Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/a9772ef9fe024d4c6660f6aa5b370881df18d18a.roa
File:                     a9772ef9fe024d4c6660f6aa5b370881df18d18a.roa (raw, json)
Hash identifier:          EVbs0ezTSFciJaCYpbvJZsrPU+N58TK87DugjTZrNVU=
Subject key identifier:   1E:27:F4:CA:39:FE:E3:C1:02:E3:A2:FA:A1:08:2E:6B:59:2A:86:DD
Certificate issuer:       /CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
Certificate serial:       0D3B93
Authority key identifier: F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/a9772ef9fe024d4c6660f6aa5b370881df18d18a.roa
Signing time:             Wed 24 Mar 2021 14:36:13 +0000
ROA not before:           Wed 24 Mar 2021 14:36:13 +0000
ROA not after:            Tue 24 Mar 2026 14:36:13 +0000
asID:                     52330
IP address blocks:        190.184.200.0/24 maxlen: 24
                          190.184.201.0/24 maxlen: 24
                          190.184.202.0/24 maxlen: 24
                          190.184.203.0/24 maxlen: 24
                          190.184.204.0/24 maxlen: 24
                          190.184.205.0/24 maxlen: 24
                          190.184.206.0/24 maxlen: 24
                          190.184.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867219 (0xd3b93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
        Validity
            Not Before: Mar 24 14:36:13 2021 GMT
            Not After : Mar 24 14:36:13 2026 GMT
        Subject: CN=a9772ef9fe024d4c6660f6aa5b370881df18d18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:57:44:80:ab:74:0f:b3:74:5b:d4:22:36:
                    22:81:1a:dc:80:a5:ee:9c:a1:4a:01:aa:a4:c2:84:
                    92:68:7c:64:b3:48:11:de:7a:0b:5f:64:cc:26:63:
                    8e:c7:20:86:b8:67:58:5a:ea:44:ca:d1:9c:00:c2:
                    91:24:ed:13:88:59:2d:8d:92:d9:d1:e8:b7:14:30:
                    31:82:f5:f8:18:a3:74:8f:96:73:62:93:f8:05:c9:
                    79:11:1f:fb:4d:03:0a:0a:92:de:4c:9f:ee:bd:d6:
                    5a:33:d5:ce:88:f1:78:9b:a1:96:49:2c:69:eb:81:
                    50:fc:cb:ff:3c:97:f6:39:b3:f1:07:46:26:bb:c0:
                    be:7b:84:5a:b9:ce:84:c5:a8:3a:80:87:7f:d8:55:
                    18:02:bd:d1:8b:32:4c:4b:35:ee:a4:b5:13:16:cf:
                    53:6d:de:2d:de:a8:10:a0:07:5f:1d:51:d3:13:97:
                    53:75:27:92:4a:d0:00:25:77:de:a3:70:26:b9:de:
                    76:aa:09:05:10:0a:8c:67:1c:6c:7f:ed:09:62:6d:
                    a5:96:10:86:49:ca:14:05:9b:76:35:ba:f4:c3:44:
                    1a:63:1f:ba:f5:e2:e6:8a:75:d7:be:a7:57:c2:27:
                    6f:e8:40:53:88:1a:9f:0e:da:41:66:c1:6b:f3:7f:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:27:F4:CA:39:FE:E3:C1:02:E3:A2:FA:A1:08:2E:6B:59:2A:86:DD
            X509v3 Authority Key Identifier:
