Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c490e7c-66be-4a96-a8e6-2b42e6969247/f3a8a78f5f2f3ad322595e68adaa9618789c7522.roa
File:                     f3a8a78f5f2f3ad322595e68adaa9618789c7522.roa (raw, json)
Hash identifier:          CmUVDQnEsInNOU4CDKq5E9I6bylbqZ/KKgcNbAmtUuk=
Subject key identifier:   1E:35:32:8E:AF:1A:18:41:DE:D1:17:CA:AC:81:14:9D:B8:D5:D9:28
Certificate issuer:       /CN=88cc89a416abd550bf2ff234cbb6aa1bcee5b99c
Certificate serial:       0C1C
Authority key identifier: 3A:7F:3E:2F:52:E2:2E:A5:FF:8F:AB:9C:09:27:16:CE:6F:BE:6B:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88cc89a416abd550bf2ff234cbb6aa1bcee5b99c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c490e7c-66be-4a96-a8e6-2b42e6969247/f3a8a78f5f2f3ad322595e68adaa9618789c7522.roa
Signing time:             Mon 22 May 2023 19:11:20 +0000
ROA not before:           Sun 21 May 2023 19:11:20 +0000
ROA not after:            Thu 22 May 2025 19:11:20 +0000
asID:                     263768
IP address blocks:        138.99.128.0/22 maxlen: 24
                          170.81.212.0/22 maxlen: 24
                          2803:6840::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3100 (0xc1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cc89a416abd550bf2ff234cbb6aa1bcee5b99c
        Validity
            Not Before: May 21 19:11:20 2023 GMT
            Not After : May 22 19:11:20 2025 GMT
        Subject: CN=f3a8a78f5f2f3ad322595e68adaa9618789c7522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:8c:6b:59:bc:2d:a8:30:cc:4b:7b:e3:0d:
                    65:50:ac:c6:0e:6a:a6:63:59:7c:03:6b:ca:7a:79:
                    9c:e6:ec:b0:ea:47:fc:98:e3:bf:ad:9b:01:21:10:
                    2b:94:53:41:91:8d:7f:b5:0d:c2:ac:ea:17:6c:4d:
                    c1:17:12:47:ba:79:70:64:67:95:dd:1e:18:a6:a8:
                    4b:11:92:49:14:24:db:5f:2a:08:0f:e0:13:c0:f9:
                    c5:7e:68:df:11:d6:5c:60:e2:50:be:ef:3d:e5:9c:
                    e2:a9:0e:f0:96:26:4e:1f:e8:47:44:35:17:b2:27:
                    45:4c:c4:c1:f2:1e:6a:de:c4:09:05:e2:6b:b7:71:
                    75:d2:a0:7c:70:88:a1:ca:d7:9b:eb:2c:1f:d9:53:
                    9b:11:2d:93:26:e2:3f:89:47:ff:ff:1f:30:67:27:
                    eb:e2:a5:82:69:57:be:51:7d:ac:5a:95:b5:69:aa:
                    e7:d6:54:a2:83:ba:2b:92:46:b9:f0:b7:da:c2:c2:
                    20:3d:38:d0:d7:48:df:77:fd:15:a9:27:a7:1e:aa:
                    c3:4b:59:1d:d1:59:f2:97:bf:e6:27:32:1c:4b:25:
                    16:b5:97:a2:dc:7c:29:8c:eb:fc:88:1e:c4:21:9a:
                    37:5d:70:75:73:df:bb:b4:da:52:8a:6e:2c:47:e0:
                    89:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:35:32:8E:AF:1A:18:41:DE:D1:17:CA:AC:81:14:9D:B8:D5:D9:28
            X509v3 Authority Key Identifier:
                keyid:3A:7F:3E:2F:52:E2:2E:A5:FF:8F:AB:9C:09:27:16:CE:6F:BE:6B:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88cc89a416abd550bf2ff234cbb6aa1bcee5b99c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c490e7c-66be-4a96-a8e6-2b42e6969247/f3a8a78f5f2f3ad322595e68adaa9618789c7522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c490e7c-66be-4a96-a8e6-2b42e6969247/88cc89a416abd550bf2ff234cbb6aa1bcee5b99c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.128.0/22
                  170.81.212.0/22
                IPv6:
                  2803:6840::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:00:0b:65:e8:e1:76:92:54:b7:34:20:68:8b:f5:f3:05:55:
         02:e1:1a:0f:4a:42:47:7d:ca:18:18:56:1e:6c:87:64:47:ce:
         20:39:d6:03:30:41:66:94:c0:a7:7e:8a:80:b2:b5:7c:39:ed:
         4f:9e:6b:66:77:15:75:a9:bc:78:42:40:0c:6c:73:b6:e6:4f:
         a7:d1:d6:78:29:4e:b5:7f:18:da:8e:92:89:ee:62:40:ba:e6:
         bb:2e:1d:5b:8b:4d:89:32:69:0f:1a:09:3d:41:89:2a:dc:7c:
         be:25:79:4b:9a:a2:ed:29:ce:ac:b6:7f:56:d7:8f:8e:51:29:
         4d:ec:85:41:33:8a:d9:dd:3d:bf:27:92:37:2d:69:0f:2c:ae:
         4b:54:49:22:f7:72:0f:d1:2d:f1:63:98:39:04:cc:a8:94:3f:
         14:dc:70:82:5b:62:8a:64:52:14:00:99:b6:04:a8:b4:5e:9f:
         fd:97:35:09:06:0d:15:5d:75:62:8e:2a:15:5b:ec:e0:33:65:
         28:16:42:d9:d3:f4:3c:b6:55:c7:1e:65:55:ab:43:2e:20:29:
         75:4c:7a:53:6a:38:18:b0:95:d5:cc:9d:7f:71:29:2b:fd:93:
         6c:81:62:fe:53:11:2c:88:be:36:4b:2b:b8:fb:ec:56:3d:97:
         5e:b7:d9:f0
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICDBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODhj
Yzg5YTQxNmFiZDU1MGJmMmZmMjM0Y2JiNmFhMWJjZWU1Yjk5YzAeFw0yMzA1MjEx
OTExMjBaFw0yNTA1MjIxOTExMjBaMDMxMTAvBgNVBAMTKGYzYThhNzhmNWYyZjNh
ZDMyMjU5NWU2OGFkYWE5NjE4Nzg5Yzc1MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCKEYxrWbwtqDDMS3vjDWVQrMYOaqZjWXwDa8p6eZzm7LDqR/yY
47+tmwEhECuUU0GRjX+1DcKs6hdsTcEXEke6eXBkZ5XdHhimqEsRkkkUJNtfKggP
4BPA+cV+aN8R1lxg4lC+7z3lnOKpDvCWJk4f6EdENReyJ0VMxMHyHmrexAkF4mu3
cXXSoHxwiKHK15vrLB/ZU5sRLZMm4j+JR///HzBnJ+vipYJpV75RfaxalbVpqufW
VKKDuiuSRrnwt9rCwiA9ONDXSN93/RWpJ6ceqsNLWR3RWfKXv+YnMhxLJRa1l6Lc
fCmM6/yIHsQhmjddcHVz37u02lKKbixH4IllAgMBAAGjggJwMIICbDAdBgNVHQ4E
FgQUHjUyjq8aGEHe0RfKrIEUnbjV2SgwHwYDVR0jBBgwFoAUOn8+L1LiLqX/j6uc
CScWzm++az8wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84OGNjODlh
NDE2YWJkNTUwYmYyZmYyMzRjYmI2YWExYmNlZTViOTljLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy84YzQ5MGU3Yy02NmJlLTRhOTYtYThlNi0yYjQyZTY5
NjkyNDcvZjNhOGE3OGY1ZjJmM2FkMzIyNTk1ZTY4YWRhYTk2MTg3ODljNzUyMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzhjNDkwZTdjLTY2YmUtNGE5Ni1hOGU2LTJiNDJl
Njk2OTI0Ny84OGNjODlhNDE2YWJkNTUwYmYyZmYyMzRjYmI2YWExYmNlZTViOTlj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUw
IzASBAIAATAMAwQCimOAAwQCqlHUMA0EAgACMAcDBQAoA2hAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXAAtl6OF2klS3NCBoi/XzBVUC4RoPSkJHfcoYGFYebIdkR84gOdYD
MEFmlMCnfoqAsrV8Oe1PnmtmdxV1qbx4QkAMbHO25k+n0dZ4KU61fxjajpKJ7mJA
uua7Lh1bi02JMmkPGgk9QYkq3Hy+JXlLmqLtKc6stn9W14+OUSlN7IVBM4rZ3T2/
J5I3LWkPLK5LVEki93IP0S3xY5g5BMyolD8U3HCCW2KKZFIUAJm2BKi0Xp/9lzUJ
Bg0VXXVijioVW+zgM2UoFkLZ0/Q8tlXHHmVVq0MuICl1THpTajgYsJXVzJ1/cSkr
/ZNsgWL+UxEsiL42Syu4++xWPZdet9nw
-----END CERTIFICATE-----