Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/ecb777c20bb5fe559615843a70c9b628701249fa.roa
File:                     ecb777c20bb5fe559615843a70c9b628701249fa.roa (raw, json)
Hash identifier:          lGKiZPawTVn6xVhEbhxoOgHtdH2oaN8ikaooA7VjoII=
Subject key identifier:   D0:FA:09:49:1C:D8:DC:44:A5:FC:97:23:43:F5:6B:63:0C:AC:52:AD
Certificate issuer:       /CN=50b342d0318aade2e11dbe4798c7733532e7ee94
Certificate serial:       0204
Authority key identifier: 05:A3:C3:43:C5:18:68:BD:78:57:F9:E2:4A:7E:F7:E9:01:12:DD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50b342d0318aade2e11dbe4798c7733532e7ee94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/ecb777c20bb5fe559615843a70c9b628701249fa.roa
Signing time:             Mon 11 Apr 2022 20:07:14 +0000
ROA not before:           Mon 11 Apr 2022 03:00:00 +0000
ROA not after:            Thu 11 Apr 2024 03:00:00 +0000
asID:                     272031
IP address blocks:        181.189.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b342d0318aade2e11dbe4798c7733532e7ee94
        Validity
            Not Before: Apr 11 03:00:00 2022 GMT
            Not After : Apr 11 03:00:00 2024 GMT
        Subject: CN=ecb777c20bb5fe559615843a70c9b628701249fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cb:5b:a9:f9:96:21:2f:79:b0:1b:7d:a4:27:
                    19:b8:39:c0:5e:2a:b0:51:a9:02:c6:61:ff:03:45:
                    ae:11:04:0c:5f:93:ea:f2:c1:a5:59:30:e7:71:94:
                    8f:1e:05:bf:8a:27:a9:e6:cf:76:1c:e3:c9:58:b0:
                    34:be:06:66:33:38:48:85:b4:cd:d5:6d:1c:1e:9b:
                    b4:78:d5:e6:d8:94:37:a8:e6:35:b0:60:6f:45:c0:
                    4e:a9:48:17:d8:56:32:a7:3d:d1:39:48:19:bd:08:
                    31:df:0f:22:18:ae:f7:3a:22:df:68:cb:9d:fe:72:
                    a8:0d:9f:88:ab:b4:e7:2b:b9:8b:bf:81:2a:e0:ac:
                    b4:40:1d:1b:cc:54:3f:35:57:fc:d9:4b:02:bc:b7:
                    1a:b5:3d:c7:79:ca:15:c0:67:63:f7:f5:5d:e3:7e:
                    f4:f9:89:ed:58:e7:1b:a2:fd:8b:5e:67:29:23:2e:
                    d2:94:e0:cd:51:d6:19:ff:ed:c4:6e:00:6c:32:10:
                    ed:00:d5:1f:74:03:39:64:47:3a:30:13:73:af:6e:
                    63:49:5e:89:ed:78:85:a2:65:e5:89:3b:3c:87:bb:
                    61:f8:94:f4:40:1b:32:37:2c:e8:16:7e:8e:a0:e3:
                    35:52:af:cd:02:8d:1e:b7:99:78:82:16:15:41:97:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FA:09:49:1C:D8:DC:44:A5:FC:97:23:43:F5:6B:63:0C:AC:52:AD
            X509v3 Authority Key Identifier:
                keyid:05:A3:C3:43:C5:18:68:BD:78:57:F9:E2:4A:7E:F7:E9:01:12:DD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50b342d0318aade2e11dbe4798c7733532e7ee94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/ecb777c20bb5fe559615843a70c9b628701249fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/50b342d0318aade2e11dbe4798c7733532e7ee94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:a5:79:df:99:db:c2:57:9e:20:8d:46:a6:2b:e9:89:ed:89:
         68:ab:e7:0b:4a:f0:a0:90:c7:cd:42:4c:be:2b:a5:6e:82:a0:
         5e:1d:5b:6c:04:23:80:ce:08:f8:8e:47:02:9e:60:05:9b:cd:
         4e:6e:80:eb:ea:d9:b4:a2:62:94:cd:07:fe:c8:59:0a:8e:70:
         64:15:0a:77:3a:e8:96:b0:22:0b:63:1d:3b:b5:a9:01:f3:51:
         45:9c:e1:54:d7:ef:8f:da:df:ad:3d:04:38:53:5f:3d:c4:b1:
         fd:d3:98:17:f0:1b:de:82:dd:cb:72:3d:38:32:dd:4d:27:ed:
         07:12:b5:b9:3b:86:ba:aa:0e:56:8c:f1:11:c3:94:0c:7c:aa:
         32:e0:b0:9f:46:ef:73:22:26:fa:34:46:89:91:89:f1:ff:8a:
         0d:70:09:03:2d:67:02:77:66:75:d9:4d:24:21:e6:a2:4d:df:
         3e:f8:b2:86:19:c7:62:a3:95:56:7d:e5:81:4d:20:98:80:42:
         34:c0:9c:06:c3:d6:74:67:fb:74:33:34:31:56:ff:db:9c:fb:
         c4:e3:9c:85:56:64:b4:f4:a9:f9:32:be:3a:a2:2c:51:f7:01:
         e7:55:88:e2:95:c9:0b:c4:4c:31:ef:54:bf:73:93:4b:0b:93:
         ba:07:51:71
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTBi
MzQyZDAzMThhYWRlMmUxMWRiZTQ3OThjNzczMzUzMmU3ZWU5NDAeFw0yMjA0MTEw
MzAwMDBaFw0yNDA0MTEwMzAwMDBaMDMxMTAvBgNVBAMTKGVjYjc3N2MyMGJiNWZl
NTU5NjE1ODQzYTcwYzliNjI4NzAxMjQ5ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCby1up+ZYhL3mwG32kJxm4OcBeKrBRqQLGYf8DRa4RBAxfk+ry
waVZMOdxlI8eBb+KJ6nmz3Yc48lYsDS+BmYzOEiFtM3VbRwem7R41ebYlDeo5jWw
YG9FwE6pSBfYVjKnPdE5SBm9CDHfDyIYrvc6It9oy53+cqgNn4irtOcruYu/gSrg
rLRAHRvMVD81V/zZSwK8txq1Pcd5yhXAZ2P39V3jfvT5ie1Y5xui/YteZykjLtKU
4M1R1hn/7cRuAGwyEO0A1R90AzlkRzowE3OvbmNJXonteIWiZeWJOzyHu2H4lPRA
GzI3LOgWfo6g4zVSr80CjR63mXiCFhVBl3VZAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQU0PoJSRzY3ESl/JcjQ/VrYwysUq0wHwYDVR0jBBgwFoAUBaPDQ8UYaL14V/ni
Sn736QES3a0wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81MGIzNDJk
MDMxOGFhZGUyZTExZGJlNDc5OGM3NzMzNTMyZTdlZTk0LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy84OWRiYTMwZS1mMWE1LTQxNzItYjlmMi1lNDkyNGEx
OGRhNzgvZWNiNzc3YzIwYmI1ZmU1NTk2MTU4NDNhNzBjOWI2Mjg3MDEyNDlmYS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzg5ZGJhMzBlLWYxYTUtNDE3Mi1iOWYyLWU0OTI0
YTE4ZGE3OC81MGIzNDJkMDMxOGFhZGUyZTExZGJlNDc5OGM3NzMzNTMyZTdlZTk0
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCtb0UMA0GCSqGSIb3DQEBCwUAA4IBAQARpXnfmdvCV54gjUam
K+mJ7Yloq+cLSvCgkMfNQky+K6VugqBeHVtsBCOAzgj4jkcCnmAFm81OboDr6tm0
omKUzQf+yFkKjnBkFQp3OuiWsCILYx07takB81FFnOFU1++P2t+tPQQ4U189xLH9
05gX8Bvegt3Lcj04Mt1NJ+0HErW5O4a6qg5WjPERw5QMfKoy4LCfRu9zIib6NEaJ
kYnx/4oNcAkDLWcCd2Z12U0kIeaiTd8++LKGGcdio5VWfeWBTSCYgEI0wJwGw9Z0
Z/t0MzQxVv/bnPvE45yFVmS09Kn5Mr46oixR9wHnVYjilckLxEwx71S/c5NLC5O6
B1Fx
-----END CERTIFICATE-----