Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48dbf77e-a7fc-4433-b8bd-3c44f37d9487/bc9826622cf35f61484129c9bf496d6fb095801b.roa
File:                     bc9826622cf35f61484129c9bf496d6fb095801b.roa (raw, json)
Hash identifier:          aqONzmDtzzUOXStTw24t3pj3n0zgE1Tfst/m0BkY0hQ=
Subject key identifier:   26:20:1B:9E:61:03:09:C1:7B:38:60:2F:F4:F1:F7:6A:AE:9F:36:41
Certificate issuer:       /CN=d8af0d6b31af86a23cbbb933871a53ef9af28045
Certificate serial:       0D881D
Authority key identifier: 35:85:69:4C:2B:44:01:DF:77:9A:7A:37:96:4D:25:B4:F7:35:0C:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8af0d6b31af86a23cbbb933871a53ef9af28045.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48dbf77e-a7fc-4433-b8bd-3c44f37d9487/bc9826622cf35f61484129c9bf496d6fb095801b.roa
Signing time:             Wed 24 Mar 2021 14:38:18 +0000
ROA not before:           Wed 24 Mar 2021 14:38:18 +0000
ROA not after:            Tue 24 Mar 2026 14:38:18 +0000
asID:                     12066
IP address blocks:        148.103.0.0/16 maxlen: 24
                          186.120.0.0/17 maxlen: 24
                          186.120.128.0/17 maxlen: 24
                          186.149.0.0/16 maxlen: 24
                          186.150.0.0/16 maxlen: 24
                          190.6.128.0/20 maxlen: 24
                          190.6.144.0/20 maxlen: 24
                          190.94.0.0/19 maxlen: 24
                          190.94.32.0/19 maxlen: 24
                          190.94.64.0/18 maxlen: 24
                          200.42.192.0/19 maxlen: 24
                          200.42.224.0/20 maxlen: 24
                          200.42.240.0/20 maxlen: 23
                          2001:13f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886813 (0xd881d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8af0d6b31af86a23cbbb933871a53ef9af28045
        Validity
            Not Before: Mar 24 14:38:18 2021 GMT
            Not After : Mar 24 14:38:18 2026 GMT
        Subject: CN=bc9826622cf35f61484129c9bf496d6fb095801b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:09:98:d5:4d:03:83:51:18:9a:c0:b0:5f:da:
                    97:52:d5:eb:74:5a:52:6f:c6:ec:c4:ad:e2:3a:f2:
                    c8:69:3a:fe:05:d1:21:96:b8:cb:9b:07:29:cf:25:
                    18:d6:99:f5:69:23:0a:88:29:a4:da:a4:db:69:d8:
                    2e:24:79:1d:d9:29:e2:da:56:12:57:77:87:5b:08:
                    49:fb:02:5b:13:c4:09:23:0a:97:45:2a:ba:dc:aa:
                    3f:7d:21:d3:fa:ab:f1:bf:11:b4:d4:fc:61:ae:13:
                    03:57:69:87:cf:c8:dd:90:01:d9:61:04:a6:49:27:
                    1b:d7:b8:3e:cb:24:2d:03:db:de:ed:e5:35:5a:13:
                    6b:18:9d:b5:cf:c3:a1:66:f1:7f:6d:4a:1a:6d:8f:
                    6c:29:88:b2:9e:2f:f7:ee:65:78:3f:09:4e:cc:0b:
                    8d:41:1d:02:c4:67:40:5f:3c:c6:8b:4e:c0:63:95:
                    d1:0c:95:6b:97:1e:f7:07:47:f1:ee:6a:97:f5:27:
                    20:4a:e6:5f:62:ba:5c:e8:8f:e4:ee:e3:f1:8d:cf:
                    62:97:49:3c:85:c2:93:d3:d6:21:d4:73:4b:e0:f8:
                    63:c5:c3:5d:32:71:ca:49:63:2b:3c:15:6b:a4:43:
                    f7:f3:1f:e8:57:03:00:b3:de:c9:20:4b:5d:68:3c:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:20:1B:9E:61:03:09:C1:7B:38:60:2F:F4:F1:F7:6A:AE:9F:36:41
            X509v3 Authority Key Identifier:
