Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/b65bf1e6a2044e53772ca6a1672176fa08b248d1.roa
File:                     b65bf1e6a2044e53772ca6a1672176fa08b248d1.roa (raw, json)
Hash identifier:          QZt/MJnEQSbBaqayeDyNlHNlstBN2Rtc6z1bef8jHX8=
Subject key identifier:   A1:97:49:43:12:AD:F4:A1:82:4A:66:D9:8E:14:B4:F8:9D:0F:B4:BE
Certificate issuer:       /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial:       0D439B
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/b65bf1e6a2044e53772ca6a1672176fa08b248d1.roa
Signing time:             Wed 24 Mar 2021 14:47:21 +0000
ROA not before:           Wed 24 Mar 2021 14:47:21 +0000
ROA not after:            Tue 24 Mar 2026 14:47:21 +0000
asID:                     264731
IP address blocks:        186.167.244.0/23 maxlen: 23
                          2800:937::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869275 (0xd439b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
        Validity
            Not Before: Mar 24 14:47:21 2021 GMT
            Not After : Mar 24 14:47:21 2026 GMT
        Subject: CN=b65bf1e6a2044e53772ca6a1672176fa08b248d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a2:84:8d:06:f6:5b:ea:83:4a:88:5e:49:00:
                    bb:63:29:fa:ce:e3:61:44:45:49:22:7e:c1:19:bb:
                    64:4a:ea:b2:53:5b:c5:39:6a:31:83:21:21:50:98:
                    29:f9:14:fa:7e:32:25:dd:5f:d0:2d:b5:3f:89:9b:
                    08:5c:1a:f0:0d:db:aa:5f:94:66:f8:cc:b6:f3:84:
                    57:15:55:ec:9b:cc:e3:3d:8a:5f:d4:d0:6c:25:d7:
                    45:b9:c1:cc:2f:d4:15:19:4e:d3:a5:5d:1a:cf:d0:
                    f6:1a:01:14:5e:2e:33:51:2d:30:5d:5d:26:f4:17:
                    79:5c:03:ca:c1:de:51:51:0c:0e:6a:6e:bd:88:db:
                    48:45:d6:da:67:52:2c:93:53:3e:5b:29:09:6c:ea:
                    fb:b1:4e:e9:a3:4f:66:49:dc:a2:73:30:87:fc:dc:
                    0d:b7:80:25:20:45:5e:e5:8a:8b:a8:a5:46:47:f9:
                    f7:dd:51:42:6b:7f:95:63:90:0c:9f:cf:a2:de:f1:
                    7e:e5:02:39:e4:6c:f0:fc:9c:be:48:de:38:99:0b:
                    0b:ae:0a:9b:07:a0:7e:f5:f1:66:28:01:04:83:e1:
                    5a:87:b2:b0:22:32:22:e2:6c:10:1c:1b:a8:4c:4b:
                    a9:1d:57:03:51:98:9d:fc:4e:e0:ac:16:94:c9:ab:
                    d3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:97:49:43:12:AD:F4:A1:82:4A:66:D9:8E:14:B4:F8:9D:0F:B4:BE
            X509v3 Authority Key Identifier:
                keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/b65bf1e6a2044e53772ca6a1672176fa08b248d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.244.0/23
                IPv6:
                  2800:937::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:37:97:45:d4:90:09:cf:d3:ba:6e:6d:6a:f1:c1:80:f9:
         31:fb:5e:4d:8d:57:14:cd:b2:58:24:53:84:b3:96:2c:6c:45:
         c3:b5:26:d6:6a:f0:a2:9d:94:d8:5a:40:87:24:67:62:db:94:
         e8:b7:95:47:c8:f0:f0:cc:40:e8:90:92:ab:5b:c7:76:67:25:
         ab:f7:db:5f:6a:6a:d9:d2:52:b0:24:f1:a8:88:ce:fe:4e:74:
         b5:02:6d:91:f7:77:2e:75:32:8b:18:42:54:68:e5:8a:20:b0:
         58:4d:69:14:68:c6:a2:e3:dc:fd:7f:e9:ef:30:9f:64:43:8d:
         29:39:ce:44:ec:75:56:20:6c:7f:d5:69:8f:3d:99:ce:16:2d:
         72:86:ed:69:a3:bb:84:4e:c5:10:1b:9f:89:bf:fd:75:d0:f1:
         1e:18:22:71:5d:da:89:cb:6e:77:de:ad:5e:6b:e5:a1:3d:5a:
         e5:a8:ef:b1:36:80:e5:08:57:b2:87:b5:41:e5:d0:a8:9f:9a:
         4c:03:2a:af:a7:ed:01:0a:0d:f3:fd:ea:f2:b0:d8:41:87:d4:
         3e:28:b2:40:cb:06:8c:a4:65:46:d9:fc:9b:dd:6d:40:06:b3:
         34:f8:e9:69:10:d7:b9:2a:e7:53:aa:a5:45:23:c3:56:bb:f5:
         06:bd:60:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDUObMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk2
ZmJjMWI4YzU0MmY5Mzg0ZjlhMjAwNGU2NmE2MTA4MDI0OGNkYzYwHhcNMjEwMzI0
MTQ0NzIxWhcNMjYwMzI0MTQ0NzIxWjAzMTEwLwYDVQQDEyhiNjViZjFlNmEyMDQ0
ZTUzNzcyY2E2YTE2NzIxNzZmYTA4YjI0OGQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiaKEjQb2W+qDSoheSQC7Yyn6zuNhREVJIn7BGbtkSuqyU1vF
OWoxgyEhUJgp+RT6fjIl3V/QLbU/iZsIXBrwDduqX5Rm+My284RXFVXsm8zjPYpf
1NBsJddFucHML9QVGU7TpV0az9D2GgEUXi4zUS0wXV0m9Bd5XAPKwd5RUQwOam69
iNtIRdbaZ1Isk1M+WykJbOr7sU7po09mSdyiczCH/NwNt4AlIEVe5YqLqKVGR/n3
3VFCa3+VY5AMn8+i3vF+5QI55Gzw/Jy+SN44mQsLrgqbB6B+9fFmKAEEg+Fah7Kw
IjIi4mwQHBuoTEupHVcDUZid/E7grBaUyavT/QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFKGXSUMSrfShgkpm2Y4UtPidD7S+MB8GA1UdIwQYMBaAFAgTOQmsgsKNsTeP
clNCyZ+fjVPiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTZmYmMx
YjhjNTQyZjkzODRmOWEyMDA0ZTY2YTYxMDgwMjQ4Y2RjNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTVmOTllMTAtNzhhZi00MmY2LWE3YTUtMDg5MmVm
MjJkMWQ4L2I2NWJmMWU2YTIwNDRlNTM3NzJjYTZhMTY3MjE3NmZhMDhiMjQ4ZDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NWY5OWUxMC03OGFmLTQyZjYtYTdhNS0wODky
ZWYyMmQxZDgvOTZmYmMxYjhjNTQyZjkzODRmOWEyMDA0ZTY2YTYxMDgwMjQ4Y2Rj
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAbqn9DANBAIAAjAHAwUAKAAJNzANBgkqhkiG9w0BAQsFAAOC
AQEAGgo3l0XUkAnP07pubWrxwYD5MfteTY1XFM2yWCRThLOWLGxFw7Um1mrwop2U
2FpAhyRnYtuU6LeVR8jw8MxA6JCSq1vHdmclq/fbX2pq2dJSsCTxqIjO/k50tQJt
kfd3LnUyixhCVGjliiCwWE1pFGjGouPc/X/p7zCfZEONKTnOROx1ViBsf9Vpjz2Z
zhYtcobtaaO7hE7FEBufib/9ddDxHhgicV3aictud96tXmvloT1a5ajvsTaA5QhX
soe1QeXQqJ+aTAMqr6ftAQoN8/3q8rDYQYfUPiiyQMsGjKRlRtn8m91tQAazNPjp
aRDXuSrnU6qlRSPDVrv1Br1g0w==
-----END CERTIFICATE-----