Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/96c769a5dd640f1c225cb17872dd182db3453100.roa
File:                     96c769a5dd640f1c225cb17872dd182db3453100.roa (raw, json)
Hash identifier:          GVaAA2GA14li5h2KVZCjQUWo+Ls0KRN2Gkp0qY+5vGg=
Subject key identifier:   33:B6:73:49:D8:74:2F:96:30:8E:51:D7:D7:D3:1E:86:86:F5:CC:A1
Certificate issuer:       /CN=493602240364e8c2a8419a3e9d0843be8cf08cdd
Certificate serial:       05BF
Authority key identifier: 4A:00:4B:1F:6E:62:90:3B:4C:71:26:E4:65:3F:69:BE:5A:2F:1F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/493602240364e8c2a8419a3e9d0843be8cf08cdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/96c769a5dd640f1c225cb17872dd182db3453100.roa
Signing time:             Sat 11 Sep 2021 16:55:45 +0000
ROA not before:           Sat 11 Sep 2021 03:00:00 +0000
ROA not after:            Mon 11 Sep 2023 03:00:00 +0000
asID:                     52414
IP address blocks:        190.92.96.0/21 maxlen: 21
                          2803:3e00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471 (0x5bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493602240364e8c2a8419a3e9d0843be8cf08cdd
        Validity
            Not Before: Sep 11 03:00:00 2021 GMT
            Not After : Sep 11 03:00:00 2023 GMT
        Subject: CN=96c769a5dd640f1c225cb17872dd182db3453100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:b9:b7:99:1a:85:29:2c:56:30:15:6e:1f:
                    b2:91:af:a0:74:af:1b:68:9f:45:e8:8f:5d:8f:6a:
                    c9:5d:4e:d0:ee:33:43:6e:6a:46:f9:3e:2d:77:8f:
                    2a:70:eb:e8:4b:57:94:2d:58:87:52:31:13:f6:95:
                    03:84:1c:c7:57:b8:3e:2a:99:54:2e:ac:29:06:2b:
                    9f:c0:3e:29:ca:c6:7f:e2:4c:c3:7d:c1:2d:fa:b4:
                    7f:aa:52:0b:72:3e:d3:a2:0f:2d:8e:c7:a4:e7:bd:
                    6d:78:89:ba:7a:17:37:4e:89:36:a8:6a:20:bf:43:
                    f7:28:72:d6:51:1c:f5:4a:90:bd:fe:2c:b7:90:08:
                    41:fe:64:b1:f2:e6:fa:a4:e8:74:ff:11:1a:f8:78:
                    ed:78:1f:8a:78:bf:3d:e6:e1:43:de:c1:09:ee:06:
                    55:65:3c:c5:1f:03:f7:36:87:19:4e:8b:87:c4:d9:
                    2b:de:38:55:65:40:0b:e1:9c:03:b0:ab:6a:cf:51:
                    cd:4a:f7:f2:aa:4c:5f:ed:ab:19:ef:6f:2b:6c:5a:
                    91:32:6b:51:9f:43:37:eb:05:06:a9:9d:63:ba:76:
                    ae:fa:e7:c1:f1:b8:93:99:ae:be:46:3f:69:34:a2:
                    a8:2d:62:64:7b:c0:36:f9:4f:98:cf:ca:ec:a1:de:
                    9e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B6:73:49:D8:74:2F:96:30:8E:51:D7:D7:D3:1E:86:86:F5:CC:A1
            X509v3 Authority Key Identifier:
