Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa5b2d89-d110-4c2c-97d4-9d9a939d855f/3407ca0529ce84683aa408fbd22e1ab1a5cf8b72.roa
File:                     3407ca0529ce84683aa408fbd22e1ab1a5cf8b72.roa (raw, json)
Hash identifier:          fZvHjvDm+J+IozLYVcu5aQ8XZQq71SK8/mjtoKhynrc=
Subject key identifier:   46:CE:B8:8C:57:FF:09:C7:23:2D:C6:08:79:35:7D:7A:DA:2A:80:08
Certificate issuer:       /CN=5b5f0945933991c4abad023dec8d5f932906f813
Certificate serial:       06DBD5
Authority key identifier: 31:31:1F:50:C1:66:44:84:57:E1:C2:0D:34:E6:28:E0:05:CA:B1:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b5f0945933991c4abad023dec8d5f932906f813.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa5b2d89-d110-4c2c-97d4-9d9a939d855f/3407ca0529ce84683aa408fbd22e1ab1a5cf8b72.roa
Signing time:             Wed 24 Mar 2021 14:34:16 +0000
ROA not before:           Wed 24 Mar 2021 14:34:16 +0000
ROA not after:            Tue 24 Mar 2026 14:34:16 +0000
asID:                     270024
IP address blocks:        200.39.136.0/22 maxlen: 24
                          2803:b9e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449493 (0x6dbd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5f0945933991c4abad023dec8d5f932906f813
        Validity
            Not Before: Mar 24 14:34:16 2021 GMT
            Not After : Mar 24 14:34:16 2026 GMT
        Subject: CN=3407ca0529ce84683aa408fbd22e1ab1a5cf8b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:5a:6d:f2:26:a1:79:d4:83:a3:45:47:48:
                    34:84:9d:85:db:e9:9e:06:f2:3b:53:84:21:94:4a:
                    9f:c6:96:ae:8e:a2:f4:64:07:28:c4:6c:93:64:92:
                    27:01:25:0d:6a:0f:a0:0a:d7:22:de:b2:d8:67:47:
                    bb:3e:31:9b:55:cd:cc:c7:b6:94:58:86:cf:d3:78:
                    b2:ac:25:68:e0:90:83:23:ba:1f:0e:92:39:d8:b4:
                    66:34:2d:47:07:cf:c8:03:f9:2a:8e:a1:4f:b0:bd:
                    47:19:47:cf:d0:1e:18:62:45:d9:2d:5d:cc:e8:f4:
                    f5:63:a9:c1:58:4a:dd:a9:89:c1:cc:a1:37:90:07:
                    88:40:58:83:9b:04:66:6c:49:90:b4:d3:7a:b0:7e:
                    05:a2:3d:9d:b2:b4:19:7e:11:98:f4:42:40:b7:89:
                    5f:52:7f:5a:29:65:9c:d1:f0:a0:c1:29:98:70:89:
                    6d:8c:f7:d8:ca:97:98:6d:a6:78:d5:b6:8f:e9:00:
                    36:12:5f:e2:40:af:db:83:20:37:d2:e2:b4:6a:f1:
                    f2:b1:97:ab:ec:5e:e5:a3:89:df:de:82:ac:eb:a5:
                    8c:87:e6:21:a3:00:4e:59:d8:78:36:b8:1a:96:e8:
                    7c:d9:cb:c8:08:67:3a:4d:11:6d:93:29:bc:93:18:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CE:B8:8C:57:FF:09:C7:23:2D:C6:08:79:35:7D:7A:DA:2A:80:08
            X509v3 Authority Key Identifier:
                keyid:31:31:1F:50:C1:66:44:84:57:E1:C2:0D:34:E6:28:E0:05:CA:B1:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b5f0945933991c4abad023dec8d5f932906f813.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa5b2d89-d110-4c2c-97d4-9d9a939d855f/3407ca0529ce84683aa408fbd22e1ab1a5cf8b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa5b2d89-d110-4c2c-97d4-9d9a939d855f/5b5f0945933991c4abad023dec8d5f932906f813.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.136.0/22
                IPv6:
                  2803:b9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:33:a1:f2:b8:5e:43:9c:e0:cc:85:94:5f:ed:cd:67:a2:34:
         4c:9c:21:05:64:5b:27:66:75:e9:94:93:d0:36:2e:da:f4:f6:
         a1:d4:75:f0:bd:6c:27:c9:97:c5:ef:03:18:13:b7:2a:53:d2:
         4a:71:06:bb:25:7f:54:74:1a:d6:63:38:d8:d2:7e:5b:96:7f:
         40:3e:cd:54:8d:ed:c6:87:41:12:92:67:bc:2a:ef:47:52:de:
         f1:43:eb:48:d7:b9:d9:a6:f2:e5:b2:81:82:ba:3e:1d:f5:d9:
         1c:0f:2d:df:85:4c:4a:0e:7e:29:c1:06:a1:67:48:e6:97:45:
         8c:96:b8:6f:d7:60:d9:79:5f:6a:cc:2a:9e:9d:7c:bd:45:59:
         4f:65:25:35:d8:75:6c:20:ad:c7:9f:86:2e:de:89:37:fa:de:
         51:cb:99:d9:25:15:be:07:f8:8f:56:9e:3e:96:c2:a8:0f:6d:
         01:82:04:ac:07:d1:ec:a0:98:79:8c:9f:90:46:e5:03:e9:5d:
         e3:54:0e:22:fd:f1:92:b6:3e:c9:46:f8:c3:60:66:1b:e0:d6:
         07:0d:5f:d0:34:75:ee:1c:c7:dc:5c:26:8d:3c:a9:d7:bc:c6:
         da:aa:d1:d7:55:6b:9f:a0:4f:80:fc:78:2d:b0:da:2c:13:59:
         8c:8b:72:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBtvVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi
NWYwOTQ1OTMzOTkxYzRhYmFkMDIzZGVjOGQ1ZjkzMjkwNmY4MTMwHhcNMjEwMzI0
MTQzNDE2WhcNMjYwMzI0MTQzNDE2WjAzMTEwLwYDVQQDEygzNDA3Y2EwNTI5Y2U4
NDY4M2FhNDA4ZmJkMjJlMWFiMWE1Y2Y4YjcyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp7VabfImoXnUg6NFR0g0hJ2F2+meBvI7U4QhlEqfxpaujqL0
ZAcoxGyTZJInASUNag+gCtci3rLYZ0e7PjGbVc3Mx7aUWIbP03iyrCVo4JCDI7of
DpI52LRmNC1HB8/IA/kqjqFPsL1HGUfP0B4YYkXZLV3M6PT1Y6nBWErdqYnBzKE3
kAeIQFiDmwRmbEmQtNN6sH4Foj2dsrQZfhGY9EJAt4lfUn9aKWWc0fCgwSmYcIlt
jPfYypeYbaZ41baP6QA2El/iQK/bgyA30uK0avHysZer7F7lo4nf3oKs66WMh+Yh
owBOWdh4Nrgaluh82cvICGc6TRFtkym8kxjmqQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFEbOuIxX/wnHIy3GCHk1fXraKoAIMB8GA1UdIwQYMBaAFDExH1DBZkSEV+HC
DTTmKOAFyrENMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWI1ZjA5
NDU5MzM5OTFjNGFiYWQwMjNkZWM4ZDVmOTMyOTA2ZjgxMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE1YjJkODktZDExMC00YzJjLTk3ZDQtOWQ5YTkz
OWQ4NTVmLzM0MDdjYTA1MjljZTg0NjgzYWE0MDhmYmQyMmUxYWIxYTVjZjhiNzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTViMmQ4OS1kMTEwLTRjMmMtOTdkNC05ZDlh
OTM5ZDg1NWYvNWI1ZjA5NDU5MzM5OTFjNGFiYWQwMjNkZWM4ZDVmOTMyOTA2Zjgx
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAsgniDANBAIAAjAHAwUAKAO54DANBgkqhkiG9w0BAQsFAAOC
AQEAAjOh8rheQ5zgzIWUX+3NZ6I0TJwhBWRbJ2Z16ZST0DYu2vT2odR18L1sJ8mX
xe8DGBO3KlPSSnEGuyV/VHQa1mM42NJ+W5Z/QD7NVI3txodBEpJnvCrvR1Le8UPr
SNe52aby5bKBgro+HfXZHA8t34VMSg5+KcEGoWdI5pdFjJa4b9dg2Xlfaswqnp18
vUVZT2UlNdh1bCCtx5+GLt6JN/reUcuZ2SUVvgf4j1aePpbCqA9tAYIErAfR7KCY
eYyfkEblA+ld41QOIv3xkrY+yUb4w2BmG+DWBw1f0DR17hzH3FwmjTyp17zG2qrR
11Vrn6BPgPx4LbDaLBNZjItyDA==
-----END CERTIFICATE-----