:02:36:62:dc:42:d4:cb:81:
                    1a:14:f8:d6:bb:e3:c8:eb:f7:e0:7b:3e:ed:d7:45:
                    fe:8d:01:ef:bc:89:75:4d:95:2c:1a:49:7d:2c:f3:
                    66:fb:49:89:a1:6b:0d:75:af:6c:26:41:9e:9b:89:
                    da:5c:c9:91:dd:9d:e9:62:75:dd:70:04:db:07:46:
                    f6:f6:7d:42:aa:a0:53:f3:4a:15:ab:f6:21:33:93:
                    8e:40:f0:3f:b5:6c:15:23:74:2b:cb:87:6d:d8:75:
                    ee:5f:f5:10:a2:34:15:94:70:b9:77:c5:f7:d7:b7:
                    47:ad:ec:c0:25:77:41:63:e6:9c:03:e0:02:90:e9:
                    25:41:36:e1:6e:8e:9c:82:90:7b:9c:ec:9c:1f:5c:
                    7a:cf:62:c4:70:1f:af:5a:45:49:c0:0b:f0:40:29:
                    01:95:8f:44:59:b5:a2:c8:4d:df:75:67:7f:49:89:
                    8e:8d:31:ae:e8:a2:2f:05:0c:eb:17:97:cc:89:e3:
                    c5:f9:69:f6:16:df:46:b6:4d:03:37:9c:f4:4c:34:
                    bd:ff:be:73:4f:29:2a:b3:ae:4e:60:89:45:82:f3:
                    14:f0:fd:ec:07:40:76:32:c6:ef:75:91:a0:79:42:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:90:C8:01:F1:7B:4F:0A:6E:BE:77:16:00:0D:26:41:39:54:E6:E3
            X509v3 Authority Key Identifier:
                keyid:60:40:2F:A3:29:4F:49:0A:B0:82:95:A3:0B:5E:7F:61:02:93:F0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b09868b14b6cbc7138aa221c912f82b36b5e7481.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ac43a48-a247-4c0d-9771-a461ba45d436/b1c836b0f14cf349cc9cc52671494481b067bb04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3ac43a48-a247-4c0d-9771-a461ba45d436/b09868b14b6cbc7138aa221c912f82b36b5e7481.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.160.0/22
                IPv6:
                  2803:85e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:72:2d:b0:b9:1c:9a:3c:b2:b8:3d:6b:d7:1d:c1:17:f1:26:
         1d:d2:84:a3:79:a5:0e:72:91:05:3d:b3:5e:9f:21:cb:e0:a5:
         0a:61:44:24:1d:b6:04:99:34:1e:3e:f0:b8:9a:f6:25:f9:3c:
         41:2b:12:a2:94:ae:d9:16:59:dd:80:93:46:e1:a4:c3:23:20:
         d8:e6:c1:ce:f1:b2:40:0a:89:3e:0d:dd:cb:59:c0:02:3f:86:
         44:ca:15:8a:58:ef:1a:91:d0:7a:cb:32:7b:2d:5e:3d:07:58:
         c7:4f:cb:56:e7:a2:22:c3:c7:bf:c4:c6:93:1a:47:42:59:2c:
         d1:f7:e5:9d:63:4a:36:65:f5:ab:75:86:69:68:97:c5:bc:dc:
         bb:86:ad:2d:8e:8e:77:38:3e:51:fe:49:5b:e5:cc:bc:96:19:
         52:15:ec:a1:82:18:37:1b:13:d0:b0:ca:2e:b7:e6:b3:95:64:
         cd:70:41:68:6d:f3:2f:a7:df:8b:19:7d:90:ea:a5:c4:ed:7b:
         c5:bb:92:3a:81:b6:1e:88:af:bf:6c:32:53:b2:86:e3:24:c3:
         50:77:0c:c5:82:c8:44:4c:71:ea:13:0f:c4:41:7d:c7:23:7f:
         79:54:9c:85:b9:37:41:ea:0b:78:94:88:15:6f:bf:3f:cf:b0:
         73:22:ac:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBvT3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
OTg2OGIxNGI2Y2JjNzEzOGFhMjIxYzkxMmY4MmIzNmI1ZTc0ODEwHhcNMjEwMzI0
MTQzNjIyWhcNMjYwMzI0MTQzNjIyWjAzMTEwLwYDVQQDEyhiMWM4MzZiMGYxNGNm
MzQ5Y2M5Y2M1MjY3MTQ5NDQ4MWIwNjdiYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtoKVMKJ2OGb6LgkYr3tPVkCqfP91AjZi3ELUy4EaFPjWu+PI
6/fgez7t10X+jQHvvIl1TZUsGkl9LPNm+0mJoWsNda9sJkGem4naXMmR3Z3pYnXd
cATbB0b29n1CqqBT80oVq/YhM5OOQPA/tWwVI3Qry4dt2HXuX/UQojQVlHC5d8X3
17dHrezAJXdBY+acA+ACkOklQTbhbo6cgpB7nOycH1x6z2LEcB+vWkVJwAvwQCkB
lY9EWbWiyE3fdWd/SYmOjTGu6KIvBQzrF5fMiePF+Wn2Ft9Gtk0DN5z0TDS9/75z
Tykqs65OYIlFgvMU8P3sB0B2MsbvdZGgeUKJVwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHOQyAHxe08Kbr53FgANJkE5VObjMB8GA1UdIwQYMBaAFGBAL6MpT0kKsIKV
owtef2ECk/BXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjA5ODY4
YjE0YjZjYmM3MTM4YWEyMjFjOTEyZjgyYjM2YjVlNzQ4MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2FjNDNhNDgtYTI0Ny00YzBkLTk3NzEtYTQ2MWJh
NDVkNDM2L2IxYzgzNmIwZjE0Y2YzNDljYzljYzUyNjcxNDk0NDgxYjA2N2JiMDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zYWM0M2E0OC1hMjQ3LTRjMGQtOTc3MS1hNDYx
YmE0NWQ0MzYvYjA5ODY4YjE0YjZjYmM3MTM4YWEyMjFjOTEyZjgyYjM2YjVlNzQ4
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArrCoDANBAIAAjAHAwUAKAOF4DANBgkqhkiG9w0BAQsFAAOC
AQEAdnItsLkcmjyyuD1r1x3BF/EmHdKEo3mlDnKRBT2zXp8hy+ClCmFEJB22BJk0
Hj7wuJr2Jfk8QSsSopSu2RZZ3YCTRuGkwyMg2ObBzvGyQAqJPg3dy1nAAj+GRMoV
iljvGpHQessyey1ePQdYx0/LVueiIsPHv8TGkxpHQlks0fflnWNKNmX1q3WGaWiX
xbzcu4atLY6Odzg+Uf5JW+XMvJYZUhXsoYIYNxsT0LDKLrfms5VkzXBBaG3zL6ff
ixl9kOqlxO17xbuSOoG2Hoivv2wyU7KG4yTDUHcMxYLIRExx6hMPxEF9xyN/eVSc
hbk3QeoLeJSIFW+/P8+wcyKs/A==
-----END CERTIFICATE-----