                keyid:F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/a9772ef9fe024d4c6660f6aa5b370881df18d18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/ff1cca9f77f27742b485aae3810060fa869e1fa9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:37:1d:5c:56:f9:fa:fb:bc:5d:83:95:37:f8:50:8f:7d:40:
         ef:3e:bb:63:f9:b7:b4:91:3c:63:54:16:30:e0:1f:60:bc:f2:
         bd:4a:fa:db:11:7c:7d:9c:4e:57:ec:79:c8:55:ea:33:0b:4b:
         1b:39:c6:29:b8:a3:d3:91:8b:97:3b:3e:05:97:fa:06:6c:bd:
         3b:51:78:f5:c5:18:ce:6a:99:10:c6:c6:22:8d:03:55:f5:19:
         25:fa:2f:3b:b8:77:1a:ac:8f:66:a7:cb:84:d8:a6:a6:27:8e:
         b1:08:69:ec:1a:54:5f:9d:fc:43:08:2c:5b:24:52:2f:ce:8a:
         9f:7b:a8:f1:f6:86:81:00:c1:ff:b2:c2:a3:fc:c2:1a:ea:e8:
         f7:9e:ab:eb:04:2e:c6:55:0b:34:58:db:f4:2d:94:e7:6a:ff:
         ee:89:b5:16:45:cf:c6:b0:3d:70:5b:d8:4a:8c:b4:bc:96:f6:
         13:cb:7b:89:0a:6c:ad:eb:76:93:e0:bf:0b:9a:27:c7:26:6d:
         77:1e:b7:05:65:e2:7c:fe:0c:4c:59:11:4a:0e:59:80:c3:57:
         46:1d:03:75:33:19:82:2a:4d:f0:62:f1:a0:e9:f2:bd:bc:1a:
         3c:3b:b7:fc:3a:b7:e3:36:9f:c5:51:c2:92:21:55:ca:dc:58:
         4f:a3:df:85
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDTuTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZm
MWNjYTlmNzdmMjc3NDJiNDg1YWFlMzgxMDA2MGZhODY5ZTFmYTkwHhcNMjEwMzI0
MTQzNjEzWhcNMjYwMzI0MTQzNjEzWjAzMTEwLwYDVQQDEyhhOTc3MmVmOWZlMDI0
ZDRjNjY2MGY2YWE1YjM3MDg4MWRmMThkMThhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjTVXRICrdA+zdFvUIjYigRrcgKXunKFKAaqkwoSSaHxks0gR
3noLX2TMJmOOxyCGuGdYWupEytGcAMKRJO0TiFktjZLZ0ei3FDAxgvX4GKN0j5Zz
YpP4Bcl5ER/7TQMKCpLeTJ/uvdZaM9XOiPF4m6GWSSxp64FQ/Mv/PJf2ObPxB0Ym
u8C+e4Rauc6Exag6gId/2FUYAr3RizJMSzXupLUTFs9Tbd4t3qgQoAdfHVHTE5dT
dSeSStAAJXfeo3Amud52qgkFEAqMZxxsf+0JYm2llhCGScoUBZt2Nbr0w0QaYx+6
9eLminXXvqdXwidv6EBTiBqfDtpBZsFr83/pDwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFB4n9Mo5/uPBAuOi+qEILmtZKobdMB8GA1UdIwQYMBaAFPLeArkpTNXdBf4O
JdfnHRb7vkX+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxY2Nh
OWY3N2YyNzc0MmI0ODVhYWUzODEwMDYwZmE4NjllMWZhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTFjNjY3NjAtZjk2Mi00NTc4LThmMDUtMmU2OTAy
Y2NjMmQ3L2E5NzcyZWY5ZmUwMjRkNGM2NjYwZjZhYTViMzcwODgxZGYxOGQxOGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MWM2Njc2MC1mOTYyLTQ1NzgtOGYwNS0yZTY5
MDJjY2MyZDcvZmYxY2NhOWY3N2YyNzc0MmI0ODVhYWUzODEwMDYwZmE4NjllMWZh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA764yDANBgkqhkiG9w0BAQsFAAOCAQEAIzcdXFb5+vu8XYOV
N/hQj31A7z67Y/m3tJE8Y1QWMOAfYLzyvUr62xF8fZxOV+x5yFXqMwtLGznGKbij
05GLlzs+BZf6Bmy9O1F49cUYzmqZEMbGIo0DVfUZJfovO7h3GqyPZqfLhNimpieO
sQhp7BpUX538QwgsWyRSL86Kn3uo8faGgQDB/7LCo/zCGuro956r6wQuxlULNFjb
9C2U52r/7om1FkXPxrA9cFvYSoy0vJb2E8t7iQpsret2k+C/C5onxyZtdx63BWXi
fP4MTFkRSg5ZgMNXRh0DdTMZgipN8GLxoOnyvbwaPDu3/Dq34zafxVHCkiFVytxY
T6PfhQ==
-----END CERTIFICATE-----