Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/bfc60c5fd8b499358e5396101013077f52c6a96e.roa
File:                     bfc60c5fd8b499358e5396101013077f52c6a96e.roa (raw, json)
Hash identifier:          fpeMu62FK+1vZkNtcFA+K9ZrZGBLEpJajRjo8bqNUfc=
Subject key identifier:   EE:98:8B:E6:C4:A6:B5:02:9A:CD:E3:01:93:95:FD:05:F5:05:2D:36
Certificate issuer:       /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial:       194800
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/bfc60c5fd8b499358e5396101013077f52c6a96e.roa
Signing time:             Wed 13 Jul 2022 12:17:35 +0000
ROA not before:           Wed 13 Jul 2022 03:00:00 +0000
ROA not after:            Sat 13 Jul 2024 03:00:00 +0000
asID:                     211866
IP address blocks:        179.0.14.0/24 maxlen: 24
                          200.13.42.0/23 maxlen: 24
                          200.33.82.0/24 maxlen: 24
                          2801:0:440::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656832 (0x194800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
        Validity
            Not Before: Jul 13 03:00:00 2022 GMT
            Not After : Jul 13 03:00:00 2024 GMT
        Subject: CN=bfc60c5fd8b499358e5396101013077f52c6a96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:49:db:25:c7:a1:10:6a:ab:db:78:2d:1b:a3:
                    93:79:91:f5:54:f7:a8:3d:7a:eb:97:8e:ba:08:55:
                    48:38:d0:74:10:31:00:52:ce:6c:77:df:8a:30:27:
                    f6:56:7e:f8:70:07:47:8a:b8:2d:6f:c5:12:42:1d:
                    77:25:e4:a4:88:33:9a:37:c0:f7:4d:e7:88:a5:e8:
                    d8:99:5b:8a:58:46:93:3f:e5:87:d3:fa:cb:8d:d6:
                    ed:28:f3:18:27:88:66:f7:3c:3f:00:7c:1c:7a:8b:
                    e9:34:32:80:59:b7:73:96:97:ad:e4:f6:e4:37:f5:
                    a9:f4:11:79:9d:b7:c6:1f:79:cb:2b:e1:a6:db:94:
                    a0:0b:fe:e3:02:c9:52:9f:2d:c8:5a:bc:ae:bd:d6:
                    2e:1f:ee:16:09:72:cf:ab:dc:c9:9f:d7:4b:7a:2d:
                    a5:99:17:07:dd:d5:ba:64:54:fd:7d:42:bd:29:ed:
                    a2:0a:ec:ff:07:e8:10:d5:51:bd:96:10:06:2a:08:
                    4c:b9:7f:21:76:5c:a8:cb:b6:71:e4:68:24:55:1a:
                    a9:a9:d8:d3:de:a4:72:46:85:1b:2d:70:31:17:a2:
                    0e:39:a7:43:23:40:4e:11:f4:55:c2:91:a2:97:41:
                    21:41:f5:98:e9:95:f4:dc:b2:f4:d6:7a:b7:6b:97:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:98:8B:E6:C4:A6:B5:02:9A:CD:E3:01:93:95:FD:05:F5:05:2D:36
            X509v3 Authority Key Identifier:
                keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/bfc60c5fd8b499358e5396101013077f52c6a96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24
                  200.13.42.0/23
                  200.33.82.0/24
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:f6:47:5c:dd:d4:1b:12:2d:37:34:c1:ea:e2:79:35:b5:b9:
         77:43:40:71:4b:0b:70:86:77:92:e8:3b:7d:14:22:f3:15:cb:
         3b:1d:b6:fd:35:86:ea:85:f8:38:ae:39:43:e9:10:a6:71:0c:
         5d:57:ac:83:40:b9:cc:a4:18:2f:e6:b1:fe:d5:ba:4c:30:9b:
         c5:52:b8:60:b9:eb:6a:9a:66:12:e7:c5:62:0e:fb:f6:d6:40:
         75:e7:64:c3:41:57:0d:6f:26:db:c6:ac:d5:d1:9a:d9:5a:3f:
         10:36:67:8a:47:f4:d0:3e:ee:d0:63:54:97:fc:23:46:f5:fe:
         47:ff:33:e2:15:6f:db:39:34:bd:4d:05:a5:ad:e2:a4:e4:1e:
         c3:be:0a:89:c3:ce:37:9c:6c:92:01:2a:78:44:55:ff:44:4b:
         ed:d8:6e:6d:77:41:84:f9:9b:2f:26:a3:d7:f1:33:71:3b:cb:
         e2:f3:bf:17:eb:77:f9:a8:d3:62:c6:7f:b1:5b:d4:bf:01:ce:
         83:91:78:ec:93:ca:16:34:2e:1a:22:12:63:a6:e0:24:79:36:
         5f:ce:07:ee:d9:18:34:eb:bb:90:78:2e:6e:7f:ee:90:4d:2b:
         cf:68:b5:c8:07:5a:76:fd:9b:c9:25:ac:83:c7:28:91:c3:26:
         14:8f:42:ce
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIDGUgAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEw
YTlmY2U4Y2I5MjkxMzRmNTk3YTE1NWQ0MDhmNTA2NDI2MWZiNmYwHhcNMjIwNzEz
MDMwMDAwWhcNMjQwNzEzMDMwMDAwWjAzMTEwLwYDVQQDEyhiZmM2MGM1ZmQ4YjQ5
OTM1OGU1Mzk2MTAxMDEzMDc3ZjUyYzZhOTZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiknbJcehEGqr23gtG6OTeZH1VPeoPXrrl466CFVIONB0EDEA
Us5sd9+KMCf2Vn74cAdHirgtb8USQh13JeSkiDOaN8D3TeeIpejYmVuKWEaTP+WH
0/rLjdbtKPMYJ4hm9zw/AHwceovpNDKAWbdzlpet5PbkN/Wp9BF5nbfGH3nLK+Gm
25SgC/7jAslSny3IWryuvdYuH+4WCXLPq9zJn9dLei2lmRcH3dW6ZFT9fUK9Ke2i
Cuz/B+gQ1VG9lhAGKghMuX8hdlyoy7Zx5GgkVRqpqdjT3qRyRoUbLXAxF6IOOadD
I0BOEfRVwpGil0EhQfWY6ZX03LL01nq3a5dXjwIDAQABo4ICeDCCAnQwHQYDVR0O
BBYEFO6Yi+bEprUCms3jAZOV/QX1BS02MB8GA1UdIwQYMBaAFCEfYxpZZZEdsjxZ
SAyTlc9eIW08MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTBhOWZj
ZThjYjkyOTEzNGY1OTdhMTU1ZDQwOGY1MDY0MjYxZmI2Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDJkNjA4NTUtZTFmNC00ZTZkLWJjY2EtZjljMDAy
MDE3YmFjL2JmYzYwYzVmZDhiNDk5MzU4ZTUzOTYxMDEwMTMwNzdmNTJjNmE5NmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMmQ2MDg1NS1lMWY0LTRlNmQtYmNjYS1mOWMw
MDIwMTdiYWMvYTBhOWZjZThjYjkyOTEzNGY1OTdhMTU1ZDQwOGY1MDY0MjYxZmI2
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQt
MCswGAQCAAEwEgMEALMADgMEAcgNKgMEAMghUjAPBAIAAjAJAwcAKAEAAARAMA0G
CSqGSIb3DQEBCwUAA4IBAQCk9kdc3dQbEi03NMHq4nk1tbl3Q0BxSwtwhneS6Dt9
FCLzFcs7Hbb9NYbqhfg4rjlD6RCmcQxdV6yDQLnMpBgv5rH+1bpMMJvFUrhguetq
mmYS58ViDvv21kB152TDQVcNbybbxqzV0ZrZWj8QNmeKR/TQPu7QY1SX/CNG9f5H
/zPiFW/bOTS9TQWlreKk5B7DvgqJw843nGySASp4RFX/REvt2G5td0GE+ZsvJqPX
8TNxO8vi878X63f5qNNixn+xW9S/Ac6DkXjsk8oWNC4aIhJjpuAkeTZfzgfu2Rg0
67uQeC5uf+6QTSvPaLXIB1p2/ZvJJayDxyiRwyYUj0LO
-----END CERTIFICATE-----