Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90a97deb-a1c8-4023-983e-43389d58b58b/bd5b0317c54a26dd959ca57eff119a557103ebbc.roa
File:                     bd5b0317c54a26dd959ca57eff119a557103ebbc.roa (raw, json)
Hash identifier:          wsNXsTDGJmGjOjewMOYKm0rbjLJQJPZNWHXdtcUYClM=
Subject key identifier:   AE:88:73:E6:13:64:B4:25:A0:9C:F2:C5:4A:EF:D9:0E:BC:EB:22:BE
Certificate issuer:       /CN=77e85f344c16fcc67393a4b9f8cd61a0e081c880
Certificate serial:       027C
Authority key identifier: 70:17:A1:12:93:0C:67:0B:19:B3:6B:FC:98:5A:E3:F1:D4:DF:40:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77e85f344c16fcc67393a4b9f8cd61a0e081c880.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90a97deb-a1c8-4023-983e-43389d58b58b/bd5b0317c54a26dd959ca57eff119a557103ebbc.roa
Signing time:             Mon 13 Jun 2022 15:48:48 +0000
ROA not before:           Mon 13 Jun 2022 03:00:00 +0000
ROA not after:            Thu 13 Jun 2024 03:00:00 +0000
asID:                     269932
IP address blocks:        190.93.184.0/22 maxlen: 24
                          2803:92e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e85f344c16fcc67393a4b9f8cd61a0e081c880
        Validity
            Not Before: Jun 13 03:00:00 2022 GMT
            Not After : Jun 13 03:00:00 2024 GMT
        Subject: CN=bd5b0317c54a26dd959ca57eff119a557103ebbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:4a:6b:41:c3:5e:bb:c6:8b:92:10:55:9e:
                    f2:fb:e1:eb:35:6e:74:c9:db:2e:cc:33:96:11:87:
                    88:67:21:d6:d2:50:74:30:aa:16:d5:31:3c:02:ad:
                    54:3a:f1:d4:8f:35:16:68:28:02:9d:8b:0f:ff:c9:
                    3d:4b:ab:c0:d1:be:32:50:11:32:9f:e0:75:5e:04:
                    f7:5b:75:c5:cc:d6:2e:00:6c:92:45:13:e9:0e:7b:
                    17:11:ba:8f:2e:24:87:9a:a2:ea:62:f0:37:4c:62:
                    9b:b2:49:c1:28:08:08:05:0d:09:bb:d1:6f:10:9e:
                    27:b5:85:86:c7:f0:37:38:73:98:34:bc:50:84:40:
                    bb:51:75:f8:80:28:57:2b:82:1e:15:26:d9:8b:14:
                    08:46:15:f6:a9:3f:a0:c3:b7:68:2f:26:f0:0b:fd:
                    99:d0:ef:31:58:a4:22:5f:0d:61:b9:8e:d2:3d:12:
                    6c:dd:d1:e9:b8:14:07:f2:be:69:1a:ad:e9:44:1b:
                    5d:49:9a:73:74:7e:aa:c7:83:d5:2d:a8:61:49:b6:
                    e1:fd:35:01:f9:a3:58:91:74:bf:01:af:1e:c7:79:
                    31:9f:c5:eb:f9:03:16:a3:87:13:6b:b1:40:ab:96:
                    97:bc:53:4a:ce:f5:29:c6:06:85:6b:32:57:61:5d:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:88:73:E6:13:64:B4:25:A0:9C:F2:C5:4A:EF:D9:0E:BC:EB:22:BE
            X509v3 Authority Key Identifier:
                keyid:70:17:A1:12:93:0C:67:0B:19:B3:6B:FC:98:5A:E3:F1:D4:DF:40:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77e85f344c16fcc67393a4b9f8cd61a0e081c880.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90a97deb-a1c8-4023-983e-43389d58b58b/bd5b0317c54a26dd959ca57eff119a557103ebbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90a97deb-a1c8-4023-983e-43389d58b58b/77e85f344c16fcc67393a4b9f8cd61a0e081c880.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.184.0/22
