Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/8ccf0a27aba71fa7efd35053bfbd492500fea313.roa
File:                     8ccf0a27aba71fa7efd35053bfbd492500fea313.roa (raw, json)
Hash identifier:          KVsX/5y7T8xfN5MMuuHRv11aQVQPBSIO02xK3CMB9GQ=
Subject key identifier:   20:79:A5:E8:CD:73:97:CF:F4:FC:61:F1:32:69:40:01:BF:4A:CA:39
Certificate issuer:       /CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
Certificate serial:       CB6F
Authority key identifier: A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/8ccf0a27aba71fa7efd35053bfbd492500fea313.roa
Signing time:             Mon 29 Mar 2021 15:30:12 +0000
ROA not before:           Fri 26 Mar 2021 03:00:00 +0000
ROA not after:            Sun 26 Mar 2023 03:00:00 +0000
asID:                     269905
IP address blocks:        190.112.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52079 (0xcb6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
        Validity
            Not Before: Mar 26 03:00:00 2021 GMT
            Not After : Mar 26 03:00:00 2023 GMT
        Subject: CN=8ccf0a27aba71fa7efd35053bfbd492500fea313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:e8:93:6f:7c:0b:98:f5:2b:ab:07:a7:61:
                    96:72:6c:14:68:f0:18:6d:6a:75:51:18:d8:d3:6b:
                    7b:ea:0e:07:bf:b9:21:bc:2e:f2:f8:d2:2a:78:9b:
                    e4:4f:93:80:89:5f:00:75:46:78:9a:90:60:02:90:
                    5b:0b:e2:6f:3b:fb:ce:65:b9:91:e4:76:dd:92:4a:
                    61:99:7b:00:6f:ad:19:58:08:46:d3:67:db:4b:8f:
                    b8:29:26:a1:91:3d:38:d7:5b:27:0b:a4:c4:78:cd:
                    52:5e:c9:10:55:9d:2c:02:ef:53:b0:e5:c3:f9:3b:
                    ed:cd:4c:b0:36:05:da:63:b8:77:a3:0f:f3:4f:5f:
                    4b:6b:e1:48:3f:3d:8c:15:1b:08:de:e2:8a:9e:0c:
                    35:1a:7b:5b:14:3f:aa:97:d9:1c:01:d3:d3:5b:b3:
                    3f:73:a3:28:75:b5:c8:f7:31:20:30:13:04:60:7e:
                    08:c2:11:f9:5a:b5:e1:6c:25:b6:04:5b:6c:f9:71:
                    33:d8:e0:70:f5:a2:5e:b7:77:bd:84:90:6a:5b:6d:
                    54:0b:32:d4:c0:5d:bc:66:8a:9e:e2:5c:cd:aa:b7:
                    1b:a7:f3:18:7f:9e:52:5d:8b:f8:80:9e:08:da:f8:
                    36:78:9a:d4:05:15:50:9a:cc:53:0c:8d:9b:e0:76:
                    b2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:79:A5:E8:CD:73:97:CF:F4:FC:61:F1:32:69:40:01:BF:4A:CA:39
            X509v3 Authority Key Identifier:
                keyid:A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/8ccf0a27aba71fa7efd35053bfbd492500fea313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:92:d1:4f:e8:da:51:a2:4d:85:8a:32:00:9b:7f:22:e0:d2:
         bc:6b:70:8b:f2:12:77:59:58:ae:1d:b1:8f:2e:81:96:04:3f:
         0f:0c:42:7b:43:f8:56:4a:dc:73:94:f9:61:42:18:50:77:31:
         5d:99:f7:60:45:60:9f:13:9a:0b:08:8d:91:1a:a4:7a:97:62:
         7b:f3:2c:e4:a9:84:a1:b1:f6:00:fd:6c:f2:cb:b1:7f:15:5a:
         7e:48:57:e5:e5:aa:75:4c:75:a5:36:35:f3:84:e9:cb:b7:7e:
         13:9b:1b:22:d5:48:4b:98:5e:b5:91:c3:33:99:2f:41:e5:a4:
         e5:6f:c9:23:b5:16:68:97:2e:12:68:7c:55:a6:fb:93:33:49:
         54:24:93:a8:85:7c:87:af:52:2f:1c:09:94:37:73:55:56:66:
         e3:06:82:e0:19:58:f4:7c:0e:92:c0:ed:0a:1d:fe:a6:c9:8d:
         5e:27:f6:ea:47:16:60:4a:9f:58:9f:8a:00:b5:7a:60:8c:a7:
         eb:86:de:ff:dc:a4:4f:5c:0c:c5:a3:0f:c3:a7:10:75:5d:c1:
         a2:21:16:91:ee:c1:15:f1:35:62:d5:67:0a:f2:27:c5:3d:93:
         58:dd:52:52:93:c4:94:e4:a3:29:80:e4:a6:2f:27:68:20:d5:
         78:d1:fe:04
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAMtvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU5
NmFkMDc2MGZlNDFkZmE1N2IwZGVkMzgyZTU0ZDRhOWY4Y2JhMjUwHhcNMjEwMzI2
MDMwMDAwWhcNMjMwMzI2MDMwMDAwWjAzMTEwLwYDVQQDEyg4Y2NmMGEyN2FiYTcx
ZmE3ZWZkMzUwNTNiZmJkNDkyNTAwZmVhMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj9fok298C5j1K6sHp2GWcmwUaPAYbWp1URjY02t76g4Hv7kh
vC7y+NIqeJvkT5OAiV8AdUZ4mpBgApBbC+JvO/vOZbmR5HbdkkphmXsAb60ZWAhG
02fbS4+4KSahkT0411snC6TEeM1SXskQVZ0sAu9TsOXD+TvtzUywNgXaY7h3ow/z
T19La+FIPz2MFRsI3uKKngw1GntbFD+ql9kcAdPTW7M/c6ModbXI9zEgMBMEYH4I
whH5WrXhbCW2BFts+XEz2OBw9aJet3e9hJBqW21UCzLUwF28Zoqe4lzNqrcbp/MY
f55SXYv4gJ4I2vg2eJrUBRVQmsxTDI2b4HayhQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCB5pejNc5fP9Pxh8TJpQAG/Sso5MB8GA1UdIwQYMBaAFKjXryeeX6sazAU7
CmIWTt7IJPqXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTk2YWQw
NzYwZmU0MWRmYTU3YjBkZWQzODJlNTRkNGE5ZjhjYmEyNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDAwMWUxN2QtYTI1ZS00ZTliLTg4M2YtYzYxNjRh
MjQ5MzU3LzhjY2YwYTI3YWJhNzFmYTdlZmQzNTA1M2JmYmQ0OTI1MDBmZWEzMTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MDAxZTE3ZC1hMjVlLTRlOWItODgzZi1jNjE2
NGEyNDkzNTcvZTk2YWQwNzYwZmU0MWRmYTU3YjBkZWQzODJlNTRkNGE5ZjhjYmEy
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5wqTANBgkqhkiG9w0BAQsFAAOCAQEAiZLRT+jaUaJNhYoy
AJt/IuDSvGtwi/ISd1lYrh2xjy6BlgQ/DwxCe0P4Vkrcc5T5YUIYUHcxXZn3YEVg
nxOaCwiNkRqkepdie/Ms5KmEobH2AP1s8suxfxVafkhX5eWqdUx1pTY184Tpy7d+
E5sbItVIS5hetZHDM5kvQeWk5W/JI7UWaJcuEmh8Vab7kzNJVCSTqIV8h69SLxwJ
lDdzVVZm4waC4BlY9HwOksDtCh3+psmNXif26kcWYEqfWJ+KALV6YIyn64be/9yk
T1wMxaMPw6cQdV3BoiEWke7BFfE1YtVnCvInxT2TWN1SUpPElOSjKYDkpi8naCDV
eNH+BA==
-----END CERTIFICATE-----