Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/e452e87e16116803e22ebd971241e0b3f5b185af.roa
File:                     e452e87e16116803e22ebd971241e0b3f5b185af.roa (raw, json)
Hash identifier:          2R1KNnnOSf/KdKRHOYEO2BmXCAHyzAjNHw5XLXeTQs4=
Subject key identifier:   BD:E1:EA:C3:30:7B:DC:49:7B:9C:45:F2:B4:C4:61:1D:A4:67:6F:20
Certificate issuer:       /CN=ba5859ff065527ea9359c240f3194fa4ef3813c4
Certificate serial:       09150C
Authority key identifier: CF:D8:04:AE:22:D3:B0:07:20:FD:1B:00:5B:54:B2:3B:99:0B:4C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba5859ff065527ea9359c240f3194fa4ef3813c4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/e452e87e16116803e22ebd971241e0b3f5b185af.roa
Signing time:             Wed 24 Mar 2021 14:32:35 +0000
ROA not before:           Wed 24 Mar 2021 14:32:35 +0000
ROA not after:            Tue 24 Mar 2026 14:32:35 +0000
asID:                     263235
IP address blocks:        192.100.186.0/23 maxlen: 24
                          2803:70e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595212 (0x9150c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba5859ff065527ea9359c240f3194fa4ef3813c4
        Validity
            Not Before: Mar 24 14:32:35 2021 GMT
            Not After : Mar 24 14:32:35 2026 GMT
        Subject: CN=e452e87e16116803e22ebd971241e0b3f5b185af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:be:74:a8:a9:d5:59:36:e0:e3:f4:02:47:
                    88:80:2b:81:42:ea:80:0b:57:b6:fb:94:9f:4d:a6:
                    58:46:2b:7b:c7:97:b1:9f:df:b2:09:05:0d:4d:80:
                    b8:41:7e:5e:e1:35:9e:5d:36:4d:5f:aa:1a:ec:b1:
                    c7:60:1d:63:1b:9b:a5:7a:e6:25:34:80:6c:8c:7f:
                    c4:47:d3:d9:1e:51:99:2a:a1:60:73:d2:8f:cf:56:
                    ac:2b:8c:6d:00:f8:cf:e2:8b:c9:bc:a8:46:a8:93:
                    88:32:83:e9:c1:85:ce:5a:2f:d8:1f:c2:c3:41:55:
                    76:6e:c7:65:4d:f6:72:a0:31:98:f8:b7:a1:95:ad:
                    47:fa:f9:82:64:33:56:71:8d:81:01:af:16:af:5e:
                    74:1f:36:f4:a6:cf:9c:ae:64:41:89:6e:75:36:01:
                    84:79:b9:1d:13:fa:3f:d4:66:55:30:9d:70:ad:b5:
                    9b:9e:2d:cb:8b:f1:2a:d1:03:c3:c6:06:79:13:7a:
                    f6:91:ee:75:d3:ba:b3:81:76:b6:b7:07:c0:5a:cd:
                    2f:8d:c1:08:30:e1:e2:8c:88:1a:7f:28:9c:aa:38:
                    4c:10:96:71:c1:bb:9a:e3:58:49:ae:93:30:6d:3d:
                    7b:06:f9:3e:81:13:1e:cb:05:d8:47:86:d0:20:36:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E1:EA:C3:30:7B:DC:49:7B:9C:45:F2:B4:C4:61:1D:A4:67:6F:20
            X509v3 Authority Key Identifier:
                keyid:CF:D8:04:AE:22:D3:B0:07:20:FD:1B:00:5B:54:B2:3B:99:0B:4C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba5859ff065527ea9359c240f3194fa4ef3813c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/e452e87e16116803e22ebd971241e0b3f5b185af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9be1ebc2-be01-4e55-9a48-e6579052bef9/ba5859ff065527ea9359c240f3194fa4ef3813c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.186.0/23
