Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/49222b25e825d0b4913c99d713d90155dffc7ac9.roa
File:                     49222b25e825d0b4913c99d713d90155dffc7ac9.roa (raw, json)
Hash identifier:          0HauGCLc39HMXN57ggK9CmG+8VE72Lmd86N/QC3NrWs=
Subject key identifier:   53:ED:DC:25:41:49:5C:9D:A9:60:06:FC:EB:77:17:B0:CD:C9:8A:10
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E435B
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/49222b25e825d0b4913c99d713d90155dffc7ac9.roa
Signing time:             Wed 24 Mar 2021 14:39:08 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     52343
IP address blocks:        190.15.143.0/24 maxlen: 24
                          2800:68:15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934747 (0xe435b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=49222b25e825d0b4913c99d713d90155dffc7ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a2:39:11:7e:9a:21:80:37:88:38:ee:bc:ca:
                    35:a8:81:78:b3:c6:0b:e0:ad:9e:d2:1e:f5:80:30:
                    d2:75:4e:46:b0:b8:55:41:35:1d:a3:f9:ca:d5:60:
                    ed:b4:8b:76:59:05:4c:f6:dc:50:97:9d:73:c8:b8:
                    f0:e2:b3:57:b0:56:d3:02:46:39:70:54:17:49:87:
                    f5:d3:65:fa:95:8d:89:cf:44:2b:6c:b2:04:82:bb:
                    f5:87:ba:51:da:5a:90:c1:27:4a:01:7d:87:87:76:
                    6c:2f:b3:06:6c:db:7d:5d:2c:c4:29:6b:9c:37:ca:
                    e2:a0:e5:fa:d5:4e:c8:98:d9:46:d0:3a:68:21:06:
                    d6:0f:b5:4e:1d:a0:fa:03:6d:3e:b1:e2:4b:84:5c:
                    04:60:0d:36:21:cc:42:39:ed:3b:80:fb:cb:73:2e:
                    f6:b7:63:db:de:69:fb:c4:6e:0a:c6:d6:57:c0:eb:
                    97:50:71:57:70:17:ff:99:71:e0:4e:11:ad:77:4b:
                    ed:7f:46:cf:b0:19:e0:8e:fa:7e:bc:67:0e:1d:09:
                    2b:a9:1e:a6:c7:7b:35:bf:97:05:6d:70:d7:d5:2b:
                    d9:53:11:cf:4a:8d:59:81:66:44:2c:7d:34:d3:cb:
                    5a:d2:71:35:f4:db:d1:62:18:64:19:6e:d7:4b:bd:
                    8a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:ED:DC:25:41:49:5C:9D:A9:60:06:FC:EB:77:17:B0:CD:C9:8A:10
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/49222b25e825d0b4913c99d713d90155dffc7ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.143.0/24
                IPv6:
                  2800:68:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:2e:9e:bd:62:e4:52:ec:2d:35:9e:c8:c6:0d:6b:95:dc:83:
         a2:c0:1c:53:a1:82:f7:c7:4a:d9:52:ef:01:b9:fd:f9:db:56:
         31:32:f4:de:99:72:4b:6e:d7:02:b3:6b:07:83:2d:b9:a3:45:
         7a:1c:dc:b8:56:bc:f8:43:89:8f:c6:20:f7:99:7f:f4:0b:1a:
         c4:ae:73:0e:bf:36:b7:0b:5e:02:3f:1b:d6:6d:e6:37:5f:ed:
         b1:71:87:bc:03:13:75:d7:fb:63:66:1d:de:02:fa:dc:e2:b7:
         7d:1c:99:3b:49:75:f0:de:7e:fe:9a:05:af:8b:38:e8:56:f3:
         9a:f8:b7:1d:1f:b6:92:de:87:a2:2a:2c:c4:89:a2:02:0b:c7:
         7b:bd:55:95:c9:b0:26:29:bd:e6:94:99:39:34:de:55:4b:e5:
         71:2d:e3:3a:b0:08:67:80:93:5e:ab:ee:67:67:4d:2b:08:29:
         d6:cd:26:65:ed:d2:ba:b1:c0:ed:a7:ee:c9:bf:8e:0b:e1:9e:
         d7:62:a0:6e:86:92:73:5f:17:7f:89:14:fc:25:28:21:9d:3e:
         e9:f4:0b:cb:dc:b4:70:75:6a:a2:b5:ce:4e:06:e1:4f:cb:fa:
         42:93:13:fc:ff:e1:e2:03:d7:a1:d1:47:61:3e:ed:a3:d7:e4:
         72:ab:f2:00
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDDkNbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
YWU2OWQyZjExMWM3OTQxNjVhMDFhODY1ZmUxODdiODgzMTIyN2QwHhcNMjEwMzI0
MTQzOTA3WhcNMjYwMzI0MTQzOTA3WjAzMTEwLwYDVQQDEyg0OTIyMmIyNWU4MjVk
MGI0OTEzYzk5ZDcxM2Q5MDE1NWRmZmM3YWM5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgaI5EX6aIYA3iDjuvMo1qIF4s8YL4K2e0h71gDDSdU5GsLhV
QTUdo/nK1WDttIt2WQVM9txQl51zyLjw4rNXsFbTAkY5cFQXSYf102X6lY2Jz0Qr
bLIEgrv1h7pR2lqQwSdKAX2Hh3ZsL7MGbNt9XSzEKWucN8rioOX61U7ImNlG0Dpo
IQbWD7VOHaD6A20+seJLhFwEYA02IcxCOe07gPvLcy72t2Pb3mn7xG4KxtZXwOuX
UHFXcBf/mXHgThGtd0vtf0bPsBngjvp+vGcOHQkrqR6mx3s1v5cFbXDX1SvZUxHP
So1ZgWZELH0008ta0nE19NvRYhhkGW7XS72KjwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFFPt3CVBSVydqWAG/Ot3F7DNyYoQMB8GA1UdIwQYMBaAFIIUXtq2WB5z5L1U
YAk+zsl2C8SfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVhZTY5
ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGM3OTRiZDAtN2Q5NC00NDVmLTgyMzMtMTIwMGM5
YzZmMmVjLzQ5MjIyYjI1ZTgyNWQwYjQ5MTNjOTlkNzEzZDkwMTU1ZGZmYzdhYzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84Yzc5NGJkMC03ZDk0LTQ0NWYtODIzMy0xMjAw
YzljNmYyZWMvMDVhZTY5ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAL4PjzAPBAIAAjAJAwcAKAAAaAAVMA0GCSqGSIb3DQEBCwUA
A4IBAQANLp69YuRS7C01nsjGDWuV3IOiwBxToYL3x0rZUu8Buf3521YxMvTemXJL
btcCs2sHgy25o0V6HNy4Vrz4Q4mPxiD3mX/0CxrErnMOvza3C14CPxvWbeY3X+2x
cYe8AxN11/tjZh3eAvrc4rd9HJk7SXXw3n7+mgWvizjoVvOa+LcdH7aS3oeiKizE
iaICC8d7vVWVybAmKb3mlJk5NN5VS+VxLeM6sAhngJNeq+5nZ00rCCnWzSZl7dK6
scDtp+7Jv44L4Z7XYqBuhpJzXxd/iRT8JSghnT7p9AvL3LRwdWqitc5OBuFPy/pC
kxP8/+HiA9eh0UdhPu2j1+Ryq/IA
-----END CERTIFICATE-----