Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/4d8f4f771515d7ac16fffb85f19a583af268f12f.roa
File:                     4d8f4f771515d7ac16fffb85f19a583af268f12f.roa (raw, json)
Hash identifier:          qezvwTHGwgOhPtsY9MlVtHhYO5/D+zftWvJo0y3N6J0=
Subject key identifier:   9E:59:10:FE:12:3D:2F:6A:23:52:76:00:C8:45:15:8B:E1:4D:E9:5B
Certificate issuer:       /CN=4393f7432846896d18bc47956f7dce0ffc072b54
Certificate serial:       0C3772
Authority key identifier: C5:62:86:91:75:C8:DB:6E:23:A2:5E:89:B8:61:A8:76:6D:95:57:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4393f7432846896d18bc47956f7dce0ffc072b54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/4d8f4f771515d7ac16fffb85f19a583af268f12f.roa
Signing time:             Wed 24 Mar 2021 14:45:29 +0000
ROA not before:           Wed 24 Mar 2021 14:45:29 +0000
ROA not after:            Tue 24 Mar 2026 14:45:29 +0000
asID:                     138609
IP address blocks:        131.221.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800626 (0xc3772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4393f7432846896d18bc47956f7dce0ffc072b54
        Validity
            Not Before: Mar 24 14:45:29 2021 GMT
            Not After : Mar 24 14:45:29 2026 GMT
        Subject: CN=4d8f4f771515d7ac16fffb85f19a583af268f12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:aa:78:b6:d5:e7:b0:0f:3c:f8:7d:85:e3:
                    de:fb:b5:d8:66:a4:cc:21:e9:e7:19:7a:65:08:3d:
                    76:d3:0d:41:bf:9e:13:12:6f:08:60:16:fa:26:19:
                    3b:0e:3b:fb:c4:7e:e1:88:cd:77:05:8d:a9:b3:9f:
                    ff:9d:78:d2:e0:5d:1b:5d:55:9f:0d:24:29:b0:a9:
                    21:48:f5:bb:92:92:86:dd:25:d8:c0:31:ee:36:4a:
                    06:9e:80:e7:c0:d8:b3:55:88:8b:a7:9d:0f:28:58:
                    68:9f:b6:58:e0:18:f7:c4:e0:fa:be:0f:78:b4:18:
                    5f:90:9f:fa:41:92:b9:00:e3:89:92:08:ad:ac:f2:
                    ad:e3:84:75:c2:13:52:bb:f4:a7:3a:4a:75:9d:90:
                    b7:5e:f0:53:01:58:6c:b2:08:13:64:c3:49:20:9e:
                    be:e4:a4:b6:a1:6b:ad:ec:88:a9:79:d3:b1:3d:da:
                    3e:9c:0c:00:fd:c8:eb:f1:42:d4:44:cf:82:c4:ef:
                    9b:e2:9a:8a:63:32:b1:a0:f2:ab:93:98:81:ec:02:
                    d5:36:99:14:1c:3d:ad:f0:0a:6d:90:c9:02:58:e7:
                    64:33:45:a9:80:00:50:b8:df:99:60:a9:20:0e:fb:
                    e9:c5:05:04:ec:2c:1b:1e:58:50:bb:64:68:83:ba:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:59:10:FE:12:3D:2F:6A:23:52:76:00:C8:45:15:8B:E1:4D:E9:5B
            X509v3 Authority Key Identifier:
