Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/880bcda4-209a-4560-87e2-fe84a30d89ed/1de75636e6cc010fb6e1be10301fff06cb0228dc.roa
File:                     1de75636e6cc010fb6e1be10301fff06cb0228dc.roa (raw, json)
Hash identifier:          uRSIM/j3AMYGtsRTq+qBB7WKr6w5/3tbf97gZ0ghE7o=
Subject key identifier:   33:E6:09:8B:E3:12:1A:87:E9:8A:4E:66:09:54:BC:0D:59:09:F6:B9
Certificate issuer:       /CN=c962dbcf6b83d3c3a31e21906f96e54ebd71db92
Certificate serial:       12BB7C
Authority key identifier: F1:99:C9:C7:87:B6:0E:83:A7:9B:7D:3F:FF:03:33:94:6E:D2:82:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c962dbcf6b83d3c3a31e21906f96e54ebd71db92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/880bcda4-209a-4560-87e2-fe84a30d89ed/1de75636e6cc010fb6e1be10301fff06cb0228dc.roa
Signing time:             Mon 22 Aug 2022 19:10:01 +0000
ROA not before:           Wed 24 Mar 2021 14:48:05 +0000
ROA not after:            Tue 24 Mar 2026 14:48:05 +0000
asID:                     270042
IP address blocks:        200.35.148.0/22 maxlen: 24
                          2803:f5e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227644 (0x12bb7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c962dbcf6b83d3c3a31e21906f96e54ebd71db92
        Validity
            Not Before: Mar 24 14:48:05 2021 GMT
            Not After : Mar 24 14:48:05 2026 GMT
        Subject: CN=1de75636e6cc010fb6e1be10301fff06cb0228dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:1d:ab:a3:95:d3:57:ac:34:33:51:b5:bc:
                    6c:e0:85:af:cf:6b:c0:d5:47:15:67:b7:25:a3:09:
                    e1:31:74:22:f4:f1:3b:8a:94:1f:32:3f:f5:79:6c:
                    df:97:a8:c6:ea:59:bf:0a:af:2c:fa:4c:34:7b:2c:
                    65:b1:97:3f:2b:a3:ee:72:65:af:e8:e4:ae:70:20:
                    a9:1c:6a:93:72:b9:1a:13:6d:88:22:e6:37:b7:20:
                    6f:c8:0f:7d:63:01:e0:c3:a0:e7:bb:92:70:c2:43:
                    f2:ab:33:a7:2a:df:9e:7f:7e:af:10:94:81:78:26:
                    52:98:46:b4:a0:47:1f:83:cc:f7:4b:03:48:44:ab:
                    dc:8e:2c:ba:06:30:4f:d2:01:aa:c6:e6:df:23:b6:
                    7a:b9:c4:12:d6:2e:09:1e:b9:aa:d7:fa:6b:f8:cc:
                    ab:7b:2e:fd:bc:ce:76:c9:de:90:69:92:15:dc:68:
                    b5:eb:be:39:9b:6f:1d:8b:55:18:7f:13:49:ef:f8:
                    27:b7:51:27:a4:33:cb:80:de:8a:7f:82:8c:3a:41:
                    96:d5:6e:f1:d6:d8:89:37:9c:8b:c7:04:b7:30:1a:
                    5b:be:ea:4b:78:28:d2:99:b0:0b:b5:fb:c1:2c:38:
                    c0:47:ac:f4:76:97:57:a8:00:a3:c3:2d:9e:46:60:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E6:09:8B:E3:12:1A:87:E9:8A:4E:66:09:54:BC:0D:59:09:F6:B9
            X509v3 Authority Key Identifier:
