Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/758fa66c-3dbc-4185-ba01-eda69e79e86a/3cbcef27b0f383f68491bfa66a6b89e3081f35bb.roa
File:                     3cbcef27b0f383f68491bfa66a6b89e3081f35bb.roa (raw, json)
Hash identifier:          zQfZBYgwE0CLcPjBoyBoOdlDYvAIpaMxIFqTabOLD5Q=
Subject key identifier:   FC:64:59:0C:77:B0:06:AD:36:46:F5:5A:E4:E1:2B:38:14:68:09:B4
Certificate issuer:       /CN=5c7013b2a2f9960ed4d3a4a2b977739b9f30979e
Certificate serial:       09AB
Authority key identifier: DF:4F:8B:18:CF:F1:0F:F3:AC:86:06:69:B7:36:4B:78:40:56:EA:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c7013b2a2f9960ed4d3a4a2b977739b9f30979e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/758fa66c-3dbc-4185-ba01-eda69e79e86a/3cbcef27b0f383f68491bfa66a6b89e3081f35bb.roa
Signing time:             Tue 13 Apr 2021 03:25:49 +0000
ROA not before:           Tue 13 Apr 2021 03:00:00 +0000
ROA not after:            Thu 13 Apr 2023 03:00:00 +0000
asID:                     271898
IP address blocks:        200.39.60.0/24 maxlen: 24
                          200.39.61.0/24 maxlen: 24
                          200.39.62.0/24 maxlen: 24
                          200.39.63.0/24 maxlen: 24
                          200.39.60.0/22 maxlen: 22
                          2803:4210::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2475 (0x9ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c7013b2a2f9960ed4d3a4a2b977739b9f30979e
        Validity
            Not Before: Apr 13 03:00:00 2021 GMT
            Not After : Apr 13 03:00:00 2023 GMT
        Subject: CN=3cbcef27b0f383f68491bfa66a6b89e3081f35bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:73:6e:d6:87:7f:1c:19:0c:98:47:7e:55:e9:
                    a3:c5:77:6f:51:0e:6a:79:98:f2:77:d9:a1:db:f5:
                    15:13:e0:88:33:eb:57:aa:5c:6b:8d:3a:16:65:7d:
                    01:f4:a5:c4:b2:c0:cb:96:5f:a6:17:e1:c8:86:ba:
                    c0:03:d7:ba:39:b0:dd:68:7c:38:c9:53:56:fc:b6:
                    97:ae:75:c0:e0:5b:d2:df:99:21:71:7e:7b:55:a1:
                    20:7d:aa:24:25:67:87:bc:13:b8:88:cf:14:07:24:
                    b5:cd:49:5f:50:a0:c3:38:b9:4b:b5:a2:23:3c:c8:
                    da:f7:63:fa:79:fd:75:93:4e:4f:d4:70:f3:2e:bc:
                    bc:0a:3c:5b:cb:dc:39:ff:00:ce:a9:c3:8a:96:ec:
                    12:d2:2d:53:ef:89:6f:7a:7e:13:e2:b9:a0:ea:b8:
                    f5:a7:3b:6f:a9:80:9a:b3:73:c1:12:01:f5:32:30:
                    c1:5e:8b:ad:f7:87:45:f8:4f:a3:d6:39:f7:9a:b0:
                    fd:8d:31:eb:77:b8:ff:f2:d5:17:7e:a3:ed:09:b5:
                    f7:96:2d:c4:99:d9:6a:5c:70:ca:86:9d:6f:e3:f0:
                    f8:15:1e:5c:a1:c2:57:e9:8a:68:da:b0:39:0a:ed:
                    83:12:e4:2a:77:71:d9:4c:e8:aa:17:6f:95:57:9d:
                    ca:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:64:59:0C:77:B0:06:AD:36:46:F5:5A:E4:E1:2B:38:14:68:09:B4
            X509v3 Authority Key Identifier:
                keyid:DF:4F:8B:18:CF:F1:0F:F3:AC:86:06:69:B7:36:4B:78:40:56:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c7013b2a2f9960ed4d3a4a2b977739b9f30979e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/758fa66c-3dbc-4185-ba01-eda69e79e86a/3cbcef27b0f383f68491bfa66a6b89e3081f35bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/758fa66c-3dbc-4185-ba01-eda69e79e86a/5c7013b2a2f9960ed4d3a4a2b977739b9f30979e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.60.0/22
                IPv6:
                  2803:4210::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:ca:ae:92:a5:3c:ee:99:4e:19:50:b7:21:da:8d:d0:1b:18:
         48:2d:44:f7:17:72:21:ac:98:d2:b5:c8:36:6a:8b:09:78:dc:
         d0:af:d9:44:d7:d9:34:68:da:9c:c0:2f:6c:0e:1d:6a:f8:18:
         47:43:5c:a3:e6:f0:ce:ea:55:21:94:ba:39:01:ba:d2:6e:e5:
         a5:08:c7:34:08:0f:81:e9:ff:53:ec:34:a7:1f:20:43:26:94:
         e1:90:12:0c:56:15:a3:2b:82:75:11:73:04:d2:2d:0d:f6:49:
         a9:d6:0f:71:ac:8d:28:fc:2b:c9:a3:0d:70:07:8d:6c:03:49:
         82:12:30:8f:cc:f4:94:5c:2e:73:90:e3:c8:58:a4:3c:89:bd:
         d7:91:59:65:3f:c6:c7:20:55:08:69:70:39:f8:50:a5:a6:a3:
         cb:ba:4c:17:20:e3:f2:24:af:db:ac:bd:9f:be:53:c8:09:59:
         2f:e0:63:ff:4a:ad:38:9e:f2:47:c1:09:66:c6:0c:ee:6f:21:
         da:80:b7:67:6b:98:50:84:52:61:d0:86:24:74:28:b2:3d:14:
         2d:e2:4d:31:30:2e:cf:4a:db:38:59:c0:51:0e:ac:f3:a6:7f:
         f6:2c:af:e9:fc:77:a3:3e:a3:44:db:b4:50:71:1c:2b:e8:42:
         b9:b1:b1:68
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICCaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNWM3
MDEzYjJhMmY5OTYwZWQ0ZDNhNGEyYjk3NzczOWI5ZjMwOTc5ZTAeFw0yMTA0MTMw
MzAwMDBaFw0yMzA0MTMwMzAwMDBaMDMxMTAvBgNVBAMTKDNjYmNlZjI3YjBmMzgz
ZjY4NDkxYmZhNjZhNmI4OWUzMDgxZjM1YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxc27Wh38cGQyYR35V6aPFd29RDmp5mPJ32aHb9RUT4Igz61eq
XGuNOhZlfQH0pcSywMuWX6YX4ciGusAD17o5sN1ofDjJU1b8tpeudcDgW9LfmSFx
fntVoSB9qiQlZ4e8E7iIzxQHJLXNSV9QoMM4uUu1oiM8yNr3Y/p5/XWTTk/UcPMu
vLwKPFvL3Dn/AM6pw4qW7BLSLVPviW96fhPiuaDquPWnO2+pgJqzc8ESAfUyMMFe
i633h0X4T6PWOfeasP2NMet3uP/y1Rd+o+0JtfeWLcSZ2WpccMqGnW/j8PgVHlyh
wlfpimjasDkK7YMS5Cp3cdlM6KoXb5VXncrTAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQU/GRZDHewBq02RvVa5OErOBRoCbQwHwYDVR0jBBgwFoAU30+LGM/xD/OshgZp
tzZLeEBW6sgwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81YzcwMTNi
MmEyZjk5NjBlZDRkM2E0YTJiOTc3NzM5YjlmMzA5NzllLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy83NThmYTY2Yy0zZGJjLTQxODUtYmEwMS1lZGE2OWU3
OWU4NmEvM2NiY2VmMjdiMGYzODNmNjg0OTFiZmE2NmE2Yjg5ZTMwODFmMzViYi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzc1OGZhNjZjLTNkYmMtNDE4NS1iYTAxLWVkYTY5
ZTc5ZTg2YS81YzcwMTNiMmEyZjk5NjBlZDRkM2E0YTJiOTc3NzM5YjlmMzA5Nzll
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCyCc8MA0EAgACMAcDBQAoA0IQMA0GCSqGSIb3DQEBCwUAA4IB
AQAAyq6SpTzumU4ZULch2o3QGxhILUT3F3IhrJjStcg2aosJeNzQr9lE19k0aNqc
wC9sDh1q+BhHQ1yj5vDO6lUhlLo5AbrSbuWlCMc0CA+B6f9T7DSnHyBDJpThkBIM
VhWjK4J1EXME0i0N9kmp1g9xrI0o/CvJow1wB41sA0mCEjCPzPSUXC5zkOPIWKQ8
ib3XkVllP8bHIFUIaXA5+FClpqPLukwXIOPyJK/brL2fvlPICVkv4GP/Sq04nvJH
wQlmxgzubyHagLdna5hQhFJh0IYkdCiyPRQt4k0xMC7PSts4WcBRDqzzpn/2LK/p
/HejPqNE27RQcRwr6EK5sbFo
-----END CERTIFICATE-----