Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/a4aee105f0dfd118c662cd439110d0ffd4251319.roa
File:                     a4aee105f0dfd118c662cd439110d0ffd4251319.roa (raw, json)
Hash identifier:          NMFOhJY1SUlU48pcEVMdOQSARzibR/PV+R3/e6SJFJ0=
Subject key identifier:   06:FD:EF:77:7C:39:0E:20:44:48:25:7B:F3:5C:5C:5C:03:02:E7:4E
Certificate issuer:       /CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
Certificate serial:       162D77
Authority key identifier: 87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/a4aee105f0dfd118c662cd439110d0ffd4251319.roa
Signing time:             Thu 17 Mar 2022 17:47:01 +0000
ROA not before:           Thu 17 Mar 2022 03:00:00 +0000
ROA not after:            Sun 17 Mar 2024 03:00:00 +0000
asID:                     265705
IP address blocks:        190.1.64.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1453431 (0x162d77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
        Validity
            Not Before: Mar 17 03:00:00 2022 GMT
            Not After : Mar 17 03:00:00 2024 GMT
        Subject: CN=a4aee105f0dfd118c662cd439110d0ffd4251319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:ff:91:25:d3:80:2a:f3:60:9f:c5:57:d9:
                    db:06:70:15:4a:26:aa:10:5e:b9:1c:dc:51:3d:c1:
                    e6:4d:4d:f0:40:10:74:de:3a:5c:0d:b8:a0:ff:9e:
                    ca:5b:36:2e:ae:d5:55:d2:40:ce:ad:67:73:18:a3:
                    1e:ab:9f:38:ac:7f:45:03:8d:a2:4b:06:95:9e:9c:
                    6a:97:75:34:56:75:dd:8c:5b:90:c2:99:ca:7d:93:
                    4e:47:11:cb:7b:e7:f9:e8:96:f3:7c:fb:dd:66:e4:
                    45:62:db:1f:59:0a:ef:1f:c0:f9:29:97:e9:a0:64:
                    3e:0e:9b:cf:8f:0f:94:c9:ac:71:8f:c9:8a:21:fd:
                    f9:6e:db:23:9d:88:2f:f8:ed:5c:c2:70:c6:6d:3c:
                    77:86:50:96:9e:ea:96:0a:39:59:99:86:b2:68:61:
                    a5:55:e1:9c:73:11:9e:64:74:99:16:9b:fb:70:ee:
                    46:0f:99:3c:4e:34:95:81:c2:9f:31:43:9f:48:ab:
                    be:1f:1d:93:fe:01:23:8b:48:f8:97:2b:f3:5f:58:
                    20:43:cc:ac:a5:03:ef:f5:e8:40:88:eb:88:9b:a4:
                    ac:25:3f:bf:d2:85:6d:0e:19:20:28:ec:cd:77:c1:
                    f0:7d:ee:b4:84:99:c7:98:8e:ad:02:8d:5c:15:4d:
                    9c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FD:EF:77:7C:39:0E:20:44:48:25:7B:F3:5C:5C:5C:03:02:E7:4E
            X509v3 Authority Key Identifier:
                keyid:87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/a4aee105f0dfd118c662cd439110d0ffd4251319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.1.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:cd:7a:26:6a:4b:42:af:d4:bd:09:59:87:1d:97:3d:dc:
         7b:54:4f:8f:f2:b9:25:67:e1:2a:36:8b:52:25:8f:3a:0b:71:
         be:1f:e4:97:30:4d:4f:e1:53:f5:a2:a5:92:44:0f:7d:03:83:
         2d:b3:d5:2d:9f:50:30:0f:52:53:03:6c:36:e9:d4:0c:62:bc:
         a0:69:1a:3f:a3:35:33:0a:bf:8b:75:26:7c:8e:d7:0f:f5:26:
         7f:80:dd:ba:79:86:83:a1:61:2e:a7:d3:75:27:61:d3:54:9b:
         bf:79:32:e6:7c:3b:28:81:bc:e6:20:e1:4e:3b:6e:41:b3:0c:
         84:21:0c:0e:2e:63:b7:e8:12:52:c0:39:0d:9b:9c:ee:de:aa:
         d6:8e:08:0b:61:13:08:52:f2:2c:3e:aa:bc:c4:64:5b:a3:37:
         67:6f:7e:f7:7d:d4:af:a8:e8:4b:6b:27:c5:24:a4:c4:0b:21:
         f6:26:2d:b0:7e:17:09:60:5b:0a:8c:03:fa:69:c1:dc:5b:cf:
         b7:1e:8d:3a:6b:72:b5:22:96:41:11:e1:83:bc:70:f4:15:35:
         8e:2d:f8:7f:5c:dc:8b:7b:ce:4e:6a:8d:91:a7:69:3e:cc:a4:
         de:36:2e:d4:66:ae:f7:d2:b6:64:48:11:f6:cf:e2:e2:8f:8f:
         1b:c4:c6:38
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFi13MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
YjBmY2MxODBiYmE4NGJmNTMxOWYxMjIzYTVlMWNmZTFiMWE0N2UwHhcNMjIwMzE3
MDMwMDAwWhcNMjQwMzE3MDMwMDAwWjAzMTEwLwYDVQQDEyhhNGFlZTEwNWYwZGZk
MTE4YzY2MmNkNDM5MTEwZDBmZmQ0MjUxMzE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoOX/kSXTgCrzYJ/FV9nbBnAVSiaqEF65HNxRPcHmTU3wQBB0
3jpcDbig/57KWzYurtVV0kDOrWdzGKMeq584rH9FA42iSwaVnpxql3U0VnXdjFuQ
wpnKfZNORxHLe+f56JbzfPvdZuRFYtsfWQrvH8D5KZfpoGQ+DpvPjw+Uyaxxj8mK
If35btsjnYgv+O1cwnDGbTx3hlCWnuqWCjlZmYayaGGlVeGccxGeZHSZFpv7cO5G
D5k8TjSVgcKfMUOfSKu+Hx2T/gEji0j4lyvzX1ggQ8yspQPv9ehAiOuIm6SsJT+/
0oVtDhkgKOzNd8Hwfe60hJnHmI6tAo1cFU2cYwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAb973d8OQ4gREgle/NcXFwDAudOMB8GA1UdIwQYMBaAFIf41DV2IFZrECeM
ktw2wBlRNvQcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjBiMGZj
YzE4MGJiYTg0YmY1MzE5ZjEyMjNhNWUxY2ZlMWIxYTQ3ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTdjYWE0YjEtMWM2ZC00OGFiLTk0MDUtOTZiNWMx
ODI4NGM1L2E0YWVlMTA1ZjBkZmQxMThjNjYyY2Q0MzkxMTBkMGZmZDQyNTEzMTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hN2NhYTRiMS0xYzZkLTQ4YWItOTQwNS05NmI1
YzE4Mjg0YzUvZjBiMGZjYzE4MGJiYTg0YmY1MzE5ZjEyMjNhNWUxY2ZlMWIxYTQ3
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBb4BQDANBgkqhkiG9w0BAQsFAAOCAQEAKuXNeiZqS0Kv1L0J
WYcdlz3ce1RPj/K5JWfhKjaLUiWPOgtxvh/klzBNT+FT9aKlkkQPfQODLbPVLZ9Q
MA9SUwNsNunUDGK8oGkaP6M1Mwq/i3UmfI7XD/Umf4DdunmGg6FhLqfTdSdh01Sb
v3ky5nw7KIG85iDhTjtuQbMMhCEMDi5jt+gSUsA5DZuc7t6q1o4IC2ETCFLyLD6q
vMRkW6M3Z29+933Ur6joS2snxSSkxAsh9iYtsH4XCWBbCowD+mnB3FvPtx6NOmty
tSKWQRHhg7xw9BU1ji34f1zci3vOTmqNkadpPsyk3jYu1Gau99K2ZEgR9s/i4o+P
G8TGOA==
-----END CERTIFICATE-----