Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5f9fc00ef5055e4fa11cb9a446b1a0784890242e.roa
File:                     5f9fc00ef5055e4fa11cb9a446b1a0784890242e.roa (raw, json)
Hash identifier:          OoY4husNOKhqRKBS0THl8T1NS5Zust1M4jtg9aZuZDk=
Subject key identifier:   24:AB:66:9D:2D:50:B6:AB:E3:94:40:18:45:5F:B7:03:22:F7:2F:F1
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A4C33
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5f9fc00ef5055e4fa11cb9a446b1a0784890242e.roa
Signing time:             Wed 14 Feb 2024 13:39:41 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     27789
IP address blocks:        190.93.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2772019 (0x2a4c33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=5f9fc00ef5055e4fa11cb9a446b1a0784890242e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:bd:5a:92:f4:94:61:50:25:d0:17:22:45:e8:
                    22:f1:4f:3a:84:51:37:82:c8:e8:4d:35:3f:0e:09:
                    44:48:fb:56:cd:6b:5e:90:7d:ea:3a:ee:de:25:a4:
                    cf:13:07:fb:ce:4a:7f:89:fa:92:ff:5b:e6:ca:63:
                    11:bb:4e:1a:b7:74:ec:df:c8:84:e4:3a:23:a5:aa:
                    9d:ce:f3:86:f5:cd:3e:d9:dc:9d:62:12:ae:7a:dd:
                    a6:00:4e:0f:2a:53:43:12:0d:30:76:24:1f:58:92:
                    bd:ec:38:8c:f8:3a:9e:e7:0a:7a:c2:5b:02:c0:48:
                    04:f0:d7:7a:50:29:3f:93:47:c3:11:14:ee:28:87:
                    7f:4d:13:35:af:3a:c0:bb:3e:80:67:e9:be:77:aa:
                    f1:cc:12:62:f3:e4:b4:94:4b:2a:e9:84:13:d0:a4:
                    bc:d7:de:a8:13:4d:00:cd:36:6f:97:97:4d:48:d4:
                    55:92:cd:9f:12:da:58:71:25:6d:25:0d:28:87:59:
                    cf:70:1b:2a:df:2b:46:97:e0:7e:26:83:6d:66:0c:
                    ad:83:9f:e6:77:ad:e4:64:48:eb:32:d9:a4:23:d7:
                    d9:a6:0f:b8:b2:b6:bd:c5:ca:b7:33:61:d0:3b:2c:
                    10:1c:a3:a4:bb:f6:ce:a6:15:4e:2a:c3:84:82:9d:
                    35:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AB:66:9D:2D:50:B6:AB:E3:94:40:18:45:5F:B7:03:22:F7:2F:F1
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/5f9fc00ef5055e4fa11cb9a446b1a0784890242e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:90:80:1b:b4:09:7c:e4:10:c3:9b:19:a5:e9:5f:1e:14:
         6b:3e:97:d6:cb:87:34:1b:0d:7e:5e:0a:a5:66:55:7b:1a:2f:
         fc:fa:f2:06:4e:19:7a:e6:18:c9:91:db:3c:14:49:15:c2:12:
         63:dd:36:c7:cf:f8:a6:32:92:7f:87:21:5b:28:ea:d7:ae:e3:
         c0:e4:98:06:b2:d8:87:f1:a9:a4:7b:67:f1:22:5a:e5:e9:2a:
         89:97:cb:90:41:d2:96:82:79:30:08:60:57:75:40:17:54:6a:
         75:e9:11:8b:af:aa:69:fa:34:ef:af:e5:81:e0:28:8b:62:6b:
         e4:36:0b:d1:f7:0a:fe:53:f0:f9:37:02:92:ad:23:07:fd:b0:
         b6:f4:66:9e:1e:ff:8f:69:ee:67:a9:17:74:7b:49:12:c2:38:
         84:d5:9b:45:af:ce:2c:c4:7b:ec:68:20:b2:fc:65:b5:36:da:
         b6:93:af:d0:7e:cc:d8:f6:5a:6b:0e:60:30:79:df:80:e2:2d:
         78:a5:ee:85:d2:fa:88:96:26:24:32:67:67:ef:28:aa:cc:54:
         ed:d7:f3:e2:9b:f0:46:d1:e7:40:99:2f:bd:32:21:99:7e:d5:
         98:4b:bf:d1:94:37:ce:2f:a9:30:af:70:30:22:a3:24:0b:c1:
         8b:b8:91:c7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKkwzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
ZmI1Y2Q5OTNkMzQ4MjVkY2ExYWZjNGNhZGVhZjg0OTNkYmRiZGQwHhcNMjQwMjE0
MTMzOTM0WhcNMjkwMjE0MTMzOTM0WjAzMTEwLwYDVQQDEyg1ZjlmYzAwZWY1MDU1
ZTRmYTExY2I5YTQ0NmIxYTA3ODQ4OTAyNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA971akvSUYVAl0BciRegi8U86hFE3gsjoTTU/DglESPtWzWte
kH3qOu7eJaTPEwf7zkp/ifqS/1vmymMRu04at3Ts38iE5DojpaqdzvOG9c0+2dyd
YhKuet2mAE4PKlNDEg0wdiQfWJK97DiM+Dqe5wp6wlsCwEgE8Nd6UCk/k0fDERTu
KId/TRM1rzrAuz6AZ+m+d6rxzBJi8+S0lEsq6YQT0KS8196oE00AzTZvl5dNSNRV
ks2fEtpYcSVtJQ0oh1nPcBsq3ytGl+B+JoNtZgytg5/md63kZEjrMtmkI9fZpg+4
sra9xcq3M2HQOywQHKOku/bOphVOKsOEgp01twIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCSrZp0tULar45RAGEVftwMi9y/xMB8GA1UdIwQYMBaAFPt84Eo2/gXQEbvk
w1q2h+jw4qG8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTlmYjVj
ZDk5M2QzNDgyNWRjYTFhZmM0Y2FkZWFmODQ5M2RiZGJkZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzVmOWZjMDBlZjUwNTVlNGZhMTFjYjlhNDQ2YjFhMDc4NDg5MDI0MmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvYTlmYjVjZDk5M2QzNDgyNWRjYTFhZmM0Y2FkZWFmODQ5M2RiZGJk
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBb5dYDANBgkqhkiG9w0BAQsFAAOCAQEAaK6QgBu0CXzkEMOb
GaXpXx4Uaz6X1suHNBsNfl4KpWZVexov/PryBk4ZeuYYyZHbPBRJFcISY902x8/4
pjKSf4chWyjq167jwOSYBrLYh/GppHtn8SJa5ekqiZfLkEHSloJ5MAhgV3VAF1Rq
dekRi6+qafo076/lgeAoi2Jr5DYL0fcK/lPw+TcCkq0jB/2wtvRmnh7/j2nuZ6kX
dHtJEsI4hNWbRa/OLMR77GggsvxltTbatpOv0H7M2PZaaw5gMHnfgOIteKXuhdL6
iJYmJDJnZ+8oqsxU7dfz4pvwRtHnQJkvvTIhmX7VmEu/0ZQ3zi+pMK9wMCKjJAvB
i7iRxw==
-----END CERTIFICATE-----