Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/3841e16403095cb7f900d294dbc95d0ffa89ec5f.roa
File:                     3841e16403095cb7f900d294dbc95d0ffa89ec5f.roa (raw, json)
Hash identifier:          9FgEJo2KzgrJsGHoKM2HYYLXYnudZhyJHzzriD569M8=
Subject key identifier:   73:3D:74:F9:F9:4E:26:E4:4A:78:D6:C7:D1:3E:55:A9:F7:0F:A2:4E
Certificate issuer:       /CN=453ebe59acb9a5bd47a22d24fb3018768bbf22c9
Certificate serial:       0CE8D3
Authority key identifier: 30:D0:48:B6:AF:81:CE:29:A5:D8:2E:90:DD:69:ED:9B:82:99:33:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/453ebe59acb9a5bd47a22d24fb3018768bbf22c9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/3841e16403095cb7f900d294dbc95d0ffa89ec5f.roa
Signing time:             Wed 24 Mar 2021 14:37:33 +0000
ROA not before:           Wed 24 Mar 2021 14:37:33 +0000
ROA not after:            Tue 24 Mar 2026 14:37:33 +0000
asID:                     263713
IP address blocks:        190.0.224.0/21 maxlen: 24
                          2803:7a80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846035 (0xce8d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453ebe59acb9a5bd47a22d24fb3018768bbf22c9
        Validity
            Not Before: Mar 24 14:37:33 2021 GMT
            Not After : Mar 24 14:37:33 2026 GMT
        Subject: CN=3841e16403095cb7f900d294dbc95d0ffa89ec5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:dc:75:df:56:5f:40:4c:5f:f0:8b:22:ce:
                    f9:9a:94:02:71:b9:aa:53:31:5f:29:d7:ea:0d:37:
                    6c:cc:04:0b:ab:0e:e1:20:6f:3b:51:cc:5c:7b:99:
                    2d:38:3c:79:14:aa:70:89:80:39:a6:6d:d9:72:1c:
                    e6:e9:5d:63:c7:96:ce:9a:be:1f:45:08:79:d2:ee:
                    80:3f:11:bc:9f:7f:7c:eb:e4:b2:65:a2:6c:07:82:
                    73:e6:9f:86:81:29:3c:47:47:f4:95:d9:6c:b2:56:
                    6a:a0:ec:ec:b0:70:d7:bc:b5:43:d9:47:dc:f9:13:
                    3f:b8:73:5c:d7:c2:95:c2:b0:8f:06:79:0e:39:53:
                    9e:a4:dc:78:eb:af:15:98:dc:67:8d:e0:6a:55:b1:
                    c7:61:48:4d:ee:77:46:2c:7f:82:b2:64:4a:53:8c:
                    59:dd:7d:05:41:77:51:b5:1a:7f:e7:4d:3a:2f:4b:
                    c4:96:ea:96:55:d7:27:7d:58:30:8e:eb:c3:d0:3a:
                    ac:9d:66:8b:d5:95:76:44:0b:0a:33:91:05:ac:cb:
                    0d:23:92:41:dd:d0:04:b1:7c:15:b8:70:99:ed:82:
                    68:93:f0:f9:a5:bf:49:6d:31:38:12:22:ee:3b:91:
                    eb:00:a2:b1:0f:47:f4:68:e7:b7:54:5e:34:ea:b2:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3D:74:F9:F9:4E:26:E4:4A:78:D6:C7:D1:3E:55:A9:F7:0F:A2:4E
            X509v3 Authority Key Identifier:
                keyid:30:D0:48:B6:AF:81:CE:29:A5:D8:2E:90:DD:69:ED:9B:82:99:33:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/453ebe59acb9a5bd47a22d24fb3018768bbf22c9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/3841e16403095cb7f900d294dbc95d0ffa89ec5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/453ebe59acb9a5bd47a22d24fb3018768bbf22c9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.224.0/21
                IPv6:
                  2803:7a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:f5:1b:a3:d6:46:4a:13:22:c4:be:df:0d:02:fd:ea:2a:40:
         6e:66:89:b0:c0:1e:85:b8:52:de:ae:b1:1b:78:d5:55:ac:df:
         f0:a7:81:27:70:96:d5:09:5f:5e:b1:cb:ac:d7:04:70:a3:10:
         c2:9e:c7:6c:0c:dc:49:7b:6f:43:fb:98:7f:5e:04:8c:a6:d1:
         08:26:25:92:ba:e8:7b:18:05:b3:01:57:95:61:ed:75:30:1d:
         7d:7d:1d:6a:c1:20:f1:56:f6:89:19:f2:ba:ac:17:3a:f0:2d:
         2d:02:d4:7b:8e:9c:cb:ad:e9:0c:b0:a4:68:b5:93:ba:0b:3a:
         09:a1:69:e7:1b:a2:75:57:00:29:6e:df:13:b5:2f:6c:a9:24:
         13:86:7a:0e:95:f9:4e:b6:2e:44:32:19:17:ea:8e:02:ab:3c:
         a7:9c:f8:0e:df:11:c5:a2:e0:ff:cf:44:7b:44:fb:d7:1e:ec:
         f9:04:2c:9c:31:22:88:5d:2f:6e:76:41:b7:e4:db:88:cd:a2:
         38:a3:74:4e:a9:0e:6d:b1:78:00:75:20:73:f2:63:5b:94:3c:
         82:d8:1e:4f:81:95:23:de:ff:61:6e:88:b6:66:80:b0:55:ac:
         d5:7d:11:fa:90:c2:4f:46:76:7c:02:34:16:2d:5b:d7:38:e2:
         86:c8:1e:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDOjTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ1
M2ViZTU5YWNiOWE1YmQ0N2EyMmQyNGZiMzAxODc2OGJiZjIyYzkwHhcNMjEwMzI0
MTQzNzMzWhcNMjYwMzI0MTQzNzMzWjAzMTEwLwYDVQQDEygzODQxZTE2NDAzMDk1
Y2I3ZjkwMGQyOTRkYmM5NWQwZmZhODllYzVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAy+Xcdd9WX0BMX/CLIs75mpQCcbmqUzFfKdfqDTdszAQLqw7h
IG87Ucxce5ktODx5FKpwiYA5pm3Zchzm6V1jx5bOmr4fRQh50u6APxG8n3986+Sy
ZaJsB4Jz5p+GgSk8R0f0ldlsslZqoOzssHDXvLVD2Ufc+RM/uHNc18KVwrCPBnkO
OVOepNx4668VmNxnjeBqVbHHYUhN7ndGLH+CsmRKU4xZ3X0FQXdRtRp/5006L0vE
luqWVdcnfVgwjuvD0DqsnWaL1ZV2RAsKM5EFrMsNI5JB3dAEsXwVuHCZ7YJok/D5
pb9JbTE4EiLuO5HrAKKxD0f0aOe3VF406rJcMQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHM9dPn5TibkSnjWx9E+Van3D6JOMB8GA1UdIwQYMBaAFDDQSLavgc4ppdgu
kN1p7ZuCmTOGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDUzZWJl
NTlhY2I5YTViZDQ3YTIyZDI0ZmIzMDE4NzY4YmJmMjJjOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzM2YjEzYzctMWUzYS00ZTdlLThjNGMtOGVmMTVl
ZWJiOWYyLzM4NDFlMTY0MDMwOTVjYjdmOTAwZDI5NGRiYzk1ZDBmZmE4OWVjNWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MzZiMTNjNy0xZTNhLTRlN2UtOGM0Yy04ZWYx
NWVlYmI5ZjIvNDUzZWJlNTlhY2I5YTViZDQ3YTIyZDI0ZmIzMDE4NzY4YmJmMjJj
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEA74A4DANBAIAAjAHAwUAKAN6gDANBgkqhkiG9w0BAQsFAAOC
AQEAI/Ubo9ZGShMixL7fDQL96ipAbmaJsMAehbhS3q6xG3jVVazf8KeBJ3CW1Qlf
XrHLrNcEcKMQwp7HbAzcSXtvQ/uYf14EjKbRCCYlkrroexgFswFXlWHtdTAdfX0d
asEg8Vb2iRnyuqwXOvAtLQLUe46cy63pDLCkaLWTugs6CaFp5xuidVcAKW7fE7Uv
bKkkE4Z6DpX5TrYuRDIZF+qOAqs8p5z4Dt8RxaLg/89Ee0T71x7s+QQsnDEiiF0v
bnZBt+TbiM2iOKN0TqkObbF4AHUgc/JjW5Q8gtgeT4GVI97/YW6ItmaAsFWs1X0R
+pDCT0Z2fAI0Fi1b1zjihsgeZA==
-----END CERTIFICATE-----