Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/78a2168e-0624-4ed1-90a5-cc40c920412e/b13b9aa7a838484dadad6fabe9c8ea238139975a.roa
File:                     b13b9aa7a838484dadad6fabe9c8ea238139975a.roa (raw, json)
Hash identifier:          bBP9BrJmybDfzxoBIx1jEgNoj8V699phPEA4yiSWWuk=
Subject key identifier:   D5:03:C5:C2:73:40:E1:88:9C:30:92:24:33:B4:C3:F4:A3:B3:E3:ED
Certificate issuer:       /CN=8acfc458285d8bcacad68699f2691b0083ca913f
Certificate serial:       01F4
Authority key identifier: 87:F3:4F:60:22:1B:F7:46:90:6C:4F:08:11:FB:67:79:25:DD:3A:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8acfc458285d8bcacad68699f2691b0083ca913f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/78a2168e-0624-4ed1-90a5-cc40c920412e/b13b9aa7a838484dadad6fabe9c8ea238139975a.roa
Signing time:             Tue 11 May 2021 12:11:44 +0000
ROA not before:           Tue 11 May 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     264673
IP address blocks:        168.181.24.0/22 maxlen: 24
                          2803:4d40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8acfc458285d8bcacad68699f2691b0083ca913f
        Validity
            Not Before: May 11 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=b13b9aa7a838484dadad6fabe9c8ea238139975a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:37:46:86:40:10:4d:0f:d5:f5:fd:f2:db:
                    9f:c1:16:72:ba:57:0e:65:85:45:22:85:ea:19:03:
                    2e:0f:e9:a0:c4:f6:09:d9:ec:ec:b1:a8:6a:6b:c9:
                    b0:e8:ae:8b:a1:72:f0:49:43:26:c6:fc:01:22:ac:
                    f5:8b:ea:f7:f5:bb:7b:15:0a:f0:4d:76:e3:47:b0:
                    ec:b4:cf:31:4d:dd:a6:85:99:58:39:6a:6f:69:fd:
                    e2:1c:5c:66:15:07:44:4b:bc:98:fb:cd:42:ef:79:
                    6f:16:a3:fe:43:aa:21:dd:ac:17:93:ea:38:99:ce:
                    96:c9:4e:e1:dc:91:bd:b2:2f:32:87:a3:e2:57:1c:
                    bf:9f:d2:70:05:1c:ea:11:a6:b3:18:6c:cd:72:78:
                    85:31:48:fb:78:36:f8:2d:34:0e:d5:5b:50:c5:61:
                    14:63:bc:2f:f3:17:9d:5f:e1:97:cd:4d:f4:a8:49:
                    9b:66:e3:f6:dc:2e:a2:d3:e6:ce:51:ee:04:02:12:
                    9b:62:37:a2:4b:08:cd:a2:61:c5:86:5d:ca:3a:64:
                    6a:26:36:6e:7d:53:59:46:bf:fa:32:8a:8f:10:b4:
                    68:3b:0b:f9:23:8e:72:68:a4:05:d9:87:bd:71:35:
                    9a:82:54:36:72:53:a7:84:32:d2:e9:36:0a:02:25:
                    3b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:03:C5:C2:73:40:E1:88:9C:30:92:24:33:B4:C3:F4:A3:B3:E3:ED
            X509v3 Authority Key Identifier:
                keyid:87:F3:4F:60:22:1B:F7:46:90:6C:4F:08:11:FB:67:79:25:DD:3A:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8acfc458285d8bcacad68699f2691b0083ca913f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/78a2168e-0624-4ed1-90a5-cc40c920412e/b13b9aa7a838484dadad6fabe9c8ea238139975a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/78a2168e-0624-4ed1-90a5-cc40c920412e/8acfc458285d8bcacad68699f2691b0083ca913f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.24.0/22
