Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/417dd5aad243df205199cbe4c4d6f28db9437da5.roa
File:                     417dd5aad243df205199cbe4c4d6f28db9437da5.roa (raw, json)
Hash identifier:          xRoAL/ZgFIRUTO/V3zFB3KHtIxrF8paLZ0WXWw8Tj30=
Subject key identifier:   B1:89:5E:4D:E2:D5:FA:38:0C:CB:55:46:5B:D1:46:3B:19:F4:0F:52
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       293323
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/417dd5aad243df205199cbe4c4d6f28db9437da5.roa
Signing time:             Thu 30 Nov 2023 18:11:56 +0000
ROA not before:           Thu 30 Nov 2023 18:11:56 +0000
ROA not after:            Sun 30 Nov 2025 18:11:56 +0000
asID:                     3816
IP address blocks:        181.236.96.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2700067 (0x293323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Nov 30 18:11:56 2023 GMT
            Not After : Nov 30 18:11:56 2025 GMT
        Subject: CN=417dd5aad243df205199cbe4c4d6f28db9437da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c8:e7:94:6e:35:e8:8f:e7:66:fb:fa:a3:97:
                    fe:c9:4e:1c:0d:95:c2:20:a2:9a:39:95:5b:2c:06:
                    5a:d5:72:f8:66:ab:97:19:0c:59:43:cb:9e:af:66:
                    ec:de:67:dd:3a:99:c3:eb:71:8e:70:14:12:bf:cb:
                    1e:6d:c3:b9:fc:b1:0b:d8:3d:52:c0:c9:6b:c7:b4:
                    28:23:70:e0:d6:4d:52:3a:5f:66:e3:7f:9d:81:aa:
                    68:2f:2c:1b:d1:e6:89:e5:9b:95:44:e7:b9:78:46:
                    31:31:8c:2e:6f:57:da:15:28:6a:21:b4:a1:df:ba:
                    7f:4a:f0:ff:95:73:18:92:4d:76:ab:b9:32:97:60:
                    92:01:c6:d8:6b:07:8f:f8:60:4b:7d:56:94:7b:58:
                    92:3d:bf:77:18:94:df:50:72:dc:35:0b:50:f4:9b:
                    e0:c1:94:94:a2:9e:2f:1a:53:3d:92:0e:aa:8c:fa:
                    ec:aa:09:6e:43:b1:ad:f0:5f:ef:66:cc:68:b8:3a:
                    93:cd:1e:81:34:f3:68:ca:3d:7b:df:6c:c0:0d:ee:
                    10:e2:9f:0a:65:4f:b1:35:dd:35:9c:db:1e:d4:db:
                    22:27:00:19:7d:c2:49:63:df:81:73:cb:fa:e9:36:
                    56:00:1b:5a:9d:e2:44:4a:b4:d1:9d:ec:25:72:a5:
                    e0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:89:5E:4D:E2:D5:FA:38:0C:CB:55:46:5B:D1:46:3B:19:F4:0F:52
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/417dd5aad243df205199cbe4c4d6f28db9437da5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.236.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:fc:11:da:d2:3b:15:bb:f6:74:5b:96:fc:bc:2b:4f:ed:9a:
         c7:0d:2a:8e:01:15:96:d2:36:23:85:48:fb:56:44:0c:af:db:
         84:c0:3b:39:96:bf:52:35:95:cb:db:03:08:2b:49:8b:93:8d:
         02:90:16:e6:49:db:93:f5:5c:7c:50:f9:cf:ec:7a:16:3f:ee:
         74:01:dd:3d:76:af:77:b8:b7:eb:97:9b:81:c1:b3:23:eb:07:
         b6:d9:83:ae:39:71:7a:66:10:88:31:b7:36:88:78:f0:bc:d8:
         32:72:f4:6b:c8:5b:f4:45:9f:4a:c9:74:cc:0c:31:41:40:6f:
         2a:cf:66:7d:75:5f:68:ef:94:19:ae:aa:19:a8:16:bb:7e:45:
         d2:84:df:3d:b6:d7:60:bc:71:6d:b8:a0:ea:d2:83:7a:0e:ec:
         68:17:5f:e5:26:74:f6:a3:2b:2a:eb:8a:29:6e:d2:33:83:8b:
         e2:2d:93:ab:82:42:38:18:9a:60:0b:af:f5:ee:f7:89:64:c5:
         4a:fe:a9:cb:16:fe:af:dc:c7:be:d6:1f:18:18:00:66:1a:80:
         05:00:41:d5:91:2f:3e:e7:32:d8:b8:12:4b:ca:ad:78:92:32:
         ae:4d:49:19:af:14:cd:b4:6a:b0:cb:fb:7c:18:79:3f:2e:83:
         94:16:d8:c5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKTMjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIz
NTgwMDc4ZjRmODk3ZmNmZGJhYTBkOTBjMmVjNmY0NjBlMzMyMjIwHhcNMjMxMTMw
MTgxMTU2WhcNMjUxMTMwMTgxMTU2WjAzMTEwLwYDVQQDEyg0MTdkZDVhYWQyNDNk
ZjIwNTE5OWNiZTRjNGQ2ZjI4ZGI5NDM3ZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkMjnlG416I/nZvv6o5f+yU4cDZXCIKKaOZVbLAZa1XL4ZquX
GQxZQ8uer2bs3mfdOpnD63GOcBQSv8sebcO5/LEL2D1SwMlrx7QoI3Dg1k1SOl9m
43+dgapoLywb0eaJ5ZuVROe5eEYxMYwub1faFShqIbSh37p/SvD/lXMYkk12q7ky
l2CSAcbYaweP+GBLfVaUe1iSPb93GJTfUHLcNQtQ9JvgwZSUop4vGlM9kg6qjPrs
qgluQ7Gt8F/vZsxouDqTzR6BNPNoyj1732zADe4Q4p8KZU+xNd01nNse1NsiJwAZ
fcJJY9+Bc8v66TZWABtaneJESrTRnewlcqXgyQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLGJXk3i1fo4DMtVRlvRRjsZ9A9SMB8GA1UdIwQYMBaAFN/Gyo1ROTKXljh0
TDeMs6BDDpW1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjM1ODAw
NzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIyMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzIwYjU1OGEtODllMC00YzllLWI2YzgtZDdjNjk0
NjMyMTIwLzQxN2RkNWFhZDI0M2RmMjA1MTk5Y2JlNGM0ZDZmMjhkYjk0MzdkYTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMjBiNTU4YS04OWUwLTRjOWUtYjZjOC1kN2M2
OTQ2MzIxMjAvYjM1ODAwNzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIy
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBbXsYDANBgkqhkiG9w0BAQsFAAOCAQEABPwR2tI7Fbv2dFuW
/LwrT+2axw0qjgEVltI2I4VI+1ZEDK/bhMA7OZa/UjWVy9sDCCtJi5ONApAW5knb
k/VcfFD5z+x6Fj/udAHdPXavd7i365ebgcGzI+sHttmDrjlxemYQiDG3Noh48LzY
MnL0a8hb9EWfSsl0zAwxQUBvKs9mfXVfaO+UGa6qGagWu35F0oTfPbbXYLxxbbig
6tKDeg7saBdf5SZ09qMrKuuKKW7SM4OL4i2Tq4JCOBiaYAuv9e73iWTFSv6pyxb+
r9zHvtYfGBgAZhqABQBB1ZEvPucy2LgSS8qteJIyrk1JGa8UzbRqsMv7fBh5Py6D
lBbYxQ==
-----END CERTIFICATE-----