Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/5192af8f790a8252f33600c0932404d25db77edd.roa
File:                     5192af8f790a8252f33600c0932404d25db77edd.roa (raw, json)
Hash identifier:          MwCP8RTULLXVfTZJmN+WBtm3YJSe69ztKexD07bJM0s=
Subject key identifier:   E4:55:22:F6:F5:0F:4E:2A:0A:83:87:8F:FB:B7:40:4E:C2:EC:46:7F
Certificate issuer:       /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial:       285FE7
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/5192af8f790a8252f33600c0932404d25db77edd.roa
Signing time:             Fri 01 Mar 2024 13:56:42 +0000
ROA not before:           Fri 01 Mar 2024 13:56:42 +0000
ROA not after:            Sun 01 Mar 2026 13:56:42 +0000
asID:                     269836
IP address blocks:        190.107.20.80/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2645991 (0x285fe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
        Validity
            Not Before: Mar  1 13:56:42 2024 GMT
            Not After : Mar  1 13:56:42 2026 GMT
        Subject: CN=5192af8f790a8252f33600c0932404d25db77edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:2c:d0:c9:31:ee:d4:58:ef:f4:8d:9f:9e:
                    7f:dd:31:3c:97:3b:29:b3:f6:b3:be:1c:08:40:4c:
                    c9:76:a8:08:b0:68:9b:d6:82:21:89:4f:03:e6:6a:
                    4c:d5:4c:6a:c6:da:05:5a:c9:16:d1:9f:8e:3b:6c:
                    24:21:3f:fa:0b:62:bb:e7:ac:f8:4d:bb:c8:97:3a:
                    02:6e:fe:f7:ec:9f:11:76:fa:f9:57:a1:f3:47:9a:
                    e4:ac:a4:4d:33:72:3d:7e:f7:59:b1:5a:da:60:2d:
                    2d:6d:d4:27:b7:88:63:08:c5:aa:3b:2f:90:bc:23:
                    b5:d6:91:bf:f2:8e:7d:65:cb:78:eb:04:72:86:c7:
                    3f:6c:a0:c6:fe:bc:6e:66:6b:7f:77:3c:ac:a4:24:
                    e5:c4:40:5f:98:78:41:30:b9:ec:fa:f7:8d:e0:c2:
                    5f:aa:d2:80:42:02:d0:ca:10:24:5a:70:45:91:77:
                    a1:7b:09:f8:3d:f9:91:a5:16:ad:54:17:9f:94:4e:
                    51:35:fe:cf:31:56:6d:8d:96:5b:5e:e2:d8:7a:1c:
                    17:86:dd:59:35:70:4f:84:e5:1a:62:a3:83:f3:72:
                    04:0f:10:57:7b:f0:9e:08:fe:44:38:f5:9d:e4:6e:
                    6d:04:19:63:a4:17:4b:8e:94:33:67:11:aa:5b:0f:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:55:22:F6:F5:0F:4E:2A:0A:83:87:8F:FB:B7:40:4E:C2:EC:46:7F
            X509v3 Authority Key Identifier:
                keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/5192af8f790a8252f33600c0932404d25db77edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.20.80/28

    Signature Algorithm: sha256WithRSAEncryption
