Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/c302f501c00622d29df49af6cb08b06d377f6672.roa
File:                     c302f501c00622d29df49af6cb08b06d377f6672.roa (raw, json)
Hash identifier:          0aS4oz8iSWIqdAuZ6czdWtHyWxsyowokpPRXQeHaAgs=
Subject key identifier:   FA:73:97:DB:56:71:7D:05:81:58:A4:4B:5F:EB:1E:06:03:9B:44:06
Certificate issuer:       /CN=202cb3488506efb49dfb0ab983c08668843b1d3a
Certificate serial:       106EFA
Authority key identifier: D1:45:15:26:81:4D:06:B0:71:88:78:11:6F:48:36:7C:D7:1A:8D:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/202cb3488506efb49dfb0ab983c08668843b1d3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/c302f501c00622d29df49af6cb08b06d377f6672.roa
Signing time:             Tue 22 Feb 2022 18:00:20 +0000
ROA not before:           Tue 22 Feb 2022 18:00:19 +0000
ROA not after:            Mon 22 Feb 2027 18:00:19 +0000
asID:                     269975
IP address blocks:        190.89.28.0/24 maxlen: 24
                          2803:16e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076986 (0x106efa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202cb3488506efb49dfb0ab983c08668843b1d3a
        Validity
            Not Before: Feb 22 18:00:19 2022 GMT
            Not After : Feb 22 18:00:19 2027 GMT
        Subject: CN=c302f501c00622d29df49af6cb08b06d377f6672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e6:4f:4c:7f:9d:8b:67:b2:cc:03:3b:f0:2c:
                    8c:0e:1a:8a:62:54:a3:60:09:f8:c8:b7:60:43:5c:
                    83:f6:b1:23:30:75:a9:1a:0f:5b:40:2b:e9:ff:6e:
                    e5:d2:ff:5e:7e:82:7d:33:28:e8:9c:3c:1b:29:d7:
                    1c:0c:90:d2:8c:06:b3:f0:aa:b5:06:4f:9d:bd:35:
                    a9:92:57:8a:c3:cf:4a:82:16:c2:cc:b3:32:1d:1e:
                    5c:3e:7d:6e:05:a3:8b:0f:5f:2d:b2:11:42:bf:fb:
                    9c:ab:7f:17:1e:1a:25:76:83:02:fc:c4:68:79:09:
                    0a:19:b6:3f:c7:e9:61:55:a1:93:e9:ef:da:09:fe:
                    0d:38:9f:40:e0:41:fd:9b:df:93:f8:9f:4d:60:8c:
                    19:78:0d:4a:2a:5b:5a:93:8c:d1:6e:60:cf:75:d2:
                    02:79:8d:4b:9e:c7:ad:54:99:d2:87:66:ea:2c:79:
                    0c:8c:28:32:6e:00:cd:94:ec:79:2a:2e:53:96:47:
                    29:2b:6e:b0:f9:69:09:8b:88:6b:b9:a1:48:67:37:
                    c8:da:6f:8d:d2:87:4d:96:d7:4a:38:18:c7:73:59:
                    3f:91:c2:1c:13:3b:b3:4b:d2:16:71:1f:86:d5:ad:
                    9b:da:b3:b5:1a:0f:26:45:72:2c:ac:89:05:41:d2:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:73:97:DB:56:71:7D:05:81:58:A4:4B:5F:EB:1E:06:03:9B:44:06
            X509v3 Authority Key Identifier:
                keyid:D1:45:15:26:81:4D:06:B0:71:88:78:11:6F:48:36:7C:D7:1A:8D:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/202cb3488506efb49dfb0ab983c08668843b1d3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/c302f501c00622d29df49af6cb08b06d377f6672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/202cb3488506efb49dfb0ab983c08668843b1d3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.28.0/24