                keyid:35:85:69:4C:2B:44:01:DF:77:9A:7A:37:96:4D:25:B4:F7:35:0C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8af0d6b31af86a23cbbb933871a53ef9af28045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48dbf77e-a7fc-4433-b8bd-3c44f37d9487/bc9826622cf35f61484129c9bf496d6fb095801b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48dbf77e-a7fc-4433-b8bd-3c44f37d9487/d8af0d6b31af86a23cbbb933871a53ef9af28045.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.103.0.0/16
                  186.120.0.0/16
                  186.149.0.0-186.150.255.255
                  190.6.128.0/19
                  190.94.0.0/17
                  200.42.192.0/18
                IPv6:
                  2001:13f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:4d:98:04:cf:bd:a2:98:55:8a:5a:91:45:82:f8:03:56:7f:
         66:63:34:dc:b2:37:0d:f2:04:13:ca:20:12:7b:b3:61:ed:e0:
         d1:c5:2e:9f:9f:83:fd:b4:02:78:b4:5e:b3:6d:63:39:7e:d2:
         96:28:62:02:1c:89:25:90:ad:de:07:8b:ed:41:81:13:78:01:
         82:81:7c:74:e6:9c:83:e8:f1:6f:f9:74:55:d4:f3:f3:88:43:
         a6:7b:e9:fc:01:e2:e6:5f:6f:ac:df:8c:85:1d:42:b8:25:0d:
         08:89:0e:72:59:4c:24:0b:84:ff:7a:84:71:78:5b:81:65:05:
         71:0d:8d:7b:f3:2a:cb:26:b1:a5:b7:08:08:12:55:52:01:7b:
         0d:a3:14:a1:9f:26:94:b3:52:dc:c3:37:59:8d:13:ec:19:43:
         17:a9:03:05:2f:a8:8c:48:59:18:11:70:5c:27:8d:4e:b9:51:
         eb:ec:e7:8f:2d:d1:07:cd:64:79:08:1e:8e:ed:26:26:57:60:
         40:45:4e:c8:a7:9a:42:4d:d0:79:0e:5c:cd:80:08:bf:f1:ab:
         85:95:9d:8c:d2:a0:bb:a3:03:9f:8a:0e:10:fa:00:c3:26:6d:
         94:6d:f7:ee:f1:13:56:ca:e1:fa:97:ff:68:1e:d8:d6:d8:e1:
         05:a3:f6:ae
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIDDYgdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
YWYwZDZiMzFhZjg2YTIzY2JiYjkzMzg3MWE1M2VmOWFmMjgwNDUwHhcNMjEwMzI0
MTQzODE4WhcNMjYwMzI0MTQzODE4WjAzMTEwLwYDVQQDEyhiYzk4MjY2MjJjZjM1
ZjYxNDg0MTI5YzliZjQ5NmQ2ZmIwOTU4MDFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjwmY1U0Dg1EYmsCwX9qXUtXrdFpSb8bsxK3iOvLIaTr+BdEh
lrjLmwcpzyUY1pn1aSMKiCmk2qTbadguJHkd2Sni2lYSV3eHWwhJ+wJbE8QJIwqX
RSq63Ko/fSHT+qvxvxG01PxhrhMDV2mHz8jdkAHZYQSmSScb17g+yyQtA9ve7eU1
WhNrGJ21z8OhZvF/bUoabY9sKYiyni/37mV4PwlOzAuNQR0CxGdAXzzGi07AY5XR
DJVrlx73B0fx7mqX9ScgSuZfYrpc6I/k7uPxjc9il0k8hcKT09Yh1HNL4PhjxcNd
MnHKSWMrPBVrpEP38x/oVwMAs97JIEtdaDyiAwIDAQABo4ICjDCCAogwHQYDVR0O
BBYEFCYgG55hAwnBezhgL/Tx92qunzZBMB8GA1UdIwQYMBaAFDWFaUwrRAHfd5p6
N5ZNJbT3NQx3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDhhZjBk
NmIzMWFmODZhMjNjYmJiOTMzODcxYTUzZWY5YWYyODA0NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDhkYmY3N2UtYTdmYy00NDMzLWI4YmQtM2M0NGYz
N2Q5NDg3L2JjOTgyNjYyMmNmMzVmNjE0ODQxMjljOWJmNDk2ZDZmYjA5NTgwMWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80OGRiZjc3ZS1hN2ZjLTQ0MzMtYjhiZC0zYzQ0
ZjM3ZDk0ODcvZDhhZjBkNmIzMWFmODZhMjNjYmJiOTMzODcxYTUzZWY5YWYyODA0
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBQBggrBgEFBQcBBwEB/wRB
MD8wLgQCAAEwKAMDAJRnAwMAungwCgMDALqVAwMAupYDBAW+BoADBAe+XgADBAbI
KsAwDQQCAAIwBwMFACABE/AwDQYJKoZIhvcNAQELBQADggEBAA5NmATPvaKYVYpa
kUWC+ANWf2ZjNNyyNw3yBBPKIBJ7s2Ht4NHFLp+fg/20Ani0XrNtYzl+0pYoYgIc
iSWQrd4Hi+1BgRN4AYKBfHTmnIPo8W/5dFXU8/OIQ6Z76fwB4uZfb6zfjIUdQrgl
DQiJDnJZTCQLhP96hHF4W4FlBXENjXvzKssmsaW3CAgSVVIBew2jFKGfJpSzUtzD
N1mNE+wZQxepAwUvqIxIWRgRcFwnjU65Uevs548t0QfNZHkIHo7tJiZXYEBFTsin
mkJN0HkOXM2ACL/xq4WVnYzSoLujA5+KDhD6AMMmbZRt9+7xE1bK4fqX/2ge2NbY
4QWj9q4=
-----END CERTIFICATE-----