Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/9ab4c99934c48006c4dd5adb92ba8e9e6e2766f7.roa
File:                     9ab4c99934c48006c4dd5adb92ba8e9e6e2766f7.roa (raw, json)
Hash identifier:          FRhRTROAghTlcqgPnoTGZQculSwoBJ3iIHJ8hGaxCMo=
Subject key identifier:   48:4B:5A:57:27:20:F7:3F:CC:D2:0F:90:4F:91:B3:7D:38:97:D9:79
Certificate issuer:       /CN=f8caf642faab23f93e78dca96f7b8df57ece73a8
Certificate serial:       0FA9BA
Authority key identifier: 5F:47:E4:E5:C1:1D:A5:88:2A:CE:4D:2E:19:06:23:57:8F:B3:DC:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8caf642faab23f93e78dca96f7b8df57ece73a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/9ab4c99934c48006c4dd5adb92ba8e9e6e2766f7.roa
Signing time:             Fri 18 Jun 2021 17:34:31 +0000
ROA not before:           Fri 18 Jun 2021 03:00:00 +0000
ROA not after:            Sun 18 Jun 2023 03:00:00 +0000
asID:                     25620
IP address blocks:        190.171.192.0/18 maxlen: 24
                          190.180.0.0/17 maxlen: 24
                          190.186.0.0/17 maxlen: 24
                          190.186.128.0/17 maxlen: 24
                          190.186.208.0/20 maxlen: 24
                          190.186.224.0/19 maxlen: 24
                          192.223.64.0/18 maxlen: 24
                          200.58.160.0/19 maxlen: 24
                          200.119.192.0/19 maxlen: 24
                          201.222.64.0/18 maxlen: 24
                          2800:390::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1026490 (0xfa9ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8caf642faab23f93e78dca96f7b8df57ece73a8
        Validity
            Not Before: Jun 18 03:00:00 2021 GMT
            Not After : Jun 18 03:00:00 2023 GMT
        Subject: CN=9ab4c99934c48006c4dd5adb92ba8e9e6e2766f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:8b:e7:e0:8a:69:44:f4:18:33:95:a9:2b:
                    58:25:60:eb:b5:34:6e:e9:07:26:34:0f:f4:fe:24:
                    89:f2:c0:ed:d8:12:ca:c4:e4:6b:f0:41:ba:0b:cd:
                    c7:e7:63:30:c3:1d:eb:eb:f1:d4:61:a2:44:15:9a:
                    cc:00:09:60:19:07:7f:d1:6a:7b:c9:a4:a6:79:71:
                    da:5e:95:1d:66:20:06:c8:ee:79:5b:6c:fe:84:ac:
                    35:91:21:3d:17:64:96:ea:3a:f1:e6:c9:9b:ed:85:
                    73:de:b8:af:5f:6c:36:81:57:40:8a:b5:bf:ea:2a:
                    1d:a5:6e:8d:5c:ec:bf:14:bc:02:10:a8:e5:c4:98:
                    00:85:af:bb:12:1c:38:f9:26:a0:f9:37:5f:8b:cb:
                    34:f2:15:2e:14:76:f0:e6:42:8b:7c:1c:1e:a2:e4:
                    18:79:b1:f0:16:8a:96:10:c0:e4:41:05:bf:f5:b1:
                    91:46:66:64:0e:b2:ff:c6:05:af:68:70:ca:a7:e7:
                    b4:76:94:9d:8c:91:cd:9e:01:96:4a:92:61:f4:cf:
                    57:99:a2:ee:25:81:6f:a9:bc:9b:08:0d:0d:58:1c:
                    dd:09:2b:11:16:8d:3e:99:17:df:0f:0b:7b:f1:2e:
                    be:cf:9b:a4:3c:14:c9:a4:b1:be:c8:4d:c4:04:17:
                    0b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4B:5A:57:27:20:F7:3F:CC:D2:0F:90:4F:91:B3:7D:38:97:D9:79
            X509v3 Authority Key Identifier:
