Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c5d50be-579e-4126-839f-270dfa25d01a/b40958e6b31c1e5986c4770d06a87e18b053e0d6.roa
File:                     b40958e6b31c1e5986c4770d06a87e18b053e0d6.roa (raw, json)
Hash identifier:          0AOYzx0a+FeXpnRFnbc48+lIHuwZXwLaEwQ4iW5wI1I=
Subject key identifier:   2A:36:94:77:0F:01:47:73:08:8A:14:ED:11:15:1D:33:19:37:5A:68
Certificate issuer:       /CN=6f4947f69ab9a7d3809d9a7b76bc2aec7dd527da
Certificate serial:       2123
Authority key identifier: E6:24:64:EB:D9:8E:6A:09:CB:78:3B:5D:6F:E3:FF:3C:97:9A:13:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f4947f69ab9a7d3809d9a7b76bc2aec7dd527da.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c5d50be-579e-4126-839f-270dfa25d01a/b40958e6b31c1e5986c4770d06a87e18b053e0d6.roa
Signing time:             Fri 16 Jul 2021 19:56:20 +0000
ROA not before:           Thu 16 Jul 2020 03:00:00 +0000
ROA not after:            Sat 16 Jul 2050 03:00:00 +0000
asID:                     270120
IP address blocks:        187.103.24.0/24 maxlen: 24
                          2806:3bf::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8483 (0x2123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f4947f69ab9a7d3809d9a7b76bc2aec7dd527da
        Validity
            Not Before: Jul 16 03:00:00 2020 GMT
            Not After : Jul 16 03:00:00 2050 GMT
        Subject: CN=b40958e6b31c1e5986c4770d06a87e18b053e0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:48:ee:53:a8:f8:c1:0b:8e:ed:06:38:24:
                    9f:32:c3:5e:d2:2c:60:1e:cc:2e:fe:c2:25:46:69:
                    57:3d:61:65:51:c9:da:60:a9:af:78:33:6a:3c:9e:
                    c7:e4:43:96:ad:aa:37:36:cc:1a:6a:58:ed:ab:de:
                    5a:77:9a:3c:b3:d3:28:51:fb:9c:02:b2:08:0c:9e:
                    d8:f7:62:75:5f:78:78:91:8c:24:3f:e7:e1:b1:ca:
                    b1:82:29:83:46:48:82:59:46:94:37:32:c5:06:55:
                    a3:3c:cf:d7:41:5d:07:e2:f9:23:1a:89:e1:8d:25:
                    4c:9a:14:de:ea:35:50:d9:ed:a2:27:7d:a3:37:0e:
                    54:7d:ea:c3:8b:28:c7:d7:eb:8e:3d:82:12:ab:9a:
                    db:b4:3e:7a:0a:6c:d1:37:df:15:b5:dc:d5:bc:6b:
                    f0:1a:3a:22:76:0d:78:9b:1c:40:1f:c6:e4:3a:25:
                    1d:33:da:b6:2b:fd:3a:d2:f6:10:ee:46:cd:b5:61:
                    52:05:6c:84:a6:78:10:a5:a1:7f:17:35:61:56:58:
                    e2:99:68:03:08:71:62:51:9f:40:e9:f1:cb:57:e3:
                    f8:da:7e:bf:ad:ba:d7:0a:2d:05:ac:8b:ed:48:b8:
                    68:6b:1b:f3:ca:28:b9:85:76:a2:f5:76:6d:48:4f:
                    b1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:36:94:77:0F:01:47:73:08:8A:14:ED:11:15:1D:33:19:37:5A:68
            X509v3 Authority Key Identifier:
                keyid:E6:24:64:EB:D9:8E:6A:09:CB:78:3B:5D:6F:E3:FF:3C:97:9A:13:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f4947f69ab9a7d3809d9a7b76bc2aec7dd527da.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c5d50be-579e-4126-839f-270dfa25d01a/b40958e6b31c1e5986c4770d06a87e18b053e0d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c5d50be-579e-4126-839f-270dfa25d01a/6f4947f69ab9a7d3809d9a7b76bc2aec7dd527da.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.24.0/24