         54:4f:64:a1:b0:ec:4f:30:09:04:7b:6f:55:3f:15:34:e6:fc:
         c0:6c:3a:c1:ef:16:53:9d:f6:34:8e:34:f5:93:17:78:04:59:
         48:e6:22:8c:db:18:92:f9:de:98:92:c4:b5:50:6e:fc:5d:5d:
         d2:62:2a:f1:d9:4e:33:ce:a0:5b:61:b5:ad:c4:78:00:b0:f8:
         03:db:5e:dc:92:fa:6a:4c:43:f8:46:91:3c:7b:2c:a9:c1:a6:
         4b:fc:c4:7a:5b:49:d7:19:8c:6c:40:26:49:b7:15:84:32:4b:
         89:8b:93:f6:68:92:99:cd:85:d1:54:37:3d:c4:74:49:1f:6e:
         a6:19:0c:36:b7:34:c3:e1:00:c7:b6:47:af:0f:d6:e7:62:cd:
         19:e0:eb:13:db:27:ee:29:3f:9a:89:88:03:62:97:2f:01:cb:
         4d:be:c7:52:4c:c7:e5:ec:22:5c:bc:ec:02:c2:9e:8b:ba:15:
         8c:83:9a:c4:22:aa:b1:e8:fa:22:33:e0:9d:87:3d:e5:de:b1:
         04:18:f4:67:fa:23:da:7e:0b:68:92:07:10:3c:23:12:ae:73:
         87:96:8a:60:e7:df:82:b1:26:1c:fa:60:e0:8c:53:a8:49:36:
         a9:ef:3b:45:3f:1d:a4:b2:8e:5a:78:c4:f3:82:51:9b:15:5d:
         30:d0:13:60
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDKF/nMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM5
YzU2NWJiYzFiZWNhNzBjYTk1M2QyM2ZlZmY3NTNiMzkyYTE3YTcwHhcNMjQwMzAx
MTM1NjQyWhcNMjYwMzAxMTM1NjQyWjAzMTEwLwYDVQQDEyg1MTkyYWY4Zjc5MGE4
MjUyZjMzNjAwYzA5MzI0MDRkMjVkYjc3ZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj7ws0Mkx7tRY7/SNn55/3TE8lzsps/azvhwIQEzJdqgIsGib
1oIhiU8D5mpM1UxqxtoFWskW0Z+OO2wkIT/6C2K756z4TbvIlzoCbv737J8Rdvr5
V6HzR5rkrKRNM3I9fvdZsVraYC0tbdQnt4hjCMWqOy+QvCO11pG/8o59Zct46wRy
hsc/bKDG/rxuZmt/dzyspCTlxEBfmHhBMLns+veN4MJfqtKAQgLQyhAkWnBFkXeh
ewn4PfmRpRatVBeflE5RNf7PMVZtjZZbXuLYehwXht1ZNXBPhOUaYqOD83IEDxBX
e/CeCP5EOPWd5G5tBBljpBdLjpQzZxGqWw/rOwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFORVIvb1D04qCoOHj/u3QE7C7EZ/MB8GA1UdIwQYMBaAFIewmCMawQ5rTiev
qIwX5Jsg8hqMMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzljNTY1
YmJjMWJlY2E3MGNhOTUzZDIzZmVmZjc1M2IzOTJhMTdhNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTYzOWI4MGItOWQ1OS00NDAyLWI0NzctYTJiMjQ5
Y2FlZWU5LzUxOTJhZjhmNzkwYTgyNTJmMzM2MDBjMDkzMjQwNGQyNWRiNzdlZGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNjM5YjgwYi05ZDU5LTQ0MDItYjQ3Ny1hMmIy
NDljYWVlZTkvMzljNTY1YmJjMWJlY2E3MGNhOTUzZDIzZmVmZjc1M2IzOTJhMTdh
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAEwBwMFBL5rFFAwDQYJKoZIhvcNAQELBQADggEBAFRPZKGw7E8wCQR7
b1U/FTTm/MBsOsHvFlOd9jSONPWTF3gEWUjmIozbGJL53piSxLVQbvxdXdJiKvHZ
TjPOoFthta3EeACw+APbXtyS+mpMQ/hGkTx7LKnBpkv8xHpbSdcZjGxAJkm3FYQy
S4mLk/ZokpnNhdFUNz3EdEkfbqYZDDa3NMPhAMe2R68P1udizRng6xPbJ+4pP5qJ
iANily8By02+x1JMx+XsIly87ALCnou6FYyDmsQiqrHo+iIz4J2HPeXesQQY9Gf6
I9p+C2iSBxA8IxKuc4eWimDn34KxJhz6YOCMU6hJNqnvO0U/HaSyjlp4xPOCUZsV
XTDQE2A=
-----END CERTIFICATE-----