                IPv6:
                  2803:16e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:92:82:64:1c:68:9b:8f:15:28:51:d5:33:e4:c5:d4:ce:c2:
         66:b2:2a:c1:69:57:43:0f:f7:71:30:bf:5b:16:54:40:b6:94:
         8c:b3:3b:44:35:1f:c1:d5:85:2d:69:c2:fb:98:88:65:d6:b0:
         83:9f:95:fc:48:d7:1c:15:54:df:29:a7:50:19:7b:9d:75:eb:
         e1:fc:81:c1:25:08:79:ac:bb:16:7a:d7:88:ca:74:f4:bf:e6:
         71:3a:54:cf:54:ea:05:7d:77:30:db:67:b4:18:4d:26:e7:e7:
         4b:94:7a:b1:87:4a:e0:24:98:fc:36:05:21:86:a9:7e:f1:24:
         2f:e6:eb:39:c8:05:84:ec:1f:b8:88:61:ec:04:8a:07:a8:da:
         c8:e7:f2:fa:83:9d:41:07:78:c7:4c:f5:36:81:f1:23:25:ce:
         b9:9d:45:c6:b3:76:29:bb:fa:aa:8b:68:5e:a2:ef:29:ad:67:
         5f:f6:1c:e9:01:f0:83:8a:60:14:96:28:c9:de:76:5d:66:2f:
         35:5a:36:66:b0:5c:1f:f8:1d:55:bd:68:f8:2e:fb:65:c3:ff:
         b2:2e:b7:a5:a8:3d:3b:15:d9:09:9d:b0:b6:c2:66:73:14:73:
         66:5b:2a:c6:f0:6b:a2:2d:42:22:1e:36:b0:fe:76:b4:cf:b4:
         7c:b1:66:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEG76MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIw
MmNiMzQ4ODUwNmVmYjQ5ZGZiMGFiOTgzYzA4NjY4ODQzYjFkM2EwHhcNMjIwMjIy
MTgwMDE5WhcNMjcwMjIyMTgwMDE5WjAzMTEwLwYDVQQDEyhjMzAyZjUwMWMwMDYy
MmQyOWRmNDlhZjZjYjA4YjA2ZDM3N2Y2NjcyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgOZPTH+di2eyzAM78CyMDhqKYlSjYAn4yLdgQ1yD9rEjMHWp
Gg9bQCvp/27l0v9efoJ9MyjonDwbKdccDJDSjAaz8Kq1Bk+dvTWpkleKw89KghbC
zLMyHR5cPn1uBaOLD18tshFCv/ucq38XHholdoMC/MRoeQkKGbY/x+lhVaGT6e/a
Cf4NOJ9A4EH9m9+T+J9NYIwZeA1KKltak4zRbmDPddICeY1LnsetVJnSh2bqLHkM
jCgybgDNlOx5Ki5TlkcpK26w+WkJi4hruaFIZzfI2m+N0odNltdKOBjHc1k/kcIc
EzuzS9IWcR+G1a2b2rO1Gg8mRXIsrIkFQdLOPQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFPpzl9tWcX0FgVikS1/rHgYDm0QGMB8GA1UdIwQYMBaAFNFFFSaBTQawcYh4
EW9INnzXGo05MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjAyY2Iz
NDg4NTA2ZWZiNDlkZmIwYWI5ODNjMDg2Njg4NDNiMWQzYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE0OTU5MTItN2UwMC00OWY4LThlM2UtN2UzZjk5
MjM1NDc5L2MzMDJmNTAxYzAwNjIyZDI5ZGY0OWFmNmNiMDhiMDZkMzc3ZjY2NzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTQ5NTkxMi03ZTAwLTQ5ZjgtOGUzZS03ZTNm
OTkyMzU0NzkvMjAyY2IzNDg4NTA2ZWZiNDlkZmIwYWI5ODNjMDg2Njg4NDNiMWQz
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAL5ZHDANBAIAAjAHAwUAKAMW4DANBgkqhkiG9w0BAQsFAAOC
AQEAkJKCZBxom48VKFHVM+TF1M7CZrIqwWlXQw/3cTC/WxZUQLaUjLM7RDUfwdWF
LWnC+5iIZdawg5+V/EjXHBVU3ymnUBl7nXXr4fyBwSUIeay7FnrXiMp09L/mcTpU
z1TqBX13MNtntBhNJufnS5R6sYdK4CSY/DYFIYapfvEkL+brOcgFhOwfuIhh7ASK
B6jayOfy+oOdQQd4x0z1NoHxIyXOuZ1FxrN2Kbv6qotoXqLvKa1nX/Yc6QHwg4pg
FJYoyd52XWYvNVo2ZrBcH/gdVb1o+C77ZcP/si63pag9OxXZCZ2wtsJmcxRzZlsq
xvBroi1CIh42sP52tM+0fLFm8w==
-----END CERTIFICATE-----