                keyid:4A:00:4B:1F:6E:62:90:3B:4C:71:26:E4:65:3F:69:BE:5A:2F:1F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/493602240364e8c2a8419a3e9d0843be8cf08cdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/96c769a5dd640f1c225cb17872dd182db3453100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/493602240364e8c2a8419a3e9d0843be8cf08cdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.96.0/21
                IPv6:
                  2803:3e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:eb:c6:d2:29:f0:b8:f7:3b:8f:78:bb:6b:fb:0d:d5:df:f4:
         b6:3b:04:28:9e:cd:5d:f4:87:df:f2:76:de:f7:9f:4b:a5:b8:
         13:72:0e:c8:b2:eb:4a:10:1a:88:30:53:01:f9:96:26:5c:dc:
         22:59:b0:5b:1a:44:84:07:3a:00:0c:86:38:77:04:4c:e5:9f:
         cc:c4:73:c5:b6:63:41:6b:9c:11:43:01:94:04:85:bb:4f:f3:
         0f:51:c3:f7:5d:26:af:8b:8b:96:ae:09:fe:ac:2b:52:a3:40:
         a6:38:28:48:f5:3f:73:e8:e9:49:8c:c8:ac:78:4d:80:3e:bb:
         f1:c6:38:de:8c:9a:0b:f6:75:c2:91:d6:3e:3f:bd:a4:fa:9c:
         ac:b1:78:5c:f2:67:82:d3:fb:d2:0a:21:ce:75:b4:69:65:c5:
         71:5c:6c:17:06:f8:f2:a9:ef:68:dc:a8:ca:94:dc:80:c3:a1:
         20:48:b4:df:e2:26:74:4b:57:48:09:29:1b:dd:4b:f6:f0:7c:
         73:27:ca:40:66:5d:b5:df:bb:0c:79:35:69:63:bd:56:1d:86:
         dd:f9:67:46:03:d8:b2:92:b3:fe:51:0e:8c:29:6e:ed:7c:1f:
         cc:66:92:12:43:f1:c9:04:59:19:6b:68:47:ad:83:d6:67:55:
         3c:8b:a3:77
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkz
NjAyMjQwMzY0ZThjMmE4NDE5YTNlOWQwODQzYmU4Y2YwOGNkZDAeFw0yMTA5MTEw
MzAwMDBaFw0yMzA5MTEwMzAwMDBaMDMxMTAvBgNVBAMTKDk2Yzc2OWE1ZGQ2NDBm
MWMyMjVjYjE3ODcyZGQxODJkYjM0NTMxMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+57m3mRqFKSxWMBVuH7KRr6B0rxton0Xoj12PasldTtDuM0Nu
akb5Pi13jypw6+hLV5QtWIdSMRP2lQOEHMdXuD4qmVQurCkGK5/APinKxn/iTMN9
wS36tH+qUgtyPtOiDy2Ox6TnvW14ibp6FzdOiTaoaiC/Q/coctZRHPVKkL3+LLeQ
CEH+ZLHy5vqk6HT/ERr4eO14H4p4vz3m4UPewQnuBlVlPMUfA/c2hxlOi4fE2Sve
OFVlQAvhnAOwq2rPUc1K9/KqTF/tqxnvbytsWpEya1GfQzfrBQapnWO6dq7658Hx
uJOZrr5GP2k0oqgtYmR7wDb5T5jPyuyh3p5PAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUM7ZzSdh0L5YwjlHX19Mehob1zKEwHwYDVR0jBBgwFoAUSgBLH25ikDtMcSbk
ZT9pvlovH+AwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80OTM2MDIy
NDAzNjRlOGMyYTg0MTlhM2U5ZDA4NDNiZThjZjA4Y2RkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85ZjMzN2Q2ZC01YWFjLTRiYTYtYTZhMC1mNzE3ZGJm
NmIyZTUvOTZjNzY5YTVkZDY0MGYxYzIyNWNiMTc4NzJkZDE4MmRiMzQ1MzEwMC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzlmMzM3ZDZkLTVhYWMtNGJhNi1hNmEwLWY3MTdk
YmY2YjJlNS80OTM2MDIyNDAzNjRlOGMyYTg0MTlhM2U5ZDA4NDNiZThjZjA4Y2Rk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQDvlxgMA0EAgACMAcDBQAoAz4AMA0GCSqGSIb3DQEBCwUAA4IB
AQCL68bSKfC49zuPeLtr+w3V3/S2OwQons1d9Iff8nbe959LpbgTcg7IsutKEBqI
MFMB+ZYmXNwiWbBbGkSEBzoADIY4dwRM5Z/MxHPFtmNBa5wRQwGUBIW7T/MPUcP3
XSavi4uWrgn+rCtSo0CmOChI9T9z6OlJjMiseE2APrvxxjjejJoL9nXCkdY+P72k
+pyssXhc8meC0/vSCiHOdbRpZcVxXGwXBvjyqe9o3KjKlNyAw6EgSLTf4iZ0S1dI
CSkb3Uv28HxzJ8pAZl2137sMeTVpY71WHYbd+WdGA9iykrP+UQ6MKW7tfB/MZpIS
Q/HJBFkZa2hHrYPWZ1U8i6N3
-----END CERTIFICATE-----