Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/9e98f26369b10d13c7c21683f772585f1facbe70.roa
File:                     9e98f26369b10d13c7c21683f772585f1facbe70.roa (raw, json)
Hash identifier:          E/tEhKl/6QMsiMx71FaMeO08zOGfBn+VbK3P7scgBQA=
Subject key identifier:   28:D5:27:43:8C:30:1E:E3:89:F6:84:CE:4C:13:10:D4:31:15:C1:70
Certificate issuer:       /CN=92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8
Certificate serial:       0D7388
Authority key identifier: 51:07:E5:8C:65:19:19:3D:C1:BB:72:06:A9:34:B2:86:11:03:F6:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/9e98f26369b10d13c7c21683f772585f1facbe70.roa
Signing time:             Wed 24 Mar 2021 14:40:21 +0000
ROA not before:           Wed 24 Mar 2021 14:40:21 +0000
ROA not after:            Tue 24 Mar 2026 14:40:21 +0000
asID:                     263174
IP address blocks:        200.29.240.0/24 maxlen: 24
                          200.29.241.0/24 maxlen: 24
                          200.29.242.0/24 maxlen: 24
                          200.29.243.0/24 maxlen: 24
                          200.29.244.0/24 maxlen: 24
                          200.29.247.0/24 maxlen: 24
                          2803:2200::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881544 (0xd7388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8
        Validity
            Not Before: Mar 24 14:40:21 2021 GMT
            Not After : Mar 24 14:40:21 2026 GMT
        Subject: CN=9e98f26369b10d13c7c21683f772585f1facbe70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:02:cc:48:9a:a0:ce:a8:11:58:f4:df:09:4a:
                    24:3e:10:0c:a6:46:90:46:4d:c7:72:0c:83:0d:13:
                    6a:9b:28:31:de:c4:4e:be:61:5c:3b:ad:95:90:18:
                    22:5a:d5:bb:bd:e1:ac:47:48:6c:b3:06:e5:27:b1:
                    23:ca:49:8e:a0:75:a4:6b:13:ce:b6:ff:79:5a:55:
                    94:95:a6:69:32:30:e4:4c:2d:ff:46:d0:5e:67:a9:
                    b2:39:24:ff:0d:7c:bc:f8:43:8d:82:a6:f4:7f:50:
                    63:d3:90:49:09:37:ac:4b:d5:66:8b:2f:ec:de:22:
                    a8:cf:8a:b1:12:ba:f5:9d:6b:5f:43:da:5a:af:e9:
                    8e:d9:df:5e:2a:af:6f:1f:29:72:59:6b:bf:98:87:
                    1f:67:84:7d:ea:66:21:fe:af:29:7c:71:00:8d:54:
                    d4:3c:76:ae:94:64:90:5b:0e:81:8b:79:6a:e0:56:
                    ff:3f:c0:86:3f:31:8c:be:44:e9:fe:5a:b5:fb:10:
                    3c:55:6e:00:17:fa:86:29:20:33:7d:10:77:42:0b:
                    6a:e9:b5:a4:75:f5:53:53:e2:8e:5b:15:19:1d:17:
                    1b:b8:e7:e9:00:98:62:43:dd:33:b3:9e:29:5a:19:
                    95:91:51:66:94:0f:fb:0f:ed:2b:b6:48:9f:8d:ec:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D5:27:43:8C:30:1E:E3:89:F6:84:CE:4C:13:10:D4:31:15:C1:70
            X509v3 Authority Key Identifier:
                keyid:51:07:E5:8C:65:19:19:3D:C1:BB:72:06:A9:34:B2:86:11:03:F6:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/9e98f26369b10d13c7c21683f772585f1facbe70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.240.0-200.29.244.255
                  200.29.247.0/24
                IPv6:
                  2803:2200::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:f6:3e:fa:fa:30:36:bb:09:47:8f:1c:7e:30:93:5e:ac:0c:
         08:29:9a:90:f3:05:5d:18:d7:d5:14:b0:81:a5:ff:c3:11:61:
         e9:a1:35:b8:36:6d:86:33:b9:0e:6a:93:06:45:78:d6:1f:5d:
         1c:45:be:e3:ba:3d:45:a6:ca:8a:2f:c9:55:72:66:23:43:f0:
         8f:a6:39:27:0a:c7:2c:1d:a0:13:5a:b9:86:55:1d:b0:80:7f:
         17:51:cc:14:10:e8:b9:fd:8a:51:7b:76:de:be:80:86:a2:64:
         3f:30:73:16:24:10:e7:92:5f:16:68:6c:f0:f9:e5:56:a4:fd:
         f8:bc:7b:8b:24:cf:5b:fe:10:3a:17:ab:44:93:83:c3:e6:8a:
         d3:74:7b:77:7f:fc:4b:b3:44:6f:e3:81:b9:94:a1:94:73:d1:
         93:fa:7a:ce:b0:be:59:04:c7:ea:1a:31:46:11:8e:56:7e:a1:
         0c:3d:94:bc:12:66:6f:d2:4a:3e:21:8a:bc:47:28:02:96:09:
         17:2a:5b:b6:4d:a2:9c:5d:8b:80:e9:27:b9:9c:c8:39:cf:fa:
         84:a2:95:6b:28:b5:6d:18:7d:5c:9a:be:bd:5e:bb:28:94:58:
         44:fe:92:6c:9f:99:db:50:e8:34:20:ce:ca:0d:90:f4:95:b2:
         bc:32:70:0e
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIDDXOIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDky
Y2E2YmQ5Zjk4YmRkYjA4MWRjZDFkODQxZDc5MTk2YTdmNGE1YzgwHhcNMjEwMzI0
MTQ0MDIxWhcNMjYwMzI0MTQ0MDIxWjAzMTEwLwYDVQQDEyg5ZTk4ZjI2MzY5YjEw
ZDEzYzdjMjE2ODNmNzcyNTg1ZjFmYWNiZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgQLMSJqgzqgRWPTfCUokPhAMpkaQRk3HcgyDDRNqmygx3sRO
vmFcO62VkBgiWtW7veGsR0hsswblJ7EjykmOoHWkaxPOtv95WlWUlaZpMjDkTC3/
RtBeZ6myOST/DXy8+EONgqb0f1Bj05BJCTesS9Vmiy/s3iKoz4qxErr1nWtfQ9pa
r+mO2d9eKq9vHylyWWu/mIcfZ4R96mYh/q8pfHEAjVTUPHaulGSQWw6Bi3lq4Fb/
P8CGPzGMvkTp/lq1+xA8VW4AF/qGKSAzfRB3Qgtq6bWkdfVTU+KOWxUZHRcbuOfp
AJhiQ90zs54pWhmVkVFmlA/7D+0rtkifjez/OwIDAQABo4ICeDCCAnQwHQYDVR0O
BBYEFCjVJ0OMMB7jifaEzkwTENQxFcFwMB8GA1UdIwQYMBaAFFEH5YxlGRk9wbty
Bqk0soYRA/YZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTJjYTZi
ZDlmOThiZGRiMDgxZGNkMWQ4NDFkNzkxOTZhN2Y0YTVjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDcwNzlmNzYtY2ZiNy00OGFmLWJiZjgtZGUyNDdm
YjJkMDQ1LzllOThmMjYzNjliMTBkMTNjN2MyMTY4M2Y3NzI1ODVmMWZhY2JlNzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNzA3OWY3Ni1jZmI3LTQ4YWYtYmJmOC1kZTI0
N2ZiMmQwNDUvOTJjYTZiZDlmOThiZGRiMDgxZGNkMWQ4NDFkNzkxOTZhN2Y0YTVj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQt
MCswGgQCAAEwFDAMAwQEyB3wAwQAyB30AwQAyB33MA0EAgACMAcDBQAoAyIAMA0G
CSqGSIb3DQEBCwUAA4IBAQBY9j76+jA2uwlHjxx+MJNerAwIKZqQ8wVdGNfVFLCB
pf/DEWHpoTW4Nm2GM7kOapMGRXjWH10cRb7juj1FpsqKL8lVcmYjQ/CPpjknCscs
HaATWrmGVR2wgH8XUcwUEOi5/YpRe3bevoCGomQ/MHMWJBDnkl8WaGzw+eVWpP34
vHuLJM9b/hA6F6tEk4PD5orTdHt3f/xLs0Rv44G5lKGUc9GT+nrOsL5ZBMfqGjFG
EY5WfqEMPZS8EmZv0ko+IYq8RygClgkXKlu2TaKcXYuA6Se5nMg5z/qEopVrKLVt
GH1cmr69XrsolFhE/pJsn5nbUOg0IM7KDZD0lbK8MnAO
-----END CERTIFICATE-----