                IPv6:
                  2803:70e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:2f:87:9a:47:f6:cf:c2:1c:ac:2a:37:88:bc:3e:a1:cd:7f:
         7c:02:d4:fd:a4:f3:8a:9b:d0:52:12:62:f5:b7:3b:26:2b:aa:
         5d:f0:eb:08:84:3d:e8:a9:e1:aa:38:fe:c1:0b:c6:a7:37:a1:
         ab:57:c5:00:3b:9b:d4:0e:c5:f9:dc:b7:6e:14:57:ff:11:83:
         19:b8:f7:16:a1:27:23:ae:1b:73:fb:c5:20:3b:73:b4:22:32:
         4d:8a:36:11:0c:2d:a5:ce:6b:f2:aa:bc:38:83:bc:b2:4a:bc:
         3b:c0:27:e7:dd:81:76:56:7c:55:f5:2e:d7:5a:7a:07:c9:45:
         62:15:a6:37:5f:cf:2f:a5:c9:23:c3:00:78:86:d2:e0:a7:b1:
         3a:ec:2d:0d:83:8b:11:e7:78:27:e1:c8:f3:e1:ae:e7:bf:3c:
         f9:e6:7f:33:e6:fb:bd:d2:45:63:6d:7d:ff:c5:37:03:94:6d:
         98:6a:59:bb:6b:2d:4d:69:60:e3:6b:7e:df:54:9f:97:14:9e:
         12:e2:56:d5:48:22:d2:0a:13:68:39:85:ca:19:3d:65:60:f6:
         4f:ec:2a:6f:a6:89:ff:39:bd:72:c5:e4:92:01:5a:f8:cd:33:
         9e:7a:e8:b6:92:ae:0f:7f:7c:fa:1f:5e:05:84:39:b6:1c:99:
         af:ea:78:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDCRUMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJh
NTg1OWZmMDY1NTI3ZWE5MzU5YzI0MGYzMTk0ZmE0ZWYzODEzYzQwHhcNMjEwMzI0
MTQzMjM1WhcNMjYwMzI0MTQzMjM1WjAzMTEwLwYDVQQDEyhlNDUyZTg3ZTE2MTE2
ODAzZTIyZWJkOTcxMjQxZTBiM2Y1YjE4NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmx++dKip1Vk24OP0AkeIgCuBQuqAC1e2+5SfTaZYRit7x5ex
n9+yCQUNTYC4QX5e4TWeXTZNX6oa7LHHYB1jG5uleuYlNIBsjH/ER9PZHlGZKqFg
c9KPz1asK4xtAPjP4ovJvKhGqJOIMoPpwYXOWi/YH8LDQVV2bsdlTfZyoDGY+Leh
la1H+vmCZDNWcY2BAa8Wr150Hzb0ps+crmRBiW51NgGEebkdE/o/1GZVMJ1wrbWb
ni3Li/Eq0QPDxgZ5E3r2ke5107qzgXa2twfAWs0vjcEIMOHijIgafyicqjhMEJZx
wbua41hJrpMwbT17Bvk+gRMeywXYR4bQIDYkdwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFL3h6sMwe9xJe5xF8rTEYR2kZ28gMB8GA1UdIwQYMBaAFM/YBK4i07AHIP0b
AFtUsjuZC0w5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmE1ODU5
ZmYwNjU1MjdlYTkzNTljMjQwZjMxOTRmYTRlZjM4MTNjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWJlMWViYzItYmUwMS00ZTU1LTlhNDgtZTY1Nzkw
NTJiZWY5L2U0NTJlODdlMTYxMTY4MDNlMjJlYmQ5NzEyNDFlMGIzZjViMTg1YWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YmUxZWJjMi1iZTAxLTRlNTUtOWE0OC1lNjU3
OTA1MmJlZjkvYmE1ODU5ZmYwNjU1MjdlYTkzNTljMjQwZjMxOTRmYTRlZjM4MTNj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAcBkujANBAIAAjAHAwUAKANw4DANBgkqhkiG9w0BAQsFAAOC
AQEARy+Hmkf2z8IcrCo3iLw+oc1/fALU/aTzipvQUhJi9bc7JiuqXfDrCIQ96Knh
qjj+wQvGpzehq1fFADub1A7F+dy3bhRX/xGDGbj3FqEnI64bc/vFIDtztCIyTYo2
EQwtpc5r8qq8OIO8skq8O8An592BdlZ8VfUu11p6B8lFYhWmN1/PL6XJI8MAeIbS
4KexOuwtDYOLEed4J+HI8+Gu5788+eZ/M+b7vdJFY219/8U3A5RtmGpZu2stTWlg
42t+31SflxSeEuJW1Ugi0goTaDmFyhk9ZWD2T+wqb6aJ/zm9csXkkgFa+M0znnro
tpKuD398+h9eBYQ5thyZr+p4Wg==
-----END CERTIFICATE-----