                IPv6:
                  2803:92e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:e1:7a:75:fe:d7:e7:94:fb:6b:eb:5b:fe:52:b8:f3:c3:b4:
         29:48:90:80:a5:91:96:86:61:26:a2:cc:98:24:9d:1b:24:14:
         3f:17:6a:8c:b4:09:53:0d:c2:76:90:5b:dc:8b:72:60:ff:27:
         23:d8:5e:f5:1f:b9:12:37:3b:33:08:17:c3:7f:f9:86:d5:90:
         05:c5:a9:f6:ad:7e:ab:32:09:2e:62:fd:71:b5:b3:79:b4:69:
         b7:89:05:0d:e9:31:84:df:b5:7d:e2:fc:c6:b6:de:8e:45:7d:
         0b:1d:52:30:64:bb:89:9a:87:50:5e:e4:b1:02:8c:ce:28:cf:
         80:6f:38:22:38:64:7c:19:44:ab:05:7b:e6:92:b3:cd:69:fe:
         12:bf:84:de:00:65:86:6d:c5:70:48:fe:9e:4f:23:d3:e9:fe:
         d4:e0:33:5c:dd:65:eb:13:df:58:89:dc:3d:a7:6d:5e:c6:b4:
         c9:9c:95:d7:fc:86:7d:a2:d3:0a:db:d2:7a:2c:18:5e:56:98:
         0c:f4:d6:2e:50:c3:ea:b4:13:a5:82:db:5a:eb:3d:b0:a0:f3:
         74:34:86:90:94:a9:6f:19:03:d6:6b:1e:a2:0b:19:c1:80:d8:
         c4:79:50:16:b9:fd:9d:9a:89:16:2b:d7:69:24:53:e9:3f:da:
         91:48:8d:f9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzdl
ODVmMzQ0YzE2ZmNjNjczOTNhNGI5ZjhjZDYxYTBlMDgxYzg4MDAeFw0yMjA2MTMw
MzAwMDBaFw0yNDA2MTMwMzAwMDBaMDMxMTAvBgNVBAMTKGJkNWIwMzE3YzU0YTI2
ZGQ5NTljYTU3ZWZmMTE5YTU1NzEwM2ViYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCje0prQcNeu8aLkhBVnvL74es1bnTJ2y7MM5YRh4hnIdbSUHQw
qhbVMTwCrVQ68dSPNRZoKAKdiw//yT1Lq8DRvjJQETKf4HVeBPdbdcXM1i4AbJJF
E+kOexcRuo8uJIeaoupi8DdMYpuyScEoCAgFDQm70W8Qnie1hYbH8Dc4c5g0vFCE
QLtRdfiAKFcrgh4VJtmLFAhGFfapP6DDt2gvJvAL/ZnQ7zFYpCJfDWG5jtI9Emzd
0em4FAfyvmkarelEG11JmnN0fqrHg9UtqGFJtuH9NQH5o1iRdL8Brx7HeTGfxev5
AxajhxNrsUCrlpe8U0rO9SnGBoVrMldhXXrZAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUrohz5hNktCWgnPLFSu/ZDrzrIr4wHwYDVR0jBBgwFoAUcBehEpMMZwsZs2v8
mFrj8dTfQGgwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS83N2U4NWYz
NDRjMTZmY2M2NzM5M2E0YjlmOGNkNjFhMGUwODFjODgwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85MGE5N2RlYi1hMWM4LTQwMjMtOTgzZS00MzM4OWQ1
OGI1OGIvYmQ1YjAzMTdjNTRhMjZkZDk1OWNhNTdlZmYxMTlhNTU3MTAzZWJiYy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzkwYTk3ZGViLWExYzgtNDAyMy05ODNlLTQzMzg5
ZDU4YjU4Yi83N2U4NWYzNDRjMTZmY2M2NzM5M2E0YjlmOGNkNjFhMGUwODFjODgw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCvl24MA0EAgACMAcDBQAoA5LgMA0GCSqGSIb3DQEBCwUAA4IB
AQAf4Xp1/tfnlPtr61v+Urjzw7QpSJCApZGWhmEmosyYJJ0bJBQ/F2qMtAlTDcJ2
kFvci3Jg/ycj2F71H7kSNzszCBfDf/mG1ZAFxan2rX6rMgkuYv1xtbN5tGm3iQUN
6TGE37V94vzGtt6ORX0LHVIwZLuJmodQXuSxAozOKM+AbzgiOGR8GUSrBXvmkrPN
af4Sv4TeAGWGbcVwSP6eTyPT6f7U4DNc3WXrE99Yidw9p21exrTJnJXX/IZ9otMK
29J6LBheVpgM9NYuUMPqtBOlgtta6z2woPN0NIaQlKlvGQPWax6iCxnBgNjEeVAW
uf2dmokWK9dpJFPpP9qRSI35
-----END CERTIFICATE-----