Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd295502-f344-44f2-9e00-bbbf2f1e50d9/7885543b92051c02579884a7d45bce0b29f5c486.roa
File:                     7885543b92051c02579884a7d45bce0b29f5c486.roa (raw, json)
Hash identifier:          x2gm/mZT08I4U422U7IvliM4DqjVTuDUu26FFnEYfs4=
Subject key identifier:   DB:1B:12:E8:20:B6:BF:2D:3E:0B:E1:10:0D:6B:7D:06:EB:11:76:1B
Certificate issuer:       /CN=184d3b86d27c4f19e6eba3cae294a8f07eec2a0c
Certificate serial:       0378
Authority key identifier: 84:96:20:9C:D7:47:06:AF:C2:79:A2:8D:98:41:D2:8D:9A:E4:A3:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/184d3b86d27c4f19e6eba3cae294a8f07eec2a0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd295502-f344-44f2-9e00-bbbf2f1e50d9/7885543b92051c02579884a7d45bce0b29f5c486.roa
Signing time:             Fri 11 Mar 2022 20:05:09 +0000
ROA not before:           Fri 11 Mar 2022 03:00:00 +0000
ROA not after:            Mon 11 Mar 2024 03:00:00 +0000
asID:                     61519
IP address blocks:        168.121.32.0/22 maxlen: 24
                          2803:3540::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888 (0x378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184d3b86d27c4f19e6eba3cae294a8f07eec2a0c
        Validity
            Not Before: Mar 11 03:00:00 2022 GMT
            Not After : Mar 11 03:00:00 2024 GMT
        Subject: CN=7885543b92051c02579884a7d45bce0b29f5c486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ed:a0:54:3f:c2:10:e3:7f:31:4e:bd:05:0f:
                    89:49:90:d8:a6:de:0f:47:06:98:4b:37:2f:d8:bf:
                    92:55:c2:0c:14:15:3f:02:7f:d2:37:82:f5:e8:b1:
                    4b:5c:a0:90:2c:9a:45:87:d6:97:4b:34:33:80:07:
                    f9:83:2f:18:46:5e:d2:5b:4b:02:fd:ee:51:c1:25:
                    57:91:e0:bb:04:9b:f1:a0:1f:fb:44:3b:ee:52:e8:
                    96:be:d1:bf:c2:2c:b8:05:48:a2:93:27:b2:54:b4:
                    c6:03:2b:36:e0:3e:9c:b1:20:a9:28:f2:cb:fc:7b:
                    ec:91:bd:c6:f8:54:a8:3e:fb:65:ad:2e:ad:f4:e8:
                    60:86:97:e0:9a:46:37:4b:e3:38:55:96:95:47:f8:
                    65:4a:a4:78:82:16:74:46:69:49:75:c0:e2:39:2c:
                    10:36:19:0c:da:75:e2:d3:cb:95:c8:a0:4d:2c:63:
                    20:59:43:c8:50:0b:8c:88:93:16:e0:59:7c:b9:4b:
                    84:15:54:a5:1e:ee:c2:4f:55:e5:1c:9a:aa:04:49:
                    eb:38:76:12:ad:17:92:44:33:81:f4:7d:bb:6d:09:
                    7c:b2:63:be:2d:93:18:86:d0:47:72:bf:eb:cb:1e:
                    2b:06:a9:e2:4b:54:76:af:40:71:8d:8c:ff:ec:64:
                    58:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1B:12:E8:20:B6:BF:2D:3E:0B:E1:10:0D:6B:7D:06:EB:11:76:1B
            X509v3 Authority Key Identifier:
                keyid:84:96:20:9C:D7:47:06:AF:C2:79:A2:8D:98:41:D2:8D:9A:E4:A3:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/184d3b86d27c4f19e6eba3cae294a8f07eec2a0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd295502-f344-44f2-9e00-bbbf2f1e50d9/7885543b92051c02579884a7d45bce0b29f5c486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd295502-f344-44f2-9e00-bbbf2f1e50d9/184d3b86d27c4f19e6eba3cae294a8f07eec2a0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.32.0/22
                IPv6:
                  2803:3540::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:50:96:df:57:1e:34:92:ed:56:87:b5:d2:d4:ec:aa:ac:67:
         7b:e1:e0:54:c1:48:63:c9:db:0c:a8:b1:2a:67:12:78:f8:bc:
         92:8d:ad:fa:d3:a9:d4:8a:c0:c1:9f:04:72:d1:4e:4c:19:9f:
         5c:50:21:b3:fe:6f:82:18:c6:aa:f0:38:46:98:02:f6:d9:0a:
         ef:d9:03:63:62:73:be:db:ee:b7:cb:ca:e4:32:f1:7e:4d:a6:
         30:c3:bb:8a:75:ad:62:5a:01:a8:5a:e4:f2:3e:e7:42:16:23:
         0f:69:5f:6f:ff:dd:73:48:f2:53:b8:d5:bb:fb:e6:5c:e1:4d:
         30:48:98:80:51:79:de:26:bd:92:c7:d8:23:4e:ab:e1:95:2f:
         1c:71:19:8a:25:cb:05:a4:52:21:aa:1f:39:73:07:f8:06:10:
         22:94:f8:de:0b:02:98:59:41:17:90:c4:67:c3:2d:6f:33:88:
         e3:03:15:67:5d:66:31:3b:64:dc:17:fb:af:04:85:aa:76:68:
         36:73:d4:42:83:00:fd:d1:20:3f:05:a2:93:ac:59:91:a1:8b:
         16:b7:4c:1f:3e:db:8c:bc:7e:01:37:a6:f0:60:63:d6:52:22:
         08:4f:ac:ad:a0:c6:c4:31:47:ab:da:0c:bd:ac:ff:36:7f:47:
         91:da:bf:63
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTg0
ZDNiODZkMjdjNGYxOWU2ZWJhM2NhZTI5NGE4ZjA3ZWVjMmEwYzAeFw0yMjAzMTEw
MzAwMDBaFw0yNDAzMTEwMzAwMDBaMDMxMTAvBgNVBAMTKDc4ODU1NDNiOTIwNTFj
MDI1Nzk4ODRhN2Q0NWJjZTBiMjlmNWM0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCI7aBUP8IQ438xTr0FD4lJkNim3g9HBphLNy/Yv5JVwgwUFT8C
f9I3gvXosUtcoJAsmkWH1pdLNDOAB/mDLxhGXtJbSwL97lHBJVeR4LsEm/GgH/tE
O+5S6Ja+0b/CLLgFSKKTJ7JUtMYDKzbgPpyxIKko8sv8e+yRvcb4VKg++2WtLq30
6GCGl+CaRjdL4zhVlpVH+GVKpHiCFnRGaUl1wOI5LBA2GQzadeLTy5XIoE0sYyBZ
Q8hQC4yIkxbgWXy5S4QVVKUe7sJPVeUcmqoESes4dhKtF5JEM4H0fbttCXyyY74t
kxiG0Edyv+vLHisGqeJLVHavQHGNjP/sZFh7AgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQU2xsS6CC2vy0+C+EQDWt9BusRdhswHwYDVR0jBBgwFoAUhJYgnNdHBq/CeaKN
mEHSjZrko2swDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8xODRkM2I4
NmQyN2M0ZjE5ZTZlYmEzY2FlMjk0YThmMDdlZWMyYTBjLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9iZDI5NTUwMi1mMzQ0LTQ0ZjItOWUwMC1iYmJmMmYx
ZTUwZDkvNzg4NTU0M2I5MjA1MWMwMjU3OTg4NGE3ZDQ1YmNlMGIyOWY1YzQ4Ni5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2JkMjk1NTAyLWYzNDQtNDRmMi05ZTAwLWJiYmYy
ZjFlNTBkOS8xODRkM2I4NmQyN2M0ZjE5ZTZlYmEzY2FlMjk0YThmMDdlZWMyYTBj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCqHkgMA0EAgACMAcDBQAoAzVAMA0GCSqGSIb3DQEBCwUAA4IB
AQBrUJbfVx40ku1Wh7XS1OyqrGd74eBUwUhjydsMqLEqZxJ4+LySja3606nUisDB
nwRy0U5MGZ9cUCGz/m+CGMaq8DhGmAL22Qrv2QNjYnO+2+63y8rkMvF+TaYww7uK
da1iWgGoWuTyPudCFiMPaV9v/91zSPJTuNW7++Zc4U0wSJiAUXneJr2Sx9gjTqvh
lS8ccRmKJcsFpFIhqh85cwf4BhAilPjeCwKYWUEXkMRnwy1vM4jjAxVnXWYxO2Tc
F/uvBIWqdmg2c9RCgwD90SA/BaKTrFmRoYsWt0wfPtuMvH4BN6bwYGPWUiIIT6yt
oMbEMUer2gy9rP82f0eR2r9j
-----END CERTIFICATE-----