Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/4b6517e8ad712dd8d2e8eedad2c2572c63e8358a.roa
File:                     4b6517e8ad712dd8d2e8eedad2c2572c63e8358a.roa (raw, json)
Hash identifier:          fBPEo5GjxClQI2D7xYj1AqkQS+jPX/ok6zPLs3CKvcc=
Subject key identifier:   FD:30:A4:BF:4D:95:FB:69:06:14:D6:EF:D9:4A:64:F6:D9:49:58:9A
Certificate issuer:       /CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
Certificate serial:       18BBC4
Authority key identifier: C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/4b6517e8ad712dd8d2e8eedad2c2572c63e8358a.roa
Signing time:             Thu 16 Jun 2022 14:18:42 +0000
ROA not before:           Sat 01 Jan 2022 03:00:00 +0000
ROA not after:            Mon 01 Apr 2024 03:00:00 +0000
asID:                     11014
IP address blocks:        131.0.232.0/22 maxlen: 24
                          2803:f580::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620932 (0x18bbc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
        Validity
            Not Before: Jan  1 03:00:00 2022 GMT
            Not After : Apr  1 03:00:00 2024 GMT
        Subject: CN=4b6517e8ad712dd8d2e8eedad2c2572c63e8358a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:02:55:79:65:aa:6d:18:70:cf:ee:0e:de:c5:
                    11:5c:63:02:65:be:2f:87:4f:76:77:1a:e5:91:e8:
                    f2:f1:3d:ff:e3:fc:18:48:48:2f:8c:0d:bb:17:c3:
                    a5:5e:66:f5:00:ad:cd:bb:3c:c3:02:0d:3e:0c:bb:
                    15:b2:a9:73:e9:8c:41:78:19:93:d6:2b:5f:68:85:
                    b5:6f:a0:b1:7e:d5:fa:0b:8b:cb:29:8b:17:b8:0f:
                    11:dc:b7:48:67:f1:5a:2d:b0:47:6f:3f:45:8d:a9:
                    b0:6f:ba:1f:71:ef:28:ee:cd:9b:9e:0e:46:f2:a8:
                    c9:2a:60:93:98:07:1a:57:64:af:27:8c:d6:a1:6a:
                    49:fe:8d:cb:ed:ef:11:04:1b:08:d8:01:80:06:b6:
                    1f:8c:b7:4f:0a:4d:d9:84:a8:c8:64:0d:82:ca:2c:
                    03:fc:07:3d:04:d9:ca:49:e8:43:85:aa:52:e6:38:
                    27:44:fd:f1:ef:1e:53:e8:a6:6d:2d:a7:9d:69:08:
                    61:e7:d4:be:18:1f:32:52:25:7a:f9:e7:66:77:9d:
                    96:80:8f:48:1f:dd:72:71:ba:b0:94:36:98:2f:c1:
                    6f:7b:13:69:ba:79:ef:d2:a6:74:fc:95:ce:d3:ca:
                    9c:5f:aa:bf:c7:6c:45:ad:0d:fa:8f:e4:6d:9d:52:
                    7c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:30:A4:BF:4D:95:FB:69:06:14:D6:EF:D9:4A:64:F6:D9:49:58:9A
            X509v3 Authority Key Identifier:
                keyid:C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/4b6517e8ad712dd8d2e8eedad2c2572c63e8358a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.232.0/22
                IPv6:
                  2803:f580::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:37:d7:aa:8b:9d:bd:58:74:1a:d3:85:6e:48:fc:5e:f6:32:
         be:e5:bf:5f:1d:3e:68:7e:b1:69:a3:da:0e:bc:b7:fd:a3:de:
         bb:34:00:df:75:1f:97:f7:6c:6a:3e:ab:de:b9:11:e9:98:42:
         6c:34:ab:ce:da:16:ab:2b:88:7a:da:2b:97:bf:5c:53:76:fa:
         ae:1e:64:7c:3c:9e:47:13:38:7f:28:c6:f8:c9:be:c7:70:31:
         4e:15:cf:65:38:68:c2:c0:d2:2d:03:70:c0:c0:ef:2a:91:d3:
         e8:e9:00:12:da:f7:a8:e1:8a:dc:78:ed:cf:5b:e5:12:b4:ce:
         e5:3a:4b:a8:67:e5:1c:2f:d2:d7:b6:3f:7b:56:22:86:da:49:
         bb:48:b3:68:59:e9:b4:dc:db:58:e4:db:64:17:a0:94:8e:36:
         df:a3:36:7c:63:0c:49:33:f7:32:3d:23:24:10:53:72:1e:28:
         db:41:a3:b7:91:be:60:d1:24:1f:d1:ef:a7:8d:6e:50:c5:46:
         1d:20:86:fb:96:d4:9f:9c:e5:48:f3:30:e1:8a:73:ab:99:66:
         b6:ae:a0:f5:9d:9a:94:23:c8:74:99:b5:e5:2b:61:8e:58:c1:
         4d:03:59:ae:b7:27:38:ca:53:95:70:aa:ef:b9:6e:79:b4:35:
         79:32:d5:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDGLvEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNh
NjQyZjBmNWJmMWY0MjZjMTRhYjk4NGE1ZWVjNWNjMTIxOWY0YTgwHhcNMjIwMTAx
MDMwMDAwWhcNMjQwNDAxMDMwMDAwWjAzMTEwLwYDVQQDEyg0YjY1MTdlOGFkNzEy
ZGQ4ZDJlOGVlZGFkMmMyNTcyYzYzZTgzNThhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlQJVeWWqbRhwz+4O3sURXGMCZb4vh092dxrlkejy8T3/4/wY
SEgvjA27F8OlXmb1AK3NuzzDAg0+DLsVsqlz6YxBeBmT1itfaIW1b6CxftX6C4vL
KYsXuA8R3LdIZ/FaLbBHbz9Fjamwb7ofce8o7s2bng5G8qjJKmCTmAcaV2SvJ4zW
oWpJ/o3L7e8RBBsI2AGABrYfjLdPCk3ZhKjIZA2CyiwD/Ac9BNnKSehDhapS5jgn
RP3x7x5T6KZtLaedaQhh59S+GB8yUiV6+edmd52WgI9IH91ycbqwlDaYL8FvexNp
unnv0qZ0/JXO08qcX6q/x2xFrQ36j+RtnVJ8bwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFP0wpL9NlftpBhTW79lKZPbZSViaMB8GA1UdIwQYMBaAFMWVJLXI1WgeSuXn
anIxYouHgkGIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2E2NDJm
MGY1YmYxZjQyNmMxNGFiOTg0YTVlZWM1Y2MxMjE5ZjRhOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmE1YTE1OGMtMjdiNy00OGE2LThlOTYtYmJmOTAy
YzIwNDA4LzRiNjUxN2U4YWQ3MTJkZDhkMmU4ZWVkYWQyYzI1NzJjNjNlODM1OGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYTVhMTU4Yy0yN2I3LTQ4YTYtOGU5Ni1iYmY5
MDJjMjA0MDgvM2E2NDJmMGY1YmYxZjQyNmMxNGFiOTg0YTVlZWM1Y2MxMjE5ZjRh
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAoMA6DANBAIAAjAHAwUAKAP1gDANBgkqhkiG9w0BAQsFAAOC
AQEAgzfXqoudvVh0GtOFbkj8XvYyvuW/Xx0+aH6xaaPaDry3/aPeuzQA33Ufl/ds
aj6r3rkR6ZhCbDSrztoWqyuIetorl79cU3b6rh5kfDyeRxM4fyjG+Mm+x3AxThXP
ZThowsDSLQNwwMDvKpHT6OkAEtr3qOGK3Hjtz1vlErTO5TpLqGflHC/S17Y/e1Yi
htpJu0izaFnptNzbWOTbZBeglI4236M2fGMMSTP3Mj0jJBBTch4o20Gjt5G+YNEk
H9Hvp41uUMVGHSCG+5bUn5zlSPMw4Ypzq5lmtq6g9Z2alCPIdJm15SthjljBTQNZ
rrcnOMpTlXCq77luebQ1eTLVEg==
-----END CERTIFICATE-----