                keyid:5F:47:E4:E5:C1:1D:A5:88:2A:CE:4D:2E:19:06:23:57:8F:B3:DC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8caf642faab23f93e78dca96f7b8df57ece73a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/9ab4c99934c48006c4dd5adb92ba8e9e6e2766f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/f8caf642faab23f93e78dca96f7b8df57ece73a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.192.0/18
                  190.180.0.0/17
                  190.186.0.0/16
                  192.223.64.0/18
                  200.58.160.0/19
                  200.119.192.0/19
                  201.222.64.0/18
                IPv6:
                  2800:390::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:33:e6:b9:4c:61:6a:2a:c9:36:dc:3e:25:5b:9d:1c:a9:3d:
         c5:a9:2d:e8:f0:f1:dd:cb:1b:3f:6d:5a:fc:d6:17:ef:30:f8:
         75:cc:78:9d:3a:4c:fc:8f:f6:e7:c4:26:b2:df:cc:64:f9:17:
         94:84:62:62:c7:a0:dc:25:ab:2e:68:fb:da:3d:e0:84:ab:ab:
         7d:9d:a0:f0:04:aa:06:ec:55:01:27:74:c5:79:48:f9:c8:3e:
         ba:f5:16:ff:04:a4:aa:7d:77:f1:c6:09:87:f0:90:4a:5e:5f:
         c5:ae:42:69:aa:ef:1d:f8:1b:79:45:fb:6e:d9:39:b7:79:5a:
         c3:79:be:d1:cd:2d:5b:e5:82:5a:aa:67:64:29:93:a1:a2:0b:
         be:ed:a4:eb:70:5b:dc:32:f3:1a:3c:97:b4:a9:8a:44:3e:4a:
         0e:17:6b:24:47:11:2d:fb:ba:8f:32:8d:29:e9:fd:3f:38:4d:
         91:23:4e:0c:22:6d:fb:de:e8:ca:93:af:e4:01:22:12:17:75:
         29:c3:88:ad:e6:7a:a7:a3:19:32:2b:2a:82:d7:aa:51:c5:ed:
         db:12:62:6c:f0:d9:2c:38:74:a7:21:ae:6c:d9:f5:8e:ea:96:
         18:7b:ec:10:51:05:3b:c6:83:01:98:77:90:02:54:c5:e1:55:
         58:a1:f7:fd
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDD6m6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
Y2FmNjQyZmFhYjIzZjkzZTc4ZGNhOTZmN2I4ZGY1N2VjZTczYTgwHhcNMjEwNjE4
MDMwMDAwWhcNMjMwNjE4MDMwMDAwWjAzMTEwLwYDVQQDEyg5YWI0Yzk5OTM0YzQ4
MDA2YzRkZDVhZGI5MmJhOGU5ZTZlMjc2NmY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0NGL5+CKaUT0GDOVqStYJWDrtTRu6QcmNA/0/iSJ8sDt2BLK
xORr8EG6C83H52Mwwx3r6/HUYaJEFZrMAAlgGQd/0Wp7yaSmeXHaXpUdZiAGyO55
W2z+hKw1kSE9F2SW6jrx5smb7YVz3rivX2w2gVdAirW/6iodpW6NXOy/FLwCEKjl
xJgAha+7Ehw4+Sag+Tdfi8s08hUuFHbw5kKLfBweouQYebHwFoqWEMDkQQW/9bGR
RmZkDrL/xgWvaHDKp+e0dpSdjJHNngGWSpJh9M9XmaLuJYFvqbybCA0NWBzdCSsR
Fo0+mRffDwt78S6+z5ukPBTJpLG+yE3EBBcLOQIDAQABo4ICjTCCAokwHQYDVR0O
BBYEFEhLWlcnIPc/zNIPkE+Rs304l9l5MB8GA1UdIwQYMBaAFF9H5OXBHaWIKs5N
LhkGI1ePs9w+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjhjYWY2
NDJmYWFiMjNmOTNlNzhkY2E5NmY3YjhkZjU3ZWNlNzNhOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTc1NjU1NWQtOTYzZi00ZGQ3LWJlZWYtZmYyZTYw
ZmU0MzliLzlhYjRjOTk5MzRjNDgwMDZjNGRkNWFkYjkyYmE4ZTllNmUyNzY2Zjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NzU2NTU1ZC05NjNmLTRkZDctYmVlZi1mZjJl
NjBmZTQzOWIvZjhjYWY2NDJmYWFiMjNmOTNlNzhkY2E5NmY3YjhkZjU3ZWNlNzNh
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBRBggrBgEFBQcBBwEB/wRC
MEAwLwQCAAEwKQMEBr6rwAMEB760AAMDAL66AwQGwN9AAwQFyDqgAwQFyHfAAwQG
yd5AMA0EAgACMAcDBQAoAAOQMA0GCSqGSIb3DQEBCwUAA4IBAQA1M+a5TGFqKsk2
3D4lW50cqT3FqS3o8PHdyxs/bVr81hfvMPh1zHidOkz8j/bnxCay38xk+ReUhGJi
x6DcJasuaPvaPeCEq6t9naDwBKoG7FUBJ3TFeUj5yD669Rb/BKSqfXfxxgmH8JBK
Xl/FrkJpqu8d+Bt5Rftu2Tm3eVrDeb7RzS1b5YJaqmdkKZOhogu+7aTrcFvcMvMa
PJe0qYpEPkoOF2skRxEt+7qPMo0p6f0/OE2RI04MIm373ujKk6/kASISF3Upw4it
5nqnoxkyKyqC16pRxe3bEmJs8NksOHSnIa5s2fWO6pYYe+wQUQU7xoMBmHeQAlTF
4VVYoff9
-----END CERTIFICATE-----