Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/d80ad6c972204e3c9d5acde3eee079bce1f0746d.roa
File:                     d80ad6c972204e3c9d5acde3eee079bce1f0746d.roa (raw, json)
Hash identifier:          jT/W/wwCR0selzQlINA9O3ySQ+HX2HH78p3uj4lVIjQ=
Subject key identifier:   D1:20:D0:5A:CA:D9:E8:1D:73:DF:D6:8F:84:2C:39:3C:AC:93:09:DD
Certificate issuer:       /CN=9fcf3302c6615af1974dce9c8e8304499ee53acc
Certificate serial:       0E729F
Authority key identifier: 0C:2B:E8:0C:8A:F6:87:11:C5:E1:13:00:62:89:C4:8B:A8:1F:E8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fcf3302c6615af1974dce9c8e8304499ee53acc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/d80ad6c972204e3c9d5acde3eee079bce1f0746d.roa
Signing time:             Fri 30 Apr 2021 14:22:36 +0000
ROA not before:           Fri 30 Apr 2021 03:00:00 +0000
ROA not after:            Sun 30 Apr 2023 03:00:00 +0000
asID:                     264789
IP address blocks:        168.197.240.0/22 maxlen: 22
                          168.197.240.0/22 maxlen: 24
                          168.197.240.0/24 maxlen: 24
                          168.197.241.0/24 maxlen: 24
                          168.197.242.0/24 maxlen: 24
                          168.197.243.0/24 maxlen: 24
                          2803:38c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946847 (0xe729f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fcf3302c6615af1974dce9c8e8304499ee53acc
        Validity
            Not Before: Apr 30 03:00:00 2021 GMT
            Not After : Apr 30 03:00:00 2023 GMT
        Subject: CN=d80ad6c972204e3c9d5acde3eee079bce1f0746d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:65:ca:75:64:91:ee:38:59:12:02:ef:66:
                    48:de:bc:0a:46:d5:b4:0c:16:c0:65:50:63:df:24:
                    cb:4b:72:ec:f7:68:c7:df:bc:52:56:f4:57:e0:15:
                    30:48:12:f6:5d:60:22:04:30:5f:0a:a7:d8:11:9d:
                    96:60:21:8c:6f:70:8b:df:0b:f4:f0:57:6d:16:bf:
                    57:5a:c5:b5:f5:e1:85:47:bb:31:ae:64:29:e0:0b:
                    0c:f2:dc:8f:38:d3:34:a9:a5:17:52:df:37:19:7f:
                    60:2f:20:59:42:37:8e:91:64:8f:98:d8:52:a9:00:
                    06:da:77:c0:cd:15:57:81:e4:30:43:40:dd:63:1b:
                    e7:34:c1:4b:3b:33:5d:11:56:93:48:4d:ae:ef:9b:
                    e9:c7:fd:bf:04:cb:0a:e7:89:81:7e:9d:12:9f:4a:
                    7a:9a:a1:7b:a2:52:c7:86:e7:ce:a7:5d:06:53:a1:
                    58:01:bf:d6:29:be:17:60:6b:63:ea:69:32:ae:93:
                    5e:6f:2d:93:e6:38:83:15:b9:f8:3e:e0:24:c1:d1:
                    32:08:e2:bc:83:d6:40:82:20:93:de:6b:f0:0c:7d:
                    0f:6b:5b:32:3c:63:0e:14:a4:39:36:b5:28:03:2f:
                    a0:47:15:07:b9:2a:be:ab:6c:29:37:00:18:1f:ad:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:20:D0:5A:CA:D9:E8:1D:73:DF:D6:8F:84:2C:39:3C:AC:93:09:DD
            X509v3 Authority Key Identifier:
