Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/dd7c627c3f2260df93128a2640f934433d4a7766.roa
File:                     dd7c627c3f2260df93128a2640f934433d4a7766.roa (raw, json)
Hash identifier:          KQQ+aaqAgIZEjzWFwDvL+hCrm+CiF1a+gNHBtB643Do=
Subject key identifier:   1A:CA:EF:35:E7:F1:17:4D:A2:8F:90:8D:9D:9F:AD:13:E9:39:51:D3
Certificate issuer:       /CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
Certificate serial:       17402A
Authority key identifier: 35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/dd7c627c3f2260df93128a2640f934433d4a7766.roa
Signing time:             Thu 19 May 2022 15:35:10 +0000
ROA not before:           Thu 19 May 2022 03:00:00 +0000
ROA not after:            Sun 19 May 2024 03:00:00 +0000
asID:                     26210
IP address blocks:        186.121.192.0/18 maxlen: 18
                          190.181.0.0/18 maxlen: 18
                          200.105.128.0/19 maxlen: 19
                          200.105.160.0/19 maxlen: 19
                          200.105.192.0/19 maxlen: 19
                          2800:88::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1523754 (0x17402a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
        Validity
            Not Before: May 19 03:00:00 2022 GMT
            Not After : May 19 03:00:00 2024 GMT
        Subject: CN=dd7c627c3f2260df93128a2640f934433d4a7766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:49:85:fb:17:ea:22:05:c6:e9:2d:bf:95:
                    19:df:7a:29:04:8b:08:d0:20:d0:d4:ca:69:15:fc:
                    a5:ce:f7:4b:33:51:2c:34:0f:7b:9d:12:1b:9d:0b:
                    86:07:1e:89:3c:aa:86:44:73:a3:d9:cf:c6:a2:85:
                    eb:df:23:dd:2e:d9:20:c9:84:80:d8:bd:66:92:9e:
                    cc:fc:f1:37:7f:83:97:0b:42:15:cd:58:fd:09:4b:
                    ab:e1:cb:86:a5:72:73:ba:d2:94:1c:97:18:b2:41:
                    bb:0a:5b:43:e0:d0:66:1f:30:b4:6c:41:dc:c2:bb:
                    80:99:4f:e0:8b:14:9b:e3:d2:cd:35:81:40:e4:1c:
                    59:44:38:1a:29:48:6d:45:a6:15:64:35:cf:1f:dc:
                    a4:97:ce:d3:26:1c:14:46:9c:08:91:8f:09:5e:4f:
                    92:b0:c0:35:61:56:15:12:d9:09:e8:aa:b6:54:d6:
                    07:9c:07:a1:b9:d6:03:76:97:bc:a8:d7:f8:60:80:
                    70:81:d5:75:f9:83:86:e1:b4:d1:fe:ea:98:3a:31:
                    6d:fd:ef:b2:5e:02:7c:f0:9a:89:5b:e3:f3:bc:ef:
                    1b:27:45:35:b4:8a:1d:b9:93:ad:92:75:13:1a:81:
                    53:4f:54:e7:12:01:48:ad:6f:cc:81:99:a0:f1:21:
                    fc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CA:EF:35:E7:F1:17:4D:A2:8F:90:8D:9D:9F:AD:13:E9:39:51:D3
            X509v3 Authority Key Identifier:
                keyid:35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/dd7c627c3f2260df93128a2640f934433d4a7766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.192.0/18