                keyid:C5:62:86:91:75:C8:DB:6E:23:A2:5E:89:B8:61:A8:76:6D:95:57:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4393f7432846896d18bc47956f7dce0ffc072b54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/4d8f4f771515d7ac16fffb85f19a583af268f12f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d81f6cd-fc81-491f-bb92-38db7086c322/4393f7432846896d18bc47956f7dce0ffc072b54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:12:6e:21:a5:bf:cd:3b:bb:a6:90:9c:f6:8f:b0:6f:1d:1d:
         04:97:13:cb:3f:16:d7:7f:f2:8b:a2:ce:64:ab:b5:fc:66:ea:
         05:34:aa:a3:df:04:9b:89:78:d3:7e:0f:c3:57:fb:77:79:d6:
         27:4b:66:5e:b5:bf:94:6b:16:21:07:af:40:f2:98:74:19:54:
         ed:f9:3b:f1:73:15:5f:f6:9e:cf:81:42:66:40:27:ea:9c:b4:
         5e:be:93:b4:6e:08:5f:59:4e:96:d1:47:2c:16:e6:06:c3:ab:
         a4:e1:28:7d:3f:db:72:4b:39:71:70:18:4a:9c:57:cd:f9:ba:
         7d:83:d0:14:7e:16:82:1e:cc:75:8c:87:86:22:e5:68:5e:c5:
         7b:a6:4e:5f:a1:74:54:d7:70:da:e1:97:b0:64:d0:56:e9:48:
         59:7c:15:a6:fd:1c:e6:88:5a:73:7c:f4:69:22:fb:f4:11:16:
         b0:6f:df:b8:df:3d:ec:df:39:f4:47:fa:85:be:67:13:80:d5:
         c7:4f:01:55:12:76:f5:d7:cd:62:b7:c1:f1:40:8a:6f:56:ec:
         36:de:70:44:4e:ce:52:4f:a4:9e:f4:75:8e:cc:5c:d4:a2:5d:
         74:45:e1:bd:38:a2:8f:6d:a8:ce:88:07:a8:08:bd:22:96:98:
         f7:ff:1e:c5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDDdyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
OTNmNzQzMjg0Njg5NmQxOGJjNDc5NTZmN2RjZTBmZmMwNzJiNTQwHhcNMjEwMzI0
MTQ0NTI5WhcNMjYwMzI0MTQ0NTI5WjAzMTEwLwYDVQQDEyg0ZDhmNGY3NzE1MTVk
N2FjMTZmZmZiODVmMTlhNTgzYWYyNjhmMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtIuqeLbV57APPPh9hePe+7XYZqTMIennGXplCD120w1Bv54T
Em8IYBb6Jhk7Djv7xH7hiM13BY2ps5//nXjS4F0bXVWfDSQpsKkhSPW7kpKG3SXY
wDHuNkoGnoDnwNizVYiLp50PKFhon7ZY4Bj3xOD6vg94tBhfkJ/6QZK5AOOJkgit
rPKt44R1whNSu/SnOkp1nZC3XvBTAVhssggTZMNJIJ6+5KS2oWut7IipedOxPdo+
nAwA/cjr8ULURM+CxO+b4pqKYzKxoPKrk5iB7ALVNpkUHD2t8AptkMkCWOdkM0Wp
gABQuN+ZYKkgDvvpxQUE7CwbHlhQu2Rog7pE6wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ5ZEP4SPS9qI1J2AMhFFYvhTelbMB8GA1UdIwQYMBaAFMVihpF1yNtuI6Je
ibhhqHZtlVe5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDM5M2Y3
NDMyODQ2ODk2ZDE4YmM0Nzk1NmY3ZGNlMGZmYzA3MmI1NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWQ4MWY2Y2QtZmM4MS00OTFmLWJiOTItMzhkYjcw
ODZjMzIyLzRkOGY0Zjc3MTUxNWQ3YWMxNmZmZmI4NWYxOWE1ODNhZjI2OGYxMmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZDgxZjZjZC1mYzgxLTQ5MWYtYmI5Mi0zOGRi
NzA4NmMzMjIvNDM5M2Y3NDMyODQ2ODk2ZDE4YmM0Nzk1NmY3ZGNlMGZmYzA3MmI1
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIPdmTANBgkqhkiG9w0BAQsFAAOCAQEAWBJuIaW/zTu7ppCc
9o+wbx0dBJcTyz8W13/yi6LOZKu1/GbqBTSqo98Em4l4034Pw1f7d3nWJ0tmXrW/
lGsWIQevQPKYdBlU7fk78XMVX/aez4FCZkAn6py0Xr6TtG4IX1lOltFHLBbmBsOr
pOEofT/bcks5cXAYSpxXzfm6fYPQFH4Wgh7MdYyHhiLlaF7Fe6ZOX6F0VNdw2uGX
sGTQVulIWXwVpv0c5ohac3z0aSL79BEWsG/fuN897N859Ef6hb5nE4DVx08BVRJ2
9dfNYrfB8UCKb1bsNt5wRE7OUk+knvR1jsxc1KJddEXhvTiij22ozogHqAi9IpaY
9/8exQ==
-----END CERTIFICATE-----