                IPv6:
                  2806:3bf::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:ab:63:53:0f:3c:e1:a4:86:1e:54:d4:2b:29:61:77:77:6b:
         01:b9:cd:c5:94:f2:60:eb:0a:80:d7:39:f2:01:a4:61:48:56:
         fe:ec:8f:8d:1f:da:68:b2:ab:6a:2c:d6:7f:5d:dd:e3:20:44:
         e6:9c:c2:cc:cf:25:c4:24:98:a0:13:c6:69:53:8f:0e:0f:2d:
         c4:ba:2e:c0:28:45:b9:f0:05:04:4e:b4:53:2c:dc:be:88:55:
         c4:36:33:92:48:16:e2:c8:e7:2b:63:9f:f2:8d:d7:c9:4f:a3:
         fb:1f:d1:cd:89:4b:69:85:f5:77:01:a2:ce:31:cf:8f:33:b2:
         6e:4b:47:9d:8f:85:83:9b:f4:ed:47:c4:8c:79:e8:1c:93:14:
         99:7f:00:31:5b:a0:3a:a9:5a:8c:2f:ad:3c:2c:b2:ac:10:8a:
         5c:e2:5a:b4:3a:7f:56:61:e1:99:c3:7e:da:83:0b:e3:00:38:
         41:70:3b:7f:77:b1:96:2c:c4:15:a3:d7:26:f4:8d:7b:5a:3f:
         d7:72:92:f5:b5:79:52:d0:c0:60:a9:43:a0:56:91:65:02:e9:
         11:0c:27:c7:2b:d6:e5:bf:54:74:98:3b:69:58:de:ed:97:fc:
         98:7f:36:26:70:a3:9b:86:e2:e9:bf:f8:92:55:99:17:01:3d:
         dc:39:03:f7
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgICISMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNmY0
OTQ3ZjY5YWI5YTdkMzgwOWQ5YTdiNzZiYzJhZWM3ZGQ1MjdkYTAgFw0yMDA3MTYw
MzAwMDBaGA8yMDUwMDcxNjAzMDAwMFowMzExMC8GA1UEAxMoYjQwOTU4ZTZiMzFj
MWU1OTg2YzQ3NzBkMDZhODdlMThiMDUzZTBkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+SSO5TqPjBC47tBjgknzLDXtIsYB7MLv7CJUZpVz1hZVHJ
2mCpr3gzajyex+RDlq2qNzbMGmpY7aveWneaPLPTKFH7nAKyCAye2PdidV94eJGM
JD/n4bHKsYIpg0ZIgllGlDcyxQZVozzP10FdB+L5IxqJ4Y0lTJoU3uo1UNntoid9
ozcOVH3qw4sox9frjj2CEqua27Q+egps0TffFbXc1bxr8Bo6InYNeJscQB/G5Dol
HTPativ9OtL2EO5GzbVhUgVshKZ4EKWhfxc1YVZY4ploAwhxYlGfQOnxy1fj+Np+
v6261wotBayL7Ui4aGsb88oouYV2ovV2bUhPsRECAwEAAaOCAmwwggJoMB0GA1Ud
DgQWBBQqNpR3DwFHcwiKFO0RFR0zGTdaaDAfBgNVHSMEGDAWgBTmJGTr2Y5qCct4
O11v4/88l5oTzzAOBgNVHQ8BAf8EBAMCB4AwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1LzZmNDk0
N2Y2OWFiOWE3ZDM4MDlkOWE3Yjc2YmMyYWVjN2RkNTI3ZGEuY2VyMIGaBggrBgEF
BQcBCwSBjTCBijCBhwYIKwYBBQUHMAuGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzZjNWQ1MGJlLTU3OWUtNDEyNi04MzlmLTI3MGRm
YTI1ZDAxYS9iNDA5NThlNmIzMWMxZTU5ODZjNDc3MGQwNmE4N2UxOGIwNTNlMGQ2
LnJvYTCBjwYDVR0fBIGHMIGEMIGBoH+gfYZ7cnN5bmM6Ly9yZXBvc2l0b3J5Lmxh
Y25pYy5uZXQvcnBraS9sYWNuaWMvNmM1ZDUwYmUtNTc5ZS00MTI2LTgzOWYtMjcw
ZGZhMjVkMDFhLzZmNDk0N2Y2OWFiOWE3ZDM4MDlkOWE3Yjc2YmMyYWVjN2RkNTI3
ZGEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAC7ZxgwDwQCAAIwCQMHACgGA78AADANBgkqhkiG9w0BAQsF
AAOCAQEAO6tjUw884aSGHlTUKylhd3drAbnNxZTyYOsKgNc58gGkYUhW/uyPjR/a
aLKraizWf13d4yBE5pzCzM8lxCSYoBPGaVOPDg8txLouwChFufAFBE60UyzcvohV
xDYzkkgW4sjnK2Of8o3XyU+j+x/RzYlLaYX1dwGizjHPjzOybktHnY+Fg5v07UfE
jHnoHJMUmX8AMVugOqlajC+tPCyyrBCKXOJatDp/VmHhmcN+2oML4wA4QXA7f3ex
lizEFaPXJvSNe1o/13KS9bV5UtDAYKlDoFaRZQLpEQwnxyvW5b9UdJg7aVje7Zf8
mH82JnCjm4bi6b/4klWZFwE93DkD9w==
-----END CERTIFICATE-----