                  190.181.0.0/18
                  200.105.128.0-200.105.223.255
                IPv6:
                  2800:88::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:3d:0a:61:81:f0:27:b3:03:49:7d:29:ed:a1:16:60:22:c1:
         49:d2:2d:bc:30:0b:23:a0:17:b4:57:56:97:74:b6:8e:a5:36:
         ac:a4:8a:5f:95:33:6a:d3:53:de:92:4b:19:7c:f6:07:86:c7:
         5e:12:a7:4a:56:33:3a:74:38:ee:c2:b5:0c:16:50:cf:41:97:
         f1:50:ac:3a:7c:01:71:b9:ae:68:40:6f:8c:b4:77:05:e5:de:
         e3:8f:5c:bd:28:8e:b6:0a:9b:da:b4:70:1f:bf:fe:ee:d5:3b:
         2f:46:7c:84:cf:cc:66:e1:0e:1e:57:f0:1d:13:d0:74:ca:86:
         04:53:4c:df:52:3d:68:4e:4a:a4:86:3e:6d:4d:b2:2c:2f:ef:
         2e:81:e2:ea:bc:7e:64:dd:89:9b:a5:61:43:c9:34:53:13:e9:
         cb:e4:12:1b:22:ea:7c:f0:da:3f:77:f2:0e:a6:8a:97:59:e5:
         0d:42:14:eb:a0:e2:b5:bf:d9:a2:a9:68:21:82:bf:a4:2a:4e:
         25:89:8c:c5:38:f1:b3:a6:51:d0:38:b9:0e:37:1c:d8:49:b2:
         c0:e3:39:1b:5a:af:47:f5:f3:a9:5c:ab:94:10:a4:7a:e1:a6:
         9a:d0:8f:4d:2b:15:7c:e1:6e:b0:74:71:79:70:e2:5e:a4:ad:
         75:8f:8f:e6
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgIDF0AqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJl
NTE3NTZiM2Q2MDIxZGQ2ZWUzZDQ0MTUyODBjNmY2Yjc2MDNiODYwHhcNMjIwNTE5
MDMwMDAwWhcNMjQwNTE5MDMwMDAwWjAzMTEwLwYDVQQDEyhkZDdjNjI3YzNmMjI2
MGRmOTMxMjhhMjY0MGY5MzQ0MzNkNGE3NzY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArapJhfsX6iIFxuktv5UZ33opBIsI0CDQ1MppFfylzvdLM1Es
NA97nRIbnQuGBx6JPKqGRHOj2c/GooXr3yPdLtkgyYSA2L1mkp7M/PE3f4OXC0IV
zVj9CUur4cuGpXJzutKUHJcYskG7CltD4NBmHzC0bEHcwruAmU/gixSb49LNNYFA
5BxZRDgaKUhtRaYVZDXPH9ykl87TJhwURpwIkY8JXk+SsMA1YVYVEtkJ6Kq2VNYH
nAehudYDdpe8qNf4YIBwgdV1+YOG4bTR/uqYOjFt/e+yXgJ88JqJW+PzvO8bJ0U1
tIoduZOtknUTGoFTT1TnEgFIrW/MgZmg8SH8uwIDAQABo4ICfjCCAnowHQYDVR0O
BBYEFBrK7zXn8RdNoo+QjZ2frRPpOVHTMB8GA1UdIwQYMBaAFDVtU1392dTlF7gz
ZT/Ppk4ZunGiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmU1MTc1
NmIzZDYwMjFkZDZlZTNkNDQxNTI4MGM2ZjZiNzYwM2I4Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTY3ZmZhN2YtZWUzZS00ZTliLWI2MzktYmE0YzA0
ODkxMTZkL2RkN2M2MjdjM2YyMjYwZGY5MzEyOGEyNjQwZjkzNDQzM2Q0YTc3NjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NjdmZmE3Zi1lZTNlLTRlOWItYjYzOS1iYTRj
MDQ4OTExNmQvYmU1MTc1NmIzZDYwMjFkZDZlZTNkNDQxNTI4MGM2ZjZiNzYwM2I4
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBCBggrBgEFBQcBBwEB/wQz
MDEwIAQCAAEwGgMEBrp5wAMEBr61ADAMAwQHyGmAAwQFyGnAMA0EAgACMAcDBQAo
AACIMA0GCSqGSIb3DQEBCwUAA4IBAQAuPQphgfAnswNJfSntoRZgIsFJ0i28MAsj
oBe0V1aXdLaOpTaspIpflTNq01PekksZfPYHhsdeEqdKVjM6dDjuwrUMFlDPQZfx
UKw6fAFxua5oQG+MtHcF5d7jj1y9KI62CpvatHAfv/7u1TsvRnyEz8xm4Q4eV/Ad
E9B0yoYEU0zfUj1oTkqkhj5tTbIsL+8ugeLqvH5k3YmbpWFDyTRTE+nL5BIbIup8
8No/d/IOpoqXWeUNQhTroOK1v9miqWghgr+kKk4liYzFOPGzplHQOLkONxzYSbLA
4zkbWq9H9fOpXKuUEKR64aaa0I9NKxV84W6wdHF5cOJepK11j4/m
-----END CERTIFICATE-----