                keyid:F1:99:C9:C7:87:B6:0E:83:A7:9B:7D:3F:FF:03:33:94:6E:D2:82:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c962dbcf6b83d3c3a31e21906f96e54ebd71db92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/880bcda4-209a-4560-87e2-fe84a30d89ed/1de75636e6cc010fb6e1be10301fff06cb0228dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/880bcda4-209a-4560-87e2-fe84a30d89ed/c962dbcf6b83d3c3a31e21906f96e54ebd71db92.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.148.0/22
                IPv6:
                  2803:f5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:b7:41:bc:4b:b7:c0:bb:b6:a4:50:46:6d:31:7a:c6:ea:45:
         c9:3a:dd:fc:27:f2:44:16:01:cb:17:13:3a:54:06:a3:3a:3d:
         43:fb:06:47:f9:fc:b7:2d:d1:6e:d0:c6:c0:08:48:a4:6c:c3:
         3d:5d:9f:f3:6b:b6:f4:be:bc:20:cd:ed:32:3c:33:59:95:12:
         44:64:c5:3c:9a:9a:8b:27:9c:d4:81:a8:d5:ac:47:24:fe:83:
         ec:27:86:d9:2a:2b:5b:79:4d:e5:f6:65:d7:99:4e:4b:f8:f2:
         a1:22:52:0b:62:1a:09:38:91:15:c0:d0:5e:30:4c:87:ba:03:
         15:e3:c2:14:53:00:36:05:86:7d:8b:78:65:53:1f:b4:14:7f:
         db:c8:92:9a:21:8a:9b:8b:f7:43:c5:a6:3b:96:03:79:ab:3e:
         44:69:98:8d:90:84:74:49:8b:b3:06:4d:a8:1c:e8:96:88:fe:
         c7:7d:3f:43:63:68:34:ab:f1:54:6d:7a:2c:57:d2:97:60:26:
         fd:bc:ca:96:7d:cc:1a:66:07:d9:7a:28:49:57:da:47:c7:92:
         fe:0b:33:06:e9:c1:99:94:7f:0a:8a:87:f1:2d:d2:cd:6f:98:
         e2:43:00:f6:c5:d3:0f:9e:8c:a2:76:7e:48:97:ce:0f:ae:46:
         7f:af:a0:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDErt8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
NjJkYmNmNmI4M2QzYzNhMzFlMjE5MDZmOTZlNTRlYmQ3MWRiOTIwHhcNMjEwMzI0
MTQ0ODA1WhcNMjYwMzI0MTQ0ODA1WjAzMTEwLwYDVQQDEygxZGU3NTYzNmU2Y2Mw
MTBmYjZlMWJlMTAzMDFmZmYwNmNiMDIyOGRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlrEdq6OV01esNDNRtbxs4IWvz2vA1UcVZ7clownhMXQi9PE7
ipQfMj/1eWzfl6jG6lm/Cq8s+kw0eyxlsZc/K6PucmWv6OSucCCpHGqTcrkaE22I
IuY3tyBvyA99YwHgw6Dnu5JwwkPyqzOnKt+ef36vEJSBeCZSmEa0oEcfg8z3SwNI
RKvcjiy6BjBP0gGqxubfI7Z6ucQS1i4JHrmq1/pr+Myrey79vM52yd6QaZIV3Gi1
6745m28di1UYfxNJ7/gnt1EnpDPLgN6Kf4KMOkGW1W7x1tiJN5yLxwS3MBpbvupL
eCjSmbALtfvBLDjAR6z0dpdXqACjwy2eRmC7NwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFDPmCYvjEhqH6YpOZglUvA1ZCfa5MB8GA1UdIwQYMBaAFPGZyceHtg6Dp5t9
P/8DM5Ru0oL1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzk2MmRi
Y2Y2YjgzZDNjM2EzMWUyMTkwNmY5NmU1NGViZDcxZGI5Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODgwYmNkYTQtMjA5YS00NTYwLTg3ZTItZmU4NGEz
MGQ4OWVkLzFkZTc1NjM2ZTZjYzAxMGZiNmUxYmUxMDMwMWZmZjA2Y2IwMjI4ZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ODBiY2RhNC0yMDlhLTQ1NjAtODdlMi1mZTg0
YTMwZDg5ZWQvYzk2MmRiY2Y2YjgzZDNjM2EzMWUyMTkwNmY5NmU1NGViZDcxZGI5
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAsgjlDANBAIAAjAHAwUAKAP14DANBgkqhkiG9w0BAQsFAAOC
AQEAcLdBvEu3wLu2pFBGbTF6xupFyTrd/CfyRBYByxcTOlQGozo9Q/sGR/n8ty3R
btDGwAhIpGzDPV2f82u29L68IM3tMjwzWZUSRGTFPJqaiyec1IGo1axHJP6D7CeG
2SorW3lN5fZl15lOS/jyoSJSC2IaCTiRFcDQXjBMh7oDFePCFFMANgWGfYt4ZVMf
tBR/28iSmiGKm4v3Q8WmO5YDeas+RGmYjZCEdEmLswZNqBzoloj+x30/Q2NoNKvx
VG16LFfSl2Am/bzKln3MGmYH2XooSVfaR8eS/gszBunBmZR/CoqH8S3SzW+Y4kMA
9sXTD56MonZ+SJfOD65Gf6+gNQ==
-----END CERTIFICATE-----