                keyid:0C:2B:E8:0C:8A:F6:87:11:C5:E1:13:00:62:89:C4:8B:A8:1F:E8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fcf3302c6615af1974dce9c8e8304499ee53acc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/d80ad6c972204e3c9d5acde3eee079bce1f0746d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/9fcf3302c6615af1974dce9c8e8304499ee53acc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.240.0/22
                IPv6:
                  2803:38c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:39:f9:c6:78:72:55:31:71:31:18:4c:45:7f:51:0d:92:a3:
         25:a8:e3:f2:8f:83:9b:eb:f1:9a:f7:80:7f:42:f6:f1:21:d1:
         75:58:ab:c5:9c:0c:96:75:eb:ae:83:f5:75:15:87:09:8e:de:
         0e:9a:40:a5:83:d1:c0:0c:61:84:14:47:01:45:f2:32:52:fd:
         08:69:94:e4:52:78:12:10:18:32:26:af:0b:02:0f:e7:12:64:
         64:fc:e3:00:93:e1:ca:87:c3:81:77:f1:0e:e8:66:94:dc:47:
         7f:48:8e:3e:7f:11:f6:a6:d9:77:1b:5e:ff:ec:a7:0f:ce:b2:
         a7:63:1f:eb:b4:ff:b0:f7:43:63:12:f2:ba:c4:ae:bc:65:a5:
         7c:a6:15:0f:31:f9:d2:89:73:8b:93:a2:ae:55:81:d9:a2:9b:
         a6:ab:f2:42:ee:ee:6b:34:7b:cc:12:95:cb:01:ee:f5:1c:9d:
         1c:3b:3d:75:2d:d3:1e:4b:57:e8:bb:9b:9d:b5:4f:65:99:e5:
         6b:3c:25:87:6a:ef:0d:e3:51:49:eb:bb:92:f7:0f:f2:02:04:
         ce:fe:b6:fc:62:75:90:97:52:0b:20:4f:4a:3e:b1:0e:20:2b:
         c4:ff:5e:83:75:6c:24:a4:91:38:a7:bb:6b:ae:16:7a:5f:7c:
         68:3d:23:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDnKfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
Y2YzMzAyYzY2MTVhZjE5NzRkY2U5YzhlODMwNDQ5OWVlNTNhY2MwHhcNMjEwNDMw
MDMwMDAwWhcNMjMwNDMwMDMwMDAwWjAzMTEwLwYDVQQDEyhkODBhZDZjOTcyMjA0
ZTNjOWQ1YWNkZTNlZWUwNzliY2UxZjA3NDZkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4NJlynVkke44WRIC72ZI3rwKRtW0DBbAZVBj3yTLS3Ls92jH
37xSVvRX4BUwSBL2XWAiBDBfCqfYEZ2WYCGMb3CL3wv08FdtFr9XWsW19eGFR7sx
rmQp4AsM8tyPONM0qaUXUt83GX9gLyBZQjeOkWSPmNhSqQAG2nfAzRVXgeQwQ0Dd
YxvnNMFLOzNdEVaTSE2u75vpx/2/BMsK54mBfp0Sn0p6mqF7olLHhufOp10GU6FY
Ab/WKb4XYGtj6mkyrpNeby2T5jiDFbn4PuAkwdEyCOK8g9ZAgiCT3mvwDH0Pa1sy
PGMOFKQ5NrUoAy+gRxUHuSq+q2wpNwAYH62K1QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNEg0FrK2egdc9/Wj4QsOTyskwndMB8GA1UdIwQYMBaAFAwr6AyK9ocRxeET
AGKJxIuoH+gYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWZjZjMz
MDJjNjYxNWFmMTk3NGRjZTljOGU4MzA0NDk5ZWU1M2FjYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWMxNDhkYjYtMTRiMS00MjQwLTkyZWQtZjE2YjU0
YzA5YTY5L2Q4MGFkNmM5NzIyMDRlM2M5ZDVhY2RlM2VlZTA3OWJjZTFmMDc0NmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YzE0OGRiNi0xNGIxLTQyNDAtOTJlZC1mMTZi
NTRjMDlhNjkvOWZjZjMzMDJjNjYxNWFmMTk3NGRjZTljOGU4MzA0NDk5ZWU1M2Fj
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqjF8DANBAIAAjAHAwUAKAM4wDANBgkqhkiG9w0BAQsFAAOC
AQEAZTn5xnhyVTFxMRhMRX9RDZKjJajj8o+Dm+vxmveAf0L28SHRdVirxZwMlnXr
roP1dRWHCY7eDppApYPRwAxhhBRHAUXyMlL9CGmU5FJ4EhAYMiavCwIP5xJkZPzj
AJPhyofDgXfxDuhmlNxHf0iOPn8R9qbZdxte/+ynD86yp2Mf67T/sPdDYxLyusSu
vGWlfKYVDzH50olzi5OirlWB2aKbpqvyQu7uazR7zBKVywHu9RydHDs9dS3THktX
6LubnbVPZZnlazwlh2rvDeNRSeu7kvcP8gIEzv62/GJ1kJdSCyBPSj6xDiArxP9e
g3VsJKSROKe7a64Wel98aD0j9A==
-----END CERTIFICATE-----