Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c4b59555-d1fb-4ff5-9ce0-131206a12704/155cb8a972a560a1e1c0ff6504da3a9e7b6d7fa0.roa
File:                     155cb8a972a560a1e1c0ff6504da3a9e7b6d7fa0.roa (raw, json)
Hash identifier:          jE5Ee6tmy9nRHZfYXygIDz7qkeNr8p1AQs6vegP8Zcg=
Subject key identifier:   EB:58:9E:ED:7A:A8:36:81:5E:A3:F4:3A:B3:0E:E1:88:DF:68:47:32
Certificate issuer:       /CN=5420a10b253118314e8ba9dbb1e6269e86d377d6
Certificate serial:       0D31FB
Authority key identifier: 72:57:95:28:F4:3F:BB:6C:B8:83:A5:6E:66:75:91:34:13:93:A5:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5420a10b253118314e8ba9dbb1e6269e86d377d6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c4b59555-d1fb-4ff5-9ce0-131206a12704/155cb8a972a560a1e1c0ff6504da3a9e7b6d7fa0.roa
Signing time:             Wed 24 Mar 2021 14:34:11 +0000
ROA not before:           Wed 24 Mar 2021 14:34:11 +0000
ROA not after:            Tue 24 Mar 2026 14:34:11 +0000
asID:                     262167
IP address blocks:        186.148.208.0/24 maxlen: 24
                          186.148.209.0/24 maxlen: 24
                          186.148.210.0/24 maxlen: 24
                          186.148.211.0/24 maxlen: 24
                          2800:990::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864763 (0xd31fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5420a10b253118314e8ba9dbb1e6269e86d377d6
        Validity
            Not Before: Mar 24 14:34:11 2021 GMT
            Not After : Mar 24 14:34:11 2026 GMT
        Subject: CN=155cb8a972a560a1e1c0ff6504da3a9e7b6d7fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:4c:50:9f:13:7c:17:d8:6f:a1:a1:d4:79:
                    e0:49:31:c3:5f:d9:4d:24:5e:25:44:70:f5:91:87:
                    39:aa:e2:2e:ff:c5:0e:a0:4f:18:fb:96:4d:6c:5f:
                    b6:16:ac:96:8a:23:c4:f0:3f:20:41:f8:26:d4:b2:
                    2a:ed:f8:86:42:20:8a:4c:99:96:37:35:84:c7:a9:
                    ea:f1:0d:15:7a:31:29:dd:f1:58:f0:3e:e5:98:32:
                    27:b1:c0:ed:82:89:44:0f:36:c6:8e:04:52:11:ae:
                    86:1a:20:31:1c:aa:2b:c5:b9:7a:2c:9a:29:f0:c6:
                    0b:f2:a8:1f:f2:47:ca:c8:fd:5d:a3:2c:ca:eb:47:
                    e3:bc:35:e5:5d:47:bf:82:62:d6:da:4f:c8:4b:ca:
                    f9:89:de:66:6b:3a:0a:16:56:49:9b:52:20:83:1a:
                    b0:06:40:3d:05:3b:b8:cb:23:14:45:11:8a:37:76:
                    d2:5d:36:5c:55:d9:1b:c6:2f:22:56:69:04:21:e5:
                    c4:e4:5c:39:7e:de:de:66:6e:fb:f4:55:07:e4:a2:
                    c9:99:98:9d:64:a6:52:69:f1:25:e3:fd:bb:1a:dd:
                    8b:ec:73:c8:f2:76:9f:6b:7f:cb:70:ad:ae:0e:11:
                    ce:7e:9f:42:a1:75:bc:57:f7:f8:59:0b:99:e9:c9:
                    d8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:58:9E:ED:7A:A8:36:81:5E:A3:F4:3A:B3:0E:E1:88:DF:68:47:32
            X509v3 Authority Key Identifier:
                keyid:72:57:95:28:F4:3F:BB:6C:B8:83:A5:6E:66:75:91:34:13:93:A5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5420a10b253118314e8ba9dbb1e6269e86d377d6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c4b59555-d1fb-4ff5-9ce0-131206a12704/155cb8a972a560a1e1c0ff6504da3a9e7b6d7fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c4b59555-d1fb-4ff5-9ce0-131206a12704/5420a10b253118314e8ba9dbb1e6269e86d377d6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.208.0/22
                IPv6:
                  2800:990::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:a0:57:0d:61:ed:5f:c0:82:ff:cb:34:be:be:38:7d:e1:ae:
         68:7c:d7:c9:c1:1c:c9:26:9c:a7:b8:03:5e:28:7c:ab:ac:ba:
         5c:b2:3f:61:83:69:80:8a:f0:08:74:6a:a6:17:ac:b3:35:90:
         b4:87:93:ba:5a:ca:85:40:cb:dd:77:5b:5d:d5:79:7a:e0:9e:
         b7:5a:c2:1d:4d:f1:fd:b4:26:02:75:b9:de:f5:e2:07:b1:60:
         1a:2b:d6:33:fe:99:52:0e:0f:76:0e:25:ec:21:8f:c6:59:6b:
         e0:b7:6e:90:02:5b:9d:2f:db:7a:5b:f9:50:0c:0e:38:7d:ab:
         f8:24:b2:fc:ea:d7:9b:c7:60:ea:84:ad:65:5c:74:9c:27:31:
         01:1b:54:95:b7:1c:23:c9:fb:81:d2:0a:07:9e:66:2e:07:fe:
         8a:4b:c8:d4:56:fa:4b:61:da:a6:78:29:a0:68:8c:eb:f5:a4:
         68:eb:a3:a2:8d:73:83:78:36:5a:52:b6:8b:ac:7d:2b:b6:c3:
         57:09:11:92:2a:90:41:a5:4b:c6:de:d1:cd:8d:7c:52:40:02:
         3a:d2:12:06:06:53:18:dc:7a:97:58:0f:5f:f9:fd:e7:0f:c1:
         cf:2f:25:d2:69:84:53:ed:ea:f1:20:8e:3b:cd:48:f5:fd:a8:
         d7:83:33:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDTH7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU0
MjBhMTBiMjUzMTE4MzE0ZThiYTlkYmIxZTYyNjllODZkMzc3ZDYwHhcNMjEwMzI0
MTQzNDExWhcNMjYwMzI0MTQzNDExWjAzMTEwLwYDVQQDEygxNTVjYjhhOTcyYTU2
MGExZTFjMGZmNjUwNGRhM2E5ZTdiNmQ3ZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvIpMUJ8TfBfYb6Gh1HngSTHDX9lNJF4lRHD1kYc5quIu/8UO
oE8Y+5ZNbF+2FqyWiiPE8D8gQfgm1LIq7fiGQiCKTJmWNzWEx6nq8Q0VejEp3fFY
8D7lmDInscDtgolEDzbGjgRSEa6GGiAxHKorxbl6LJop8MYL8qgf8kfKyP1doyzK
60fjvDXlXUe/gmLW2k/IS8r5id5mazoKFlZJm1IggxqwBkA9BTu4yyMURRGKN3bS
XTZcVdkbxi8iVmkEIeXE5Fw5ft7eZm779FUH5KLJmZidZKZSafEl4/27Gt2L7HPI
8nafa3/LcK2uDhHOfp9CoXW8V/f4WQuZ6cnYLwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFOtYnu16qDaBXqP0OrMO4YjfaEcyMB8GA1UdIwQYMBaAFHJXlSj0P7tsuIOl
bmZ1kTQTk6W7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTQyMGEx
MGIyNTMxMTgzMTRlOGJhOWRiYjFlNjI2OWU4NmQzNzdkNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzRiNTk1NTUtZDFmYi00ZmY1LTljZTAtMTMxMjA2
YTEyNzA0LzE1NWNiOGE5NzJhNTYwYTFlMWMwZmY2NTA0ZGEzYTllN2I2ZDdmYTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNGI1OTU1NS1kMWZiLTRmZjUtOWNlMC0xMzEy
MDZhMTI3MDQvNTQyMGExMGIyNTMxMTgzMTRlOGJhOWRiYjFlNjI2OWU4NmQzNzdk
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArqU0DANBAIAAjAHAwUAKAAJkDANBgkqhkiG9w0BAQsFAAOC
AQEASqBXDWHtX8CC/8s0vr44feGuaHzXycEcySacp7gDXih8q6y6XLI/YYNpgIrw
CHRqphesszWQtIeTulrKhUDL3XdbXdV5euCet1rCHU3x/bQmAnW53vXiB7FgGivW
M/6ZUg4Pdg4l7CGPxllr4LdukAJbnS/belv5UAwOOH2r+CSy/OrXm8dg6oStZVx0
nCcxARtUlbccI8n7gdIKB55mLgf+ikvI1Fb6S2HapngpoGiM6/WkaOujoo1zg3g2
WlK2i6x9K7bDVwkRkiqQQaVLxt7RzY18UkACOtISBgZTGNx6l1gPX/n95w/Bzy8l
0mmEU+3q8SCOO81I9f2o14Mzzw==
-----END CERTIFICATE-----