                IPv6:
                  2803:4d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:39:4f:fb:e9:cf:28:7e:be:3a:41:60:91:98:56:10:10:22:
         ca:51:63:d5:42:b5:28:13:d4:16:05:99:99:f8:81:6b:2d:83:
         ed:03:ed:21:46:d3:ca:4a:eb:e3:f8:78:91:55:68:3c:c0:45:
         c2:6a:a6:19:7d:85:5d:8f:36:0e:d1:42:86:78:86:c1:32:09:
         8a:3d:b6:f6:75:4f:46:91:dd:3c:92:b8:86:66:07:7f:f3:e6:
         4d:4d:7e:c1:e0:17:b9:50:a1:ac:c0:b5:e6:13:bc:2b:20:a2:
         f6:ac:d3:de:ff:5f:0a:90:b9:59:55:9a:0a:fb:78:50:77:d8:
         06:b6:9b:9f:44:74:a2:20:55:26:06:08:cf:ff:5e:9b:71:63:
         fa:c3:a3:0f:59:52:fe:33:f1:9d:23:56:77:a4:81:1e:28:07:
         32:43:d5:72:e7:30:1e:8a:15:93:ad:2d:60:d2:49:33:00:3f:
         dc:28:06:72:a2:9f:17:9d:75:d0:67:1c:b9:7e:58:dc:98:bd:
         7a:22:4f:ed:5c:69:22:9e:d9:42:b0:8f:a4:03:47:f9:52:51:
         a4:26:db:f1:b0:1b:c6:87:5f:bc:f1:cc:f6:1f:e5:76:03:55:
         d3:0d:e9:20:21:7d:8d:36:83:b6:f9:f0:fa:6f:e7:88:b3:bd:
         8b:7d:47:49
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOGFj
ZmM0NTgyODVkOGJjYWNhZDY4Njk5ZjI2OTFiMDA4M2NhOTEzZjAeFw0yMTA1MTEw
MzAwMDBaFw0yMzA1MTEwMzAwMDBaMDMxMTAvBgNVBAMTKGIxM2I5YWE3YTgzODQ4
NGRhZGFkNmZhYmU5YzhlYTIzODEzOTk3NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIdTdGhkAQTQ/V9f3y25/BFnK6Vw5lhUUiheoZAy4P6aDE9gnZ
7OyxqGprybDorouhcvBJQybG/AEirPWL6vf1u3sVCvBNduNHsOy0zzFN3aaFmVg5
am9p/eIcXGYVB0RLvJj7zULveW8Wo/5DqiHdrBeT6jiZzpbJTuHckb2yLzKHo+JX
HL+f0nAFHOoRprMYbM1yeIUxSPt4NvgtNA7VW1DFYRRjvC/zF51f4ZfNTfSoSZtm
4/bcLqLT5s5R7gQCEptiN6JLCM2iYcWGXco6ZGomNm59U1lGv/oyio8QtGg7C/kj
jnJopAXZh71xNZqCVDZyU6eEMtLpNgoCJTsXAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQU1QPFwnNA4YicMJIkM7TD9KOz4+0wHwYDVR0jBBgwFoAUh/NPYCIb90aQbE8I
EftneSXdOnwwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84YWNmYzQ1
ODI4NWQ4YmNhY2FkNjg2OTlmMjY5MWIwMDgzY2E5MTNmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy83OGEyMTY4ZS0wNjI0LTRlZDEtOTBhNS1jYzQwYzky
MDQxMmUvYjEzYjlhYTdhODM4NDg0ZGFkYWQ2ZmFiZTljOGVhMjM4MTM5OTc1YS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzc4YTIxNjhlLTA2MjQtNGVkMS05MGE1LWNjNDBj
OTIwNDEyZS84YWNmYzQ1ODI4NWQ4YmNhY2FkNjg2OTlmMjY5MWIwMDgzY2E5MTNm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCqLUYMA0EAgACMAcDBQAoA01AMA0GCSqGSIb3DQEBCwUAA4IB
AQAuOU/76c8ofr46QWCRmFYQECLKUWPVQrUoE9QWBZmZ+IFrLYPtA+0hRtPKSuvj
+HiRVWg8wEXCaqYZfYVdjzYO0UKGeIbBMgmKPbb2dU9Gkd08kriGZgd/8+ZNTX7B
4Be5UKGswLXmE7wrIKL2rNPe/18KkLlZVZoK+3hQd9gGtpufRHSiIFUmBgjP/16b
cWP6w6MPWVL+M/GdI1Z3pIEeKAcyQ9Vy5zAeihWTrS1g0kkzAD/cKAZyop8XnXXQ
Zxy5fljcmL16Ik/tXGkintlCsI+kA0f5UlGkJtvxsBvGh1+88cz2H+V2A1XTDekg
IX2NNoO2+fD6b+eIs72LfUdJ
-----